VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21? 0.22? 0.24? T:tiaoxinv2 0.21 0.22 0.23 T:tiaoxinv1 0.24 0.25 0.26 aegis128l 0.37 0.38 0.39 T:aegis128 0.39 0.40 0.40 aegis256 0.42 0.43 0.44 T:aezv4 0.43 0.44 0.45 T:aezv3 0.45 0.47 0.48 T:aezv5 0.47 0.48 0.49 T:aeadaes128ocbtaglen128v1 0.51 0.52 0.53 T:aes128otrcv3 0.52 0.53 0.54 T:aes128otrpv3 0.52 0.53 0.54 T:aes128otrsv3 -1.12? 0.56? 0.58? T:aeadaes192ocbtaglen128v1 0.58 0.61 0.61 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrpv3 0.66 0.67 0.68 T:aes256otrsv3 0.68 0.70 0.71 T:aes256otrcv3 0.80 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysneq128128v1 0.91 0.92 0.92 T:aes128gcmv1 0.91 0.92 0.93 T:deoxysi256v141 0.95 0.97 0.98 T:deoxysneq256128v1 0.96 0.97 0.98 T:morus1280256v2 0.96 0.98 0.98 T:morus1280256v1 0.96 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280128v1 1.05 1.07 1.07 aes256gcmv1 1.12 1.14 1.16 T:morus640128v1 1.11 1.14 1.16 T:morus640128v2 1.61 1.62 1.65 T:deoxysii128v141 1.74 1.75 1.76 T:colm0v1 1.79 1.80 1.81 T:deoxyseq128128v1 1.80 1.82 1.83 T:deoxysii256v141 1.94 2.03 2.10 T:lunarkeyakv2 2.03 2.04 2.07 T:deoxyseq256128v1 2.11 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.13 2.13 T:aes128n12t8silcv3 2.28 2.31 2.35 T:norx6444v3 2.56 2.58 2.63 T:norx6441v2 2.60 2.66 2.70 T:norx6441v3 2.68 2.70 2.72 T:seakeyakv2 2.72 2.80 2.91 T:oceankeyakv2 3.06 3.08 3.10 T:lakekeyakv1 3.08 3.14 3.18 T:norx6441v1 3.18 3.20 3.22 T:lakekeyakv2 3.39 3.41 3.44 T:norx6444v2 3.76 3.82 3.86 T:norx3241v3 3.80 3.84 3.89 T:norx3241v2 3.82 3.88 3.95 T:norx6461v2 3.86 3.89 3.93 T:norx6461v3 3.83 3.91 3.95 T:norx6444v1 4.23 4.24 4.25 T:aesjambuv1 4.52 4.61 4.68 T:norx3241v1 4.61 4.66 4.70 T:norx6461v1 4.83 4.87 5.03 T:acorn128v2 4.96 5.21 5.25 T:acorn128v3 5.63 5.85 5.91 T:norx3261v3 5.88 5.92 5.96 T:norx3261v2 5.78 6.02 6.14 T:ketjemajorv2 6.19 6.21 6.22 ascon128av12 6.35 6.36 6.39 T:ascon128av11 6.34 6.36 6.38 T:ascon96v1 6.90 7.15 7.30 T:ketjeminorv2 7.22 7.25 7.27 T:riverkeyakv2 7.36 7.42 7.46 T:norx3261v1 9.08 9.11 9.23 T:ascon128v11 9.09 9.11 9.22 T:ascon128v1 9.17 9.18 9.19 ascon128v12 11.76 11.79 11.81 T:aes128otrpv2 11.76 11.79 11.82 T:aes128otrpv1 12.24 12.27 12.30 T:aes128otrsv2 12.22 12.32 12.35 T:aes128otrsv1 14.50 14.51 14.52 T:twine80n6t4clocv3 15.26 15.29 15.31 T:aes256otrpv2 15.27 15.29 15.33 T:aes256otrpv1 15.39 15.42 15.44 T:aes256otrsv1 15.42 15.45 15.50 T:aes256otrsv2 15.50 15.53 15.62 T:twine80n6t4clocv2 18.96 19.33 19.80 T:proest256otrv1 20.42 20.43 20.47 T:aes128n8clocv1 20.42 20.48 20.51 T:aes128n12clocv1 22.40 22.43 22.45 T:aeadaes128ocbtaglen96v1 22.39 22.44 22.46 T:aeadaes128ocbtaglen64v1 26.56 26.59 26.63 T:aeadaes192ocbtaglen64v1 26.57 26.61 26.66 T:aeadaes192ocbtaglen96v1 26.87 26.92 27.50 T:ketjesrv2 27.17 27.27 27.35 T:ketjesrv1 30.79 30.82 30.86 T:aeadaes256ocbtaglen64v1 30.83 30.86 30.96 T:aeadaes256ocbtaglen96v1 43.48 43.60 43.65 T:proest128otrv1 48.29 48.31 48.36 T:colm127v1 48.55 48.91 49.46 T:ketjejrv1 63.48 63.87 65.06 T:deoxysneq128128v13 68.30 68.62 71.08 T:ketjejrv2 70.91 71.06 71.23 T:present80n6t4silcv3 102.94 104.23 104.48 T:deoxysneq256128v13 126.28 126.35 126.53 T:led80n6t4silcv3 126.31 128.42 132.29 T:deoxyseq128128v13 128.96 135.56 136.92 T:aezv1 206.22 207.04 207.60 T:deoxyseq256128v13 397.36 415.43 422.89 T:acorn128 3583.57 3615.78 3630.96 T:led80n6silcv1 3620.88 3626.68 3656.45 T:led80n6t4silcv2 3843.10 3867.16 3900.58 T:present80n6silcv1 3844.62 3873.32 3903.16 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.27 0.27 0.28 aegis128l 0.33 0.34 0.34 T:tiaoxinv1 0.33 0.34 0.35 T:tiaoxinv2 0.40 0.40 0.41 T:aegis128 0.41 0.42 0.42 aegis256 0.42 0.43 0.43 T:aezv4 0.42 0.43 0.45 T:aezv3 0.46 0.47 0.48 T:aezv5 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.56 0.57 0.57 T:aes128otrsv3 0.57 0.59 0.61 T:aeadaes192ocbtaglen128v1 0.65 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:aes256otrpv3 0.70 0.72 0.73 T:aes256otrcv3 0.69 0.72 0.73 T:aes256otrsv3 0.87 0.89 0.91 T:deoxysi128v141 0.92 0.94 0.96 T:deoxysneq128128v1 0.94 0.95 0.96 T:aes128gcmv1 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280256v1 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.99 1.00 T:deoxysi256v141 1.05 1.07 1.08 T:deoxysneq256128v1 1.12 1.13 1.15 T:morus640128v1 1.11 1.13 1.16 T:morus640128v2 1.14 1.15 1.16 aes256gcmv1 1.60 1.61 1.63 T:deoxysii128v141 1.80 1.82 1.83 T:deoxysii256v141 1.83 1.84 1.84 T:deoxyseq128128v1 1.83 1.86 1.91 T:colm0v1 2.03 2.04 2.06 T:deoxyseq256128v1 1.98? 2.05? 2.21? T:lunarkeyakv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.11 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.11 T:aes128n12t8silcv3 2.00 2.11 2.12 T:aes128n12t8silcv2 2.01 2.12 2.12 T:aes128n8t8silcv2 2.29 2.32 2.35 T:norx6444v3 2.50 2.53 2.55 T:norx6441v3 2.51 2.56 2.59 T:norx6441v2 2.72 2.75 2.76 T:seakeyakv2 2.77 2.84 2.92 T:oceankeyakv2 3.01 3.06 3.12 T:norx6441v1 3.07 3.09 3.13 T:lakekeyakv1 3.18 3.20 3.23 T:lakekeyakv2 3.40 3.45 3.51 T:norx6444v2 3.64 3.70 3.75 T:norx3241v3 3.67 3.72 3.76 T:norx3241v2 3.80 3.85 3.93 T:norx6461v2 3.82 3.88 3.91 T:norx6461v3 3.87 3.92 3.99 T:norx6444v1 4.39 4.46 4.50 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.58 4.61 4.68 T:norx6461v1 4.89 4.93 5.01 T:acorn128v2 5.21 5.23 5.25 T:acorn128v3 5.52 5.58 5.69 T:ketjemajorv2 5.63 5.82 5.89 T:norx3261v3 5.79 5.84 5.89 T:norx3261v2 6.16 6.18 6.20 ascon128av12 6.29 6.32 6.33 T:ascon128av11 6.27 6.32 6.34 T:ascon96v1 7.23 7.26 7.30 T:norx3261v1 6.94 7.41 7.55 T:ketjeminorv2 7.36 7.41 7.47 T:riverkeyakv2 9.06 9.10 9.16 T:ascon128v11 9.06 9.16 9.19 T:ascon128v1 9.18 9.20 9.22 ascon128v12 11.89 11.95 12.01 T:aes128otrpv1 11.92 12.07 12.17 T:aes128otrpv2 12.17 12.19 12.22 T:aes128otrsv1 12.54 12.57 12.61 T:aes128otrsv2 14.50 14.53 14.54 T:twine80n6t4clocv3 15.42 15.45 15.51 T:aes256otrpv1 15.42 15.50 15.63 T:aes256otrpv2 15.55 15.57 15.60 T:twine80n6t4clocv2 15.67 15.70 15.76 T:aes256otrsv1 15.71 15.75 15.80 T:aes256otrsv2 19.08 19.22 19.77 T:proest256otrv1 21.21 21.25 21.30 T:aes128n8clocv1 21.22 21.27 21.29 T:aes128n12clocv1 27.76 28.11 28.47 T:ketjesrv2 28.00 28.18 28.34 T:ketjesrv1 30.45 30.49 30.52 T:aeadaes128ocbtaglen64v1 30.45 30.50 30.52 T:aeadaes128ocbtaglen96v1 36.35 36.40 36.43 T:aeadaes192ocbtaglen96v1 36.37 36.41 36.47 T:aeadaes192ocbtaglen64v1 42.35 42.39 42.41 T:aeadaes256ocbtaglen64v1 42.40 42.44 42.70 T:aeadaes256ocbtaglen96v1 42.52 42.58 42.64 T:proest128otrv1 48.68 49.44 52.90 T:ketjejrv1 64.42 64.44 64.48 T:colm127v1 69.70 70.03 71.99 T:ketjejrv2 70.89 70.98 71.12 T:present80n6t4silcv3 86.82 86.98 88.04 T:deoxysneq128128v13 125.98 126.08 126.98 T:led80n6t4silcv3 126.60 128.55 131.52 T:deoxyseq128128v13 130.24 131.04 131.20 T:deoxysneq256128v13 129.13 135.74 136.99 T:aezv1 206.42 206.94 207.61 T:deoxyseq256128v13 399.24 405.18 422.22 T:acorn128 3588.21 3607.40 3628.32 T:led80n6silcv1 3608.28 3633.60 3653.01 T:led80n6t4silcv2 3840.76 3869.15 3874.66 T:present80n6t4silcv2 3868.12 3874.96 3892.75 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.15 0.16 0.16 T:aezv4 0.16 0.16 0.17 T:aezv3 0.18 0.19 0.19 T:aezv5 0.27 0.27 0.28 aegis128l 0.33? 0.34? 0.37? T:tiaoxinv2 0.33? 0.34? 0.37? T:tiaoxinv1 0.40 0.40 0.41 T:aegis128 0.42? 0.47? 0.48? aegis256 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrsv3 0.57 0.57 0.57 T:aes128otrpv3 0.58? 0.59? 2.24? T:aeadaes192ocbtaglen128v1 0.64 0.64 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes256otrpv3 0.70 0.72 0.73 T:aes256otrsv3 0.70 0.72 0.72 T:aes256otrcv3 0.88 0.89 0.92 T:deoxysi128v141 0.91 0.95 0.96 T:deoxysneq128128v1 0.95 0.96 0.96 T:aes128gcmv1 0.97 0.97 0.98 T:morus1280128v1 0.97 0.98 0.98 T:morus1280256v1 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280256v2 0.99 1.02 1.03 T:deoxysi256v141 1.05 1.07 1.08 T:deoxysneq256128v1 1.11 1.13 1.15 T:morus640128v2 1.12 1.13 1.15 T:morus640128v1 1.14 1.15 1.16 aes256gcmv1 1.60 1.62 1.62 T:deoxysii128v141 1.81 1.82 1.84 T:deoxysii256v141 1.82 1.84 1.85 T:colm0v1 1.84 1.85 1.87 T:deoxyseq128128v1 2.04 2.06 2.09 T:deoxyseq256128v1 2.01 2.06 2.06 T:aes128n8t8clocv2 1.99 2.06 2.13 T:aes128n8t8silcv2 2.01 2.06 2.06 T:aes128n12t8clocv3 2.00 2.06 2.13 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.08 2.15 T:lunarkeyakv2 2.02 2.11 2.11 T:aes128n12t8clocv2 2.28 2.30 2.35 T:norx6444v3 2.46 2.49 2.53 T:norx6441v3 2.49 2.56 2.58 T:norx6441v2 2.76 2.79 2.81 T:seakeyakv2 2.81 2.84 3.01 T:oceankeyakv2 3.04 3.08 3.15 T:norx6441v1 3.10 3.12 3.13 T:lakekeyakv1 3.19 3.21 3.23 T:lakekeyakv2 3.42 3.44 3.47 T:norx6444v2 3.65 3.69 3.73 T:norx3241v3 3.69 3.74 3.78 T:norx3241v2 3.78 3.83 3.88 T:norx6461v2 3.84 3.87 3.90 T:norx6461v3 3.89 3.92 3.97 T:norx6444v1 4.38 4.41 4.44 T:norx3241v1 4.56 4.57 4.57 T:aesjambuv1 4.59 4.65 4.70 T:norx6461v1 4.90 4.94 5.01 T:acorn128v2 5.23 5.24 5.26 T:acorn128v3 5.57 5.62 5.70 T:ketjemajorv2 5.80 5.83 5.88 T:norx3261v2 5.63 5.84 5.90 T:norx3261v3 6.17 6.19 6.20 ascon128av12 6.28 6.31 6.33 T:ascon128av11 6.26 6.32 6.34 T:ascon96v1 7.22 7.25 7.27 T:norx3261v1 6.92 7.40 7.55 T:ketjeminorv2 7.39 7.42 7.45 T:riverkeyakv2 9.05 9.10 9.17 T:ascon128v11 9.12 9.16 9.18 T:ascon128v1 9.18 9.20 9.21 ascon128v12 11.92 11.97 12.02 T:aes128otrpv1 11.97 12.02 12.16 T:aes128otrpv2 12.18 12.26 12.28 T:aes128otrsv1 12.57 12.61 12.65 T:aes128otrsv2 14.48 14.53 14.55 T:twine80n6t4clocv3 15.42 15.51 15.57 T:aes256otrpv1 15.54 15.59 15.61 T:twine80n6t4clocv2 15.46 15.67 15.71 T:aes256otrpv2 15.70 15.74 15.79 T:aes256otrsv1 15.75 15.80 15.85 T:aes256otrsv2 19.06 19.20 19.86 T:proest256otrv1 21.20 21.25 21.29 T:aes128n12clocv1 21.19 21.25 21.37 T:aes128n8clocv1 27.79 27.83 27.96 T:ketjesrv2 27.90 28.08 28.27 T:ketjesrv1 30.42 30.46 30.50 T:aeadaes128ocbtaglen64v1 30.44 30.51 30.54 T:aeadaes128ocbtaglen96v1 36.38 36.42 36.46 T:aeadaes192ocbtaglen64v1 36.39 36.43 36.44 T:aeadaes192ocbtaglen96v1 42.35 42.39 42.43 T:aeadaes256ocbtaglen64v1 42.40 42.43 42.59 T:aeadaes256ocbtaglen96v1 42.47 42.54 42.64 T:proest128otrv1 49.25 49.46 50.11 T:ketjejrv1 63.42 63.45 63.52 T:colm127v1 69.73 69.95 71.80 T:ketjejrv2 70.87 70.95 71.03 T:present80n6t4silcv3 86.82 87.18 88.09 T:deoxysneq128128v13 125.97 126.07 126.74 T:led80n6t4silcv3 126.78 128.59 131.61 T:deoxyseq128128v13 130.23 131.02 131.23 T:deoxysneq256128v13 128.43 135.52 136.94 T:aezv1 207.03 207.47 207.63 T:deoxyseq256128v13 402.46 419.67 430.75 T:acorn128 3576.58 3608.63 3643.94 T:led80n6t4silcv2 3597.50 3625.23 3641.66 T:led80n6silcv1 3815.89 3871.87 3887.65 T:present80n6t4silcv2 3868.52 3900.00 3908.57 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.16? 0.18? 0.18? T:tiaoxinv1 0.16? 0.18? 0.18? T:tiaoxinv2 0.20? 0.21? 0.24? aegis128l 0.29 0.31 0.32 T:aezv4 0.31 0.32 0.33 T:aezv3 0.33 0.34 0.35 T:aezv5 0.36 0.37 0.38 aegis256 0.37 0.37 0.38 T:aegis128 0.43 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.40? 0.51? 0.55? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.55 T:aes128otrcv3 0.55 0.55 0.56 T:aes128otrpv3 0.62 0.64 0.65 T:aeadaes256ocbtaglen128v1 0.67 0.68 0.69 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.70 0.70 0.71 T:aes256otrpv3 0.72 0.74 0.75 aes256gcmv1 0.80 0.81 0.83 T:deoxysi128v141 0.86 0.86 0.87 T:deoxysneq128128v1 0.89 0.91 0.92 T:deoxysi256v141 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v2 0.91 0.92 0.94 T:morus1280128v2 0.96 0.97 0.98 T:deoxysneq256128v1 1.08 1.09 1.11 T:morus640128v2 1.09 1.10 1.11 T:morus640128v1 1.20 1.21 1.22 T:deoxysii128v141 1.23 1.24 1.24 T:colm0v1 1.29 1.29 1.30 T:aes128otrsv3 1.34 1.35 1.36 T:deoxyseq128128v1 1.34 1.36 1.37 T:deoxysii256v141 1.52 1.54 1.55 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.09 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n12t8clocv3 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.10 2.10 T:aes128n8t8silcv2 2.09 2.10 2.10 T:aes128n12t8silcv2 2.09 2.10 2.10 T:aes128n12t8clocv2 2.26 2.28 2.29 T:seakeyakv2 2.25 2.31 2.34 T:oceankeyakv2 2.56 2.59 2.63 T:norx6441v2 2.60 2.62 2.64 T:norx6441v3 2.77 2.81 2.86 T:lunarkeyakv2 2.78 2.81 2.84 T:lakekeyakv2 2.81 2.83 2.86 T:norx6444v3 2.94 2.98 3.01 T:lakekeyakv1 3.10 3.13 3.16 T:norx6441v1 3.27 3.29 3.33 T:norx6444v2 3.86 3.89 3.91 T:norx6461v3 3.85 3.90 3.92 T:norx6444v1 3.88 3.91 3.94 T:norx3241v3 3.86 3.91 3.95 T:norx6461v2 3.87 3.92 3.97 T:norx3241v2 4.21 4.22 4.22 T:aesjambuv1 4.57 4.60 4.65 T:norx6461v1 4.67 4.71 4.78 T:norx3241v1 4.98 5.07 5.11 T:acorn128v3 4.94 5.09 5.33 T:acorn128v2 5.08 5.11 5.16 T:ketjemajorv2 5.17 5.19 5.22 T:riverkeyakv2 5.81 5.95 6.06 T:norx3261v3 5.93 5.97 5.99 T:norx3261v2 6.17 6.19 6.20 ascon128av12 6.32 6.34 6.36 T:ascon128av11 6.32 6.34 6.36 T:ascon96v1 6.55 6.66 6.69 T:ketjeminorv2 7.37 7.39 7.42 T:norx3261v1 9.10 9.15 9.17 T:ascon128v1 9.14 9.15 9.21 T:ascon128v11 9.21 9.22 9.24 ascon128v12 11.02 11.23 11.28 T:aes128otrsv2 11.30 11.32 11.34 T:aes128otrpv1 11.31 11.34 11.35 T:aes128otrpv2 11.55 11.58 11.64 T:aes128otrsv1 14.32 14.33 14.33 T:twine80n6t4clocv3 14.20 14.44 14.49 T:aes256otrsv1 14.48 14.51 14.53 T:aes256otrsv2 14.84 14.86 14.88 T:aes256otrpv1 14.85 14.87 14.89 T:aes256otrpv2 15.28 15.30 15.32 T:twine80n6t4clocv2 15.29 15.31 15.35 T:aes128n12clocv1 15.29 15.32 15.34 T:aes128n8clocv1 18.90 19.20 19.49 T:proest256otrv1 22.13 22.15 22.18 T:aeadaes128ocbtaglen96v1 22.13 22.16 22.19 T:aeadaes128ocbtaglen64v1 26.15 26.20 26.26 T:ketjesrv1 26.26 26.31 26.33 T:aeadaes192ocbtaglen64v1 26.30 26.32 26.34 T:aeadaes192ocbtaglen96v1 26.39 26.61 26.78 T:ketjesrv2 30.49 30.53 30.62 T:aeadaes256ocbtaglen96v1 30.50 30.56 30.65 T:aeadaes256ocbtaglen64v1 35.71 35.78 35.80 T:colm127v1 43.41 43.73 43.96 T:proest128otrv1 44.47 44.83 44.93 T:ketjejrv1 61.78 62.19 63.57 T:deoxysneq128128v13 67.29 67.49 69.74 T:ketjejrv2 70.12 70.15 70.22 T:present80n6t4silcv3 83.98 85.80 85.87 T:aezv1 94.02 94.66 96.73 T:deoxyseq128128v13 103.41 104.36 105.02 T:deoxysneq256128v13 125.71 125.74 125.84 T:led80n6t4silcv3 154.68 155.22 155.70 T:deoxyseq256128v13 402.44 414.57 420.39 T:acorn128 2682.53 2698.87 2718.90 T:led80n6silcv1 2679.37 2714.42 2737.53 T:led80n6t4silcv2 2854.91 2889.57 2913.80 T:present80n6silcv1 2884.04 2898.73 2908.46 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.23 aegis128l 0.21 0.23 0.23 T:tiaoxinv1 0.21? 0.23? 0.24? T:tiaoxinv2 0.31 0.31 0.32 T:aezv4 0.30 0.31 0.32 T:aezv3 0.33 0.34 0.35 T:aezv5 0.35 0.36 0.36 T:aegis128 0.36 0.36 0.38 aegis256 0.45 0.46 0.47 T:aeadaes128ocbtaglen128v1 -0.28? 0.53? 1.36? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.64 0.66 0.67 T:aeadaes256ocbtaglen128v1 0.67 0.69 0.70 T:aes128gcmv1 0.71 0.71 0.72 T:aes256otrcv3 0.72 0.72 0.73 T:aes256otrpv3 0.78 0.79 0.80 aes256gcmv1 0.84 0.85 0.87 T:deoxysi128v141 0.89 0.91 0.92 T:deoxysneq128128v1 0.91 0.91 0.93 T:morus1280128v2 0.91 0.92 0.93 T:morus1280256v2 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v1 0.92 0.94 0.96 T:deoxysi256v141 1.00 1.02 1.03 T:deoxysneq256128v1 1.08 1.10 1.12 T:morus640128v1 1.09 1.11 1.11 T:morus640128v2 1.21 1.21 1.23 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.35 1.36 1.37 T:deoxysii256v141 1.36 1.37 1.38 T:deoxyseq128128v1 1.53 1.54 1.56 T:deoxyseq256128v1 1.76 1.76 1.77 T:aes256otrsv3 2.03 2.04 2.06 T:aes128n8t8silcv2 2.04 2.04 2.06 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv3 2.05 2.07 2.07 T:aes128n12t8clocv2 2.30 2.32 2.33 T:seakeyakv2 2.31 2.35 2.38 T:oceankeyakv2 2.54 2.57 2.62 T:norx6441v3 2.55 2.59 2.61 T:norx6441v2 2.81 2.82 2.85 T:lakekeyakv2 2.81 2.84 2.86 T:norx6444v3 2.79 2.84 2.89 T:lunarkeyakv2 2.92 2.96 2.99 T:lakekeyakv1 3.05 3.09 3.15 T:norx6441v1 3.22 3.26 3.32 T:norx6444v2 3.82 3.85 3.88 T:norx6461v3 3.77 3.86 3.89 T:norx3241v3 3.82 3.89 3.94 T:norx6444v1 3.86 3.91 3.96 T:norx6461v2 3.88 3.92 3.95 T:norx3241v2 4.38 4.39 4.39 T:aesjambuv1 4.55 4.61 4.67 T:norx3241v1 4.57 4.62 4.68 T:norx6461v1 4.76 4.87 4.95 T:ketjemajorv2 5.04 5.12 5.39 T:acorn128v3 5.00 5.27 5.30 T:acorn128v2 5.25 5.28 5.30 T:riverkeyakv2 5.77 5.84 5.89 T:norx3261v2 5.76 5.93 6.04 T:norx3261v3 6.15 6.16 6.17 ascon128av12 6.27 6.29 6.32 T:ascon128av11 6.29 6.31 6.34 T:ascon96v1 6.52 6.78 6.85 T:ketjeminorv2 7.30 7.32 7.34 T:norx3261v1 9.00 9.05 9.09 T:ascon128v1 9.06 9.08 9.11 T:ascon128v11 9.17 9.20 9.20 ascon128v12 11.19 11.38 11.42 T:aes128otrsv2 11.36 11.38 11.40 T:aes128otrpv1 11.42 11.43 11.46 T:aes128otrsv1 11.40 11.48 11.52 T:aes128otrpv2 14.32 14.33 14.34 T:twine80n6t4clocv3 14.32 14.57 14.61 T:aes256otrsv1 14.63 14.66 14.70 T:aes256otrsv2 14.90 14.94 14.97 T:aes256otrpv1 14.93 14.95 15.05 T:aes256otrpv2 15.23 15.26 15.28 T:twine80n6t4clocv2 15.65 15.71 15.75 T:aes128n12clocv1 15.68 15.73 15.74 T:aes128n8clocv1 18.83 19.18 19.48 T:proest256otrv1 26.16 26.18 26.21 T:aeadaes128ocbtaglen64v1 26.17 26.18 26.22 T:aeadaes128ocbtaglen96v1 26.51 26.63 26.74 T:ketjesrv1 26.69 26.99 27.14 T:ketjesrv2 31.19 31.21 31.25 T:aeadaes192ocbtaglen64v1 31.19 31.23 31.27 T:aeadaes192ocbtaglen96v1 36.25 36.30 36.37 T:aeadaes256ocbtaglen64v1 36.31 36.35 36.40 T:aeadaes256ocbtaglen96v1 42.79 43.36 43.48 T:proest128otrv1 43.80 43.87 43.96 T:colm127v1 44.67 44.86 44.97 T:ketjejrv1 67.85 68.04 70.08 T:ketjejrv2 70.08 70.12 70.20 T:present80n6t4silcv3 73.51 73.72 75.35 T:deoxysneq128128v13 84.65 85.75 85.96 T:aezv1 93.97 94.66 96.76 T:deoxyseq128128v13 117.60 117.98 118.49 T:deoxysneq256128v13 125.59 125.62 125.81 T:led80n6t4silcv3 154.77 155.36 155.76 T:deoxyseq256128v13 408.71 416.57 434.83 T:acorn128 2675.02 2702.20 2709.02 T:led80n6t4silcv2 2681.30 2715.65 2731.77 T:led80n6silcv1 2851.63 2888.87 2906.24 T:present80n6silcv1 2876.93 2893.86 2904.18 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17? 0.17? 0.20? T:aezv4 0.17? 0.18? 0.21? T:aezv3 0.17? 0.19? 0.23? T:aezv5 0.21 0.22 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv2 0.23 0.23 0.25 T:tiaoxinv1 0.36 0.36 0.36 T:aegis128 0.39 0.40 0.40 aegis256 0.46 0.46 0.47 T:aeadaes128ocbtaglen128v1 0.52 0.53 0.54 T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.68 0.70 0.70 T:aes128gcmv1 0.70 0.71 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aes256otrpv3 0.78 0.79 0.80 aes256gcmv1 0.84 0.85 0.87 T:deoxysi128v141 0.89 0.91 0.92 T:deoxysneq128128v1 0.91 0.91 0.92 T:morus1280128v2 0.91 0.92 0.92 T:morus1280128v1 0.91 0.92 0.92 T:morus1280256v1 0.92 0.92 0.92 T:morus1280256v2 0.93 0.95 0.96 T:deoxysi256v141 1.00 1.02 1.03 T:deoxysneq256128v1 1.08 1.10 1.11 T:morus640128v1 1.09 1.10 1.11 T:morus640128v2 1.21 1.22 1.22 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxyseq128128v1 1.36 1.37 1.38 T:deoxysii256v141 1.53 1.54 1.55 T:deoxyseq256128v1 1.75 1.76 1.77 T:aes256otrsv3 2.03 2.03 2.10 T:aes128n8t8silcv2 2.03 2.03 2.10 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n8t8clocv2 2.05 2.06 2.10 T:aes128n12t8clocv3 2.04 2.07 2.10 T:aes128n12t8clocv2 2.31 2.34 2.35 T:seakeyakv2 2.34 2.36 2.38 T:oceankeyakv2 2.54 2.55 2.62 T:norx6441v3 2.55 2.57 2.60 T:norx6441v2 2.82 2.83 2.84 T:lakekeyakv2 2.82 2.84 2.90 T:lunarkeyakv2 2.84 2.85 2.87 T:norx6444v3 2.95 2.97 3.00 T:lakekeyakv1 3.05 3.11 3.14 T:norx6441v1 3.26 3.28 3.31 T:norx6444v2 3.77 3.81 3.87 T:norx3241v3 3.84 3.86 3.88 T:norx6461v3 3.86 3.88 3.90 T:norx3241v2 3.85 3.88 3.92 T:norx6461v2 3.85 3.91 3.95 T:norx6444v1 4.38 4.39 4.39 T:aesjambuv1 4.55 4.59 4.62 T:norx6461v1 4.58 4.62 4.66 T:norx3241v1 4.84 4.95 4.98 T:ketjemajorv2 5.03 5.11 5.39 T:acorn128v3 5.00 5.26 5.30 T:acorn128v2 5.27 5.29 5.30 T:riverkeyakv2 5.80 5.84 5.87 T:norx3261v2 5.79 5.93 6.02 T:norx3261v3 6.15 6.17 6.18 ascon128av12 6.29 6.31 6.32 T:ascon128av11 6.30 6.33 6.35 T:ascon96v1 6.57 6.78 6.85 T:ketjeminorv2 7.31 7.33 7.35 T:norx3261v1 9.02 9.05 9.08 T:ascon128v1 9.06 9.07 9.09 T:ascon128v11 9.19 9.20 9.22 ascon128v12 11.36 11.39 11.41 T:aes128otrpv1 11.21 11.42 11.43 T:aes128otrsv2 11.41 11.44 11.52 T:aes128otrpv2 11.43 11.46 11.49 T:aes128otrsv1 14.32 14.33 14.34 T:twine80n6t4clocv3 14.34 14.62 14.64 T:aes256otrsv1 14.65 14.67 14.71 T:aes256otrsv2 14.93 14.98 15.01 T:aes256otrpv1 14.96 15.04 15.06 T:aes256otrpv2 15.24 15.27 15.28 T:twine80n6t4clocv2 15.66 15.70 15.72 T:aes128n12clocv1 15.69 15.72 15.75 T:aes128n8clocv1 18.86 19.19 19.50 T:proest256otrv1 26.15 26.17 26.19 T:aeadaes128ocbtaglen64v1 26.15 26.18 26.23 T:aeadaes128ocbtaglen96v1 26.51 26.60 26.74 T:ketjesrv1 27.02 27.06 27.42 T:ketjesrv2 31.19 31.21 31.22 T:aeadaes192ocbtaglen64v1 31.21 31.23 31.25 T:aeadaes192ocbtaglen96v1 36.32 36.34 36.41 T:aeadaes256ocbtaglen64v1 36.31 36.35 36.47 T:aeadaes256ocbtaglen96v1 42.63 43.25 43.35 T:proest128otrv1 43.29 43.35 43.38 T:colm127v1 44.57 44.87 45.00 T:ketjejrv1 67.86 68.02 70.16 T:ketjejrv2 70.06 70.12 70.18 T:present80n6t4silcv3 73.38 73.62 75.31 T:deoxysneq128128v13 84.14 85.71 85.99 T:aezv1 93.87 94.39 96.84 T:deoxyseq128128v13 117.16 117.71 118.48 T:deoxysneq256128v13 125.52 125.59 125.66 T:led80n6t4silcv3 155.42 155.70 157.88 T:deoxyseq256128v13 397.34 406.34 417.41 T:acorn128 2672.94 2684.88 2712.15 T:led80n6t4silcv2 2684.36 2704.67 2730.25 T:led80n6silcv1 2853.16 2890.02 2912.19 T:present80n6silcv1 2868.87 2892.38 2902.92 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv2 0.12? 0.13? 0.15? T:tiaoxinv1 0.16? 0.17? 0.18? aegis128l 0.19 0.19 0.21 T:aezv4 0.19 0.20 0.21 T:aezv3 0.20? 0.22? 0.24? T:aezv5 0.31 0.32 0.33 aegis256 0.36 0.36 0.37 T:aegis128 0.42 0.43 0.43 T:aes128gcmv1 0.41 0.43 0.45 T:aeadaes128ocbtaglen128v1 0.43 0.44 0.44 aes256gcmv1 0.34? 0.47? 2.11? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.63 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:colm0v1 0.71 0.72 0.73 T:aes256otrcv3 0.72 0.73 0.74 T:aes256otrpv3 0.81 0.81 0.82 T:deoxysi128v141 0.81 0.82 0.82 T:deoxysii128v141 0.85 0.86 0.87 T:morus1280256v1 0.86 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:deoxysneq128128v1 0.87 0.88 0.89 T:morus1280128v2 0.87 0.88 0.88 T:morus1280256v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.92 T:deoxysi256v141 0.90 0.91 0.92 T:deoxysii256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.02 T:deoxyseq256128v1 1.04 1.06 1.08 T:morus640128v1 1.03 1.06 1.09 T:morus640128v2 1.77 1.81 1.86 T:lunarkeyakv2 1.79 1.84 1.96 T:oceankeyakv2 2.05 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.07 2.07 T:aes128n12t8clocv2 2.20 2.22 2.23 T:seakeyakv2 2.53 2.55 2.59 T:norx6441v2 2.52 2.55 2.58 T:lakekeyakv2 2.56 2.60 2.64 T:norx6441v3 2.74 2.77 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.07 3.10 3.15 T:norx6441v1 3.13 3.15 3.17 T:norx6444v2 3.31 3.35 3.37 T:norx6444v3 3.84 3.86 3.88 T:norx6444v1 3.81 3.88 3.91 T:norx6461v3 3.78 3.88 3.94 T:norx6461v2 3.88 3.94 4.04 T:norx3241v3 3.90 3.95 3.98 T:norx3241v2 4.03 4.14 4.29 T:ketjemajorv2 4.19 4.20 4.20 T:aesjambuv1 4.56 4.60 4.66 T:norx6461v1 4.75 4.82 4.87 T:norx3241v1 4.80 4.83 4.85 T:riverkeyakv2 4.95 4.97 5.27 T:acorn128v3 5.06 5.12 5.32 T:acorn128v2 5.84 5.90 5.99 T:norx3261v2 5.84 6.04 6.11 T:norx3261v3 6.14 6.15 6.16 ascon128av12 6.16 6.31 6.39 T:ketjeminorv2 6.30 6.31 6.33 T:ascon128av11 6.30 6.33 6.34 T:ascon96v1 7.38 7.42 7.44 T:norx3261v1 9.01 9.05 9.06 T:ascon128v11 9.04 9.06 9.07 T:ascon128v1 9.21 9.22 9.24 ascon128v12 9.77 9.80 9.81 T:aes128otrsv2 10.09 10.12 10.14 T:aes128n8clocv1 10.11 10.13 10.16 T:aes128n12clocv1 10.25 10.29 10.33 T:aes128otrsv1 10.85 10.88 10.90 T:aes128otrpv2 10.85 10.88 10.90 T:aes128otrpv1 12.89 12.92 12.95 T:aes256otrsv1 12.94 12.97 12.98 T:aes256otrsv2 14.12 14.13 14.13 T:twine80n6t4clocv3 14.41 14.44 14.48 T:aes256otrpv1 14.41 14.44 14.48 T:aes256otrpv2 14.94 14.97 15.00 T:twine80n6t4clocv2 19.29 19.68 19.76 T:proest256otrv1 21.83 21.90 21.93 T:aeadaes128ocbtaglen64v1 21.88 21.91 21.94 T:aeadaes128ocbtaglen96v1 23.11 23.17 23.21 T:colm127v1 25.03 25.13 25.22 T:ketjesrv1 26.00 26.02 26.06 T:aeadaes192ocbtaglen64v1 25.88 26.02 26.07 T:aeadaes192ocbtaglen96v1 25.91 26.21 26.26 T:ketjesrv2 30.19 30.23 30.27 T:aeadaes256ocbtaglen96v1 30.22 30.26 30.28 T:aeadaes256ocbtaglen64v1 40.75 41.02 41.31 T:ketjejrv1 41.01 43.66 43.89 T:aezv1 43.21 43.84 43.96 T:proest128otrv1 61.78 62.47 63.96 T:deoxyseq128128v13 63.04 63.68 64.17 T:deoxysneq128128v13 66.10 66.53 68.70 T:ketjejrv2 69.26 69.30 69.33 T:present80n6t4silcv3 102.97 103.13 103.29 T:deoxyseq256128v13 102.44 103.53 104.68 T:deoxysneq256128v13 125.11 125.25 125.81 T:led80n6t4silcv3 401.79 410.74 427.47 T:acorn128 1788.58 1809.98 1819.21 T:led80n6t4silcv2 1793.00 1813.44 1857.46 T:led80n6silcv1 1932.11 1935.83 1967.86 T:present80n6t4silcv2 1911.12 1936.59 1971.92 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12? 0.13? 0.15? T:tiaoxinv1 0.12? 0.14? 0.18? T:tiaoxinv2 0.16? 0.17? 0.18? aegis128l 0.18? 0.20? 0.21? T:aezv4 0.20 0.20 0.22 T:aezv3 0.21 0.22 0.23 T:aezv5 0.31 0.32 0.32 T:aegis128 0.31? 0.32? 0.36? aegis256 0.41 0.42 0.45 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.44 aes256gcmv1 0.43 0.44 0.44 T:aes128gcmv1 -1.13? 0.47? 0.48? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.64 0.66 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrcv3 0.68 0.71 0.73 T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.80 0.82 0.82 T:deoxysii128v141 0.81 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:morus1280256v1 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:morus1280128v2 0.86 0.87 0.88 T:deoxysneq128128v1 0.85 0.87 0.87 T:morus1280256v2 0.89 0.90 0.90 T:deoxyseq128128v1 0.90 0.92 0.92 T:deoxysi256v141 0.90 0.92 0.93 T:deoxysii256v141 0.95 0.99 1.02 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.02 1.05 1.07 T:morus640128v2 1.05 1.07 1.08 T:morus640128v1 1.76 1.81 1.87 T:lunarkeyakv2 1.80 1.84 1.92 T:oceankeyakv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128otrsv3 2.05 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.07 2.12 T:aes128n12t8clocv2 2.01 2.12 2.12 T:aes128n12t8silcv2 2.00 2.12 2.12 T:aes128n8t8silcv2 2.21 2.22 2.25 T:seakeyakv2 2.55 2.57 2.59 T:lakekeyakv2 2.57 2.61 2.65 T:norx6441v3 2.59 2.62 2.66 T:norx6441v2 2.75 2.77 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.08 3.09 3.12 T:norx6444v2 3.07 3.12 3.17 T:norx6441v1 3.33 3.38 3.42 T:norx6444v3 3.84 3.87 3.89 T:norx6444v1 3.85 3.88 3.93 T:norx6461v3 3.86 3.93 4.00 T:norx6461v2 3.90 3.94 3.99 T:norx3241v3 3.96 4.03 4.07 T:norx3241v2 4.09 4.15 4.24 T:ketjemajorv2 4.21 4.22 4.22 T:aesjambuv1 4.51 4.57 4.70 T:norx6461v1 4.74 4.78 4.87 T:norx3241v1 4.80 4.83 4.84 T:riverkeyakv2 4.94 4.99 5.02 T:acorn128v3 4.95 5.03 5.06 T:acorn128v2 5.73 5.83 5.96 T:norx3261v2 5.87 6.02 6.23 T:norx3261v3 6.14 6.15 6.18 ascon128av12 6.15 6.31 6.40 T:ketjeminorv2 6.29 6.32 6.33 T:ascon128av11 6.32 6.34 6.35 T:ascon96v1 7.37 7.39 7.44 T:norx3261v1 9.05 9.09 9.11 T:ascon128v11 9.07 9.09 9.12 T:ascon128v1 9.20 9.21 9.22 ascon128v12 9.78 9.81 9.85 T:aes128otrsv2 10.11 10.14 10.17 T:aes128n12clocv1 10.12 10.16 10.18 T:aes128n8clocv1 10.28 10.31 10.37 T:aes128otrsv1 10.85 10.87 10.92 T:aes128otrpv1 10.88 10.90 10.94 T:aes128otrpv2 12.87 12.93 12.97 T:aes256otrsv1 12.91 12.95 13.01 T:aes256otrsv2 14.12 14.13 14.17 T:twine80n6t4clocv3 14.40 14.43 14.49 T:aes256otrpv2 14.38 14.43 14.48 T:aes256otrpv1 14.94 14.98 15.02 T:twine80n6t4clocv2 19.35 19.70 19.81 T:proest256otrv1 21.84 21.89 21.95 T:aeadaes128ocbtaglen96v1 21.85 21.90 21.93 T:aeadaes128ocbtaglen64v1 23.12 23.22 23.26 T:colm127v1 24.99 25.10 25.20 T:ketjesrv1 25.98 26.04 26.07 T:aeadaes192ocbtaglen96v1 26.00 26.05 26.08 T:aeadaes192ocbtaglen64v1 25.89 26.19 26.22 T:ketjesrv2 30.20 30.25 30.30 T:aeadaes256ocbtaglen96v1 30.23 30.26 30.30 T:aeadaes256ocbtaglen64v1 40.78 40.83 40.95 T:ketjejrv1 41.36 43.63 43.90 T:aezv1 43.39 43.84 43.92 T:proest128otrv1 61.90 62.42 63.72 T:deoxyseq128128v13 63.21 63.94 64.20 T:deoxysneq128128v13 66.04 66.47 68.83 T:ketjejrv2 69.23 69.28 69.38 T:present80n6t4silcv3 102.89 103.19 103.29 T:deoxyseq256128v13 102.50 103.53 104.61 T:deoxysneq256128v13 125.09 125.19 125.56 T:led80n6t4silcv3 397.99 408.09 415.27 T:acorn128 1790.42 1812.99 1842.49 T:led80n6silcv1 1783.53 1814.09 1821.06 T:led80n6t4silcv2 1917.18 1934.09 1943.16 T:present80n6silcv1 1909.64 1936.13 1943.67 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12? 0.13? 0.14? T:tiaoxinv2 0.12? 0.13? 0.16? T:tiaoxinv1 0.16 0.16 0.17 aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.32 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.41 0.43 0.43 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.43 aes256gcmv1 0.43 0.43 0.45 T:aes128gcmv1 0.45? 0.47? 2.10? T:aeadaes192ocbtaglen128v1 0.55 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrcv3 0.70 0.71 0.72 T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.81 0.81 0.83 T:deoxysii128v141 0.81 0.83 0.86 T:deoxysi128v141 0.85 0.86 0.86 T:morus1280256v1 0.85 0.86 0.87 T:morus1280128v2 0.85 0.86 0.87 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v1 0.85 0.87 0.90 T:deoxysneq128128v1 0.89 0.89 0.90 T:deoxyseq128128v1 0.90 0.92 0.93 T:deoxysii256v141 0.91 0.93 0.95 T:deoxysi256v141 0.96 1.00 1.02 T:deoxysneq256128v1 1.02 1.03 1.05 T:deoxyseq256128v1 1.03 1.04 1.07 T:morus640128v2 1.03 1.06 1.08 T:morus640128v1 1.80 1.83 1.87 T:oceankeyakv2 1.75 1.84 1.91 T:lunarkeyakv2 2.05 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128otrsv3 2.01 2.11 2.12 T:aes128n12t8clocv2 2.06 2.13 2.13 T:aes128n8t8silcv2 2.06 2.13 2.13 T:aes128n12t8silcv2 2.18 2.22 2.25 T:seakeyakv2 2.52 2.56 2.58 T:lakekeyakv2 2.55 2.58 2.64 T:norx6441v3 2.58 2.60 2.67 T:norx6441v2 2.76 2.78 2.79 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.08 3.10 3.12 T:norx6444v2 3.08 3.13 3.20 T:norx6441v1 3.33 3.36 3.41 T:norx6444v3 3.84 3.87 3.89 T:norx6461v3 3.83 3.87 3.89 T:norx6444v1 3.85 3.91 4.01 T:norx6461v2 3.97 4.01 4.08 T:norx3241v2 3.94 4.02 4.16 T:norx3241v3 4.07 4.14 4.28 T:ketjemajorv2 4.21 4.21 4.22 T:aesjambuv1 4.53 4.65 4.70 T:norx6461v1 4.74 4.80 4.86 T:norx3241v1 4.81 4.82 4.83 T:riverkeyakv2 4.94 5.02 5.03 T:acorn128v3 4.95 5.04 5.06 T:acorn128v2 5.82 5.92 5.99 T:norx3261v2 5.86 6.05 6.32 T:norx3261v3 6.14 6.16 6.17 ascon128av12 6.26 6.30 6.32 T:ascon128av11 6.29 6.31 6.32 T:ascon96v1 6.16 6.34 6.41 T:ketjeminorv2 7.36 7.40 7.42 T:norx3261v1 9.07 9.10 9.11 T:ascon128v1 9.08 9.11 9.12 T:ascon128v11 9.21 9.22 9.22 ascon128v12 9.77 9.81 9.83 T:aes128otrsv2 10.11 10.14 10.15 T:aes128n12clocv1 10.11 10.15 10.17 T:aes128n8clocv1 10.22 10.35 10.37 T:aes128otrsv1 10.88 10.89 10.93 T:aes128otrpv1 10.86 10.91 10.92 T:aes128otrpv2 12.90 12.94 12.98 T:aes256otrsv1 12.94 12.96 13.00 T:aes256otrsv2 14.12 14.15 14.16 T:twine80n6t4clocv3 14.39 14.42 14.45 T:aes256otrpv1 14.42 14.45 14.49 T:aes256otrpv2 14.95 14.97 15.00 T:twine80n6t4clocv2 19.30 19.71 19.85 T:proest256otrv1 21.84 21.89 21.93 T:aeadaes128ocbtaglen64v1 21.84 21.90 21.96 T:aeadaes128ocbtaglen96v1 23.18 23.23 23.29 T:colm127v1 25.00 25.12 25.21 T:ketjesrv1 25.89 26.00 26.09 T:aeadaes192ocbtaglen96v1 26.00 26.05 26.11 T:aeadaes192ocbtaglen64v1 25.95 26.20 26.24 T:ketjesrv2 30.22 30.24 30.27 T:aeadaes256ocbtaglen96v1 30.22 30.25 30.27 T:aeadaes256ocbtaglen64v1 40.75 40.90 40.99 T:ketjejrv1 41.03 43.63 43.90 T:aezv1 43.28 43.84 43.94 T:proest128otrv1 61.80 62.41 63.62 T:deoxyseq128128v13 63.44 63.93 64.15 T:deoxysneq128128v13 66.02 66.50 68.62 T:ketjejrv2 69.21 69.26 69.34 T:present80n6t4silcv3 103.03 103.16 103.31 T:deoxyseq256128v13 102.91 103.53 104.61 T:deoxysneq256128v13 125.10 125.23 125.42 T:led80n6t4silcv3 398.00 408.45 415.57 T:acorn128 1783.68 1797.40 1818.42 T:led80n6t4silcv2 1804.89 1808.55 1817.29 T:led80n6silcv1 1932.90 1934.50 1942.14 T:present80n6t4silcv2 1933.02 1936.73 1969.53 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.24 T:tiaoxinv2 0.22 0.22 0.23 T:tiaoxinv1 0.24? 0.25? 0.27? aegis128l 0.35 0.36 0.36 T:aezv4 0.37 0.37 0.40 T:aezv3 0.39 0.40 0.41 T:aezv5 0.40 0.40 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.51 0.51 0.52 T:aeadaes128ocbtaglen128v1 0.60 0.61 0.64 T:aeadaes192ocbtaglen128v1 0.61 0.62 0.63 T:aes128otrpv3 0.64 0.65 0.65 T:aes128otrcv3 0.67 0.68 0.68 T:aeadaes256ocbtaglen128v1 0.76 0.76 0.77 T:aes128gcmv1 0.78 0.79 0.79 T:aes256otrpv3 0.83 0.85 0.85 T:aes256otrcv3 0.85 0.85 0.86 aes256gcmv1 0.94 0.94 0.95 T:deoxysi128v141 0.95 0.95 0.96 T:deoxysneq128128v1 1.07 1.07 1.08 T:deoxysi256v141 1.07 1.08 1.09 T:deoxysneq256128v1 1.14 1.14 1.15 T:morus1280128v1 1.14 1.15 1.15 T:morus1280256v1 1.15 1.16 1.17 T:morus1280128v2 1.15 1.16 1.17 T:morus1280256v2 1.22 1.23 1.24 T:morus640128v1 1.23 1.23 1.24 T:morus640128v2 1.29 1.29 1.31 T:colm0v1 1.34 1.35 1.35 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii128v141 1.46 1.47 1.47 T:deoxyseq128128v1 1.55 1.56 1.56 T:deoxysii256v141 1.67 1.68 1.69 T:deoxyseq256128v1 1.81 1.81 1.81 T:aes256otrsv3 2.11 2.11 2.12 T:aes128n12t8clocv3 2.11 2.11 2.11 T:aes128n8t8clocv2 2.12 2.12 2.12 T:aes128n12t8clocv2 2.12 2.13 2.13 T:aes128n12t8silcv3 2.12 2.13 2.13 T:aes128n12t8silcv2 2.12 2.13 2.13 T:aes128n8t8silcv2 3.01 3.03 3.05 T:norx6441v2 3.03 3.04 3.09 T:norx6441v3 3.05 3.06 3.07 T:lakekeyakv2 3.25 3.27 3.31 T:seakeyakv2 3.43 3.44 3.47 T:lakekeyakv1 3.53 3.54 3.59 T:norx6441v1 3.82 3.84 3.86 T:norx6444v3 4.16 4.19 4.23 T:norx3241v2 4.19 4.22 4.28 T:norx3241v3 4.27 4.27 4.28 T:aesjambuv1 4.29 4.31 4.33 T:oceankeyakv2 4.46 4.49 4.53 T:norx6461v2 4.48 4.52 4.55 T:norx6461v3 4.64 4.65 4.67 T:norx6444v2 4.97 4.98 5.02 T:norx3241v1 5.16 5.19 5.22 T:norx6461v1 5.42 5.43 5.46 T:riverkeyakv2 5.48 5.51 5.53 T:norx6444v1 5.88 6.00 6.23 T:acorn128v2 5.96 6.01 6.13 T:acorn128v3 6.32 6.34 6.35 ascon128av12 6.34 6.41 6.45 T:norx3261v2 6.42 6.44 6.54 T:norx3261v3 6.47 6.47 6.51 T:ascon128av11 6.46 6.48 6.50 T:ascon96v1 6.64 6.75 6.78 T:ketjemajorv2 7.40 7.43 7.46 T:lunarkeyakv2 7.24 7.60 7.64 T:ketjeminorv2 7.80 7.81 7.83 T:norx3261v1 9.21 9.22 9.23 T:ascon128v1 9.22 9.24 9.28 T:ascon128v11 9.37 9.38 9.39 ascon128v12 11.35 11.38 11.56 T:aes128otrsv2 11.63 11.65 11.67 T:aes128otrpv1 11.64 11.65 11.67 T:aes128otrpv2 11.68 11.75 11.85 T:aes128otrsv1 14.50 14.51 14.51 T:twine80n6t4clocv3 14.60 14.86 14.88 T:aes256otrsv1 14.62 14.91 14.94 T:aes256otrsv2 15.24 15.27 15.29 T:aes256otrpv1 15.27 15.28 15.30 T:aes256otrpv2 15.39 15.44 15.48 T:twine80n6t4clocv2 15.47 15.49 15.51 T:aes128n8clocv1 15.49 15.51 15.52 T:aes128n12clocv1 21.26 21.46 21.56 T:proest256otrv1 22.69 22.71 22.74 T:aeadaes128ocbtaglen64v1 22.72 22.73 22.75 T:aeadaes128ocbtaglen96v1 26.80 26.85 26.90 T:ketjesrv1 26.93 26.95 26.97 T:aeadaes192ocbtaglen96v1 26.93 26.96 26.98 T:aeadaes192ocbtaglen64v1 27.22 27.58 27.68 T:ketjesrv2 31.27 31.30 31.33 T:aeadaes256ocbtaglen64v1 31.28 31.32 31.40 T:aeadaes256ocbtaglen96v1 36.40 36.44 36.46 T:colm127v1 45.20 45.27 45.85 T:ketjejrv1 45.10 45.27 45.64 T:proest128otrv1 61.29 63.37 64.19 T:deoxysneq128128v13 68.47 68.54 70.69 T:ketjejrv2 70.78 70.88 70.97 T:present80n6t4silcv3 84.69 87.97 88.73 T:aezv1 96.12 96.29 96.86 T:deoxyseq128128v13 103.26 104.07 105.59 T:deoxysneq256128v13 126.71 126.76 126.84 T:led80n6t4silcv3 155.87 156.87 157.01 T:deoxyseq256128v13 448.26 456.20 470.08 T:acorn128 2689.61 2709.83 2735.90 T:led80n6t4silcv2 2669.43 2723.37 2766.33 T:led80n6silcv1 2872.79 2902.66 2934.14 T:present80n6t4silcv2 2873.66 2907.57 2934.04 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.26 0.26 0.27 aegis128l 0.28 0.28 0.29 T:tiaoxinv2 0.28 0.28 0.30 T:tiaoxinv1 0.36 0.36 0.37 T:aezv4 0.37 0.37 0.38 T:aezv3 0.39 0.39 0.39 T:aegis128 0.39 0.39 0.40 T:aezv5 0.41 0.42 0.43 aegis256 0.52 0.52 0.53 T:aeadaes128ocbtaglen128v1 0.63 0.63 0.63 T:aes128otrpv3 0.62? 0.63? 1.66? T:aeadaes192ocbtaglen128v1 0.67 0.67 0.67 T:aes128otrcv3 0.71 0.72 0.72 T:aeadaes256ocbtaglen128v1 0.78 0.79 0.79 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.86 0.87 0.87 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.02 1.02 1.03 T:deoxysi128v141 1.05 1.05 1.06 T:deoxysneq128128v1 1.13 1.14 1.14 T:morus1280128v1 1.13 1.14 1.15 T:morus1280256v1 1.14 1.14 1.15 T:morus1280256v2 1.14 1.15 1.16 T:morus1280128v2 1.15 1.16 1.17 T:deoxysi256v141 1.17 1.18 1.20 T:deoxysneq256128v1 1.22 1.23 1.24 T:morus640128v1 1.24 1.25 1.27 T:morus640128v2 1.34 1.35 1.36 T:colm0v1 1.36 1.37 1.37 T:aes128otrsv3 1.39 1.40 1.41 T:deoxysii128v141 1.53 1.54 1.54 T:deoxyseq128128v1 1.59 1.59 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.09 2.09 2.09 T:aes128n8t8clocv2 2.09 2.09 2.12 T:aes128n12t8clocv3 2.10 2.11 2.14 T:aes128n12t8silcv3 2.09 2.12 2.12 T:aes128n12t8clocv2 2.10 2.14 2.14 T:aes128n8t8silcv2 2.10 2.14 2.14 T:aes128n12t8silcv2 2.95 2.96 3.02 T:norx6441v3 2.99 3.01 3.04 T:norx6441v2 3.06 3.08 3.09 T:lakekeyakv2 3.29 3.30 3.34 T:seakeyakv2 3.42 3.43 3.47 T:lakekeyakv1 3.47 3.50 3.53 T:norx6441v1 3.80 3.82 3.84 T:norx6444v3 4.10 4.16 4.24 T:norx3241v3 4.18 4.19 4.24 T:norx3241v2 4.33 4.35 4.38 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.47 4.50 4.51 T:norx6461v3 4.49 4.53 4.59 T:norx6461v2 4.64 4.65 4.70 T:norx6444v2 4.84 4.87 4.93 T:norx3241v1 5.14 5.18 5.22 T:norx6461v1 5.50 5.53 5.54 T:norx6444v1 5.51 5.53 5.55 T:riverkeyakv2 5.92 5.99 6.04 T:acorn128v3 5.93 6.10 6.11 T:acorn128v2 6.31 6.32 6.33 ascon128av12 6.27 6.33 6.39 T:norx3261v2 6.35 6.40 6.42 T:norx3261v3 6.43 6.45 6.47 T:ascon128av11 6.44 6.46 6.48 T:ascon96v1 6.56 6.56 6.60 T:ketjemajorv2 7.46 7.48 7.53 T:lunarkeyakv2 7.73 7.74 7.75 T:norx3261v1 7.32 7.77 7.79 T:ketjeminorv2 9.16 9.18 9.22 T:ascon128v1 9.19 9.22 9.24 T:ascon128v11 9.34 9.34 9.39 ascon128v12 11.52 11.54 11.68 T:aes128otrsv2 11.52 11.72 11.75 T:aes128otrsv1 11.71 11.73 11.78 T:aes128otrpv1 11.74 11.80 11.82 T:aes128otrpv2 14.51 14.51 14.52 T:twine80n6t4clocv3 14.76 15.00 15.01 T:aes256otrsv1 14.78 15.06 15.09 T:aes256otrsv2 15.36 15.37 15.48 T:aes256otrpv2 15.34 15.39 15.42 T:aes256otrpv1 15.43 15.45 15.47 T:twine80n6t4clocv2 15.89 15.90 15.93 T:aes128n12clocv1 15.90 15.92 15.93 T:aes128n8clocv1 21.30 21.52 21.58 T:proest256otrv1 26.87 26.89 26.92 T:aeadaes128ocbtaglen64v1 26.89 26.91 26.93 T:aeadaes128ocbtaglen96v1 27.26 27.34 27.44 T:ketjesrv1 27.87 28.02 28.04 T:ketjesrv2 32.00 32.02 32.05 T:aeadaes192ocbtaglen64v1 32.01 32.03 32.06 T:aeadaes192ocbtaglen96v1 37.25 37.28 37.30 T:aeadaes256ocbtaglen64v1 37.31 37.37 37.50 T:aeadaes256ocbtaglen96v1 44.47 44.50 44.52 T:colm127v1 44.52 44.69 45.14 T:proest128otrv1 45.25 45.36 45.89 T:ketjejrv1 69.16 69.30 71.11 T:ketjejrv2 70.82 70.85 70.97 T:present80n6t4silcv3 73.28 75.10 75.83 T:deoxysneq128128v13 84.56 88.38 88.95 T:aezv1 96.14 96.65 97.05 T:deoxyseq128128v13 117.15 117.48 119.07 T:deoxysneq256128v13 126.60 126.66 126.86 T:led80n6t4silcv3 155.75 156.00 156.99 T:deoxyseq256128v13 450.04 460.56 465.36 T:acorn128 2694.00 2712.10 2727.57 T:led80n6t4silcv2 2673.16 2723.29 2745.88 T:led80n6silcv1 2873.57 2895.50 2913.34 T:present80n6silcv1 2870.74 2914.80 2936.71 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.21 0.21 0.22 T:aezv4 0.22 0.22 0.23 T:aezv3 0.23? 0.24? 0.27? T:aezv5 0.26 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.28 0.28 0.29 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.44 0.44 0.45 aegis256 0.51 0.52 0.52 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:aeadaes192ocbtaglen128v1 0.63 0.63 0.64 T:aes128otrpv3 0.67 0.67 0.67 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.79 T:aes128gcmv1 0.80 0.81 0.81 T:aes256otrpv3 0.87 0.87 0.88 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.06 1.07 T:deoxysneq128128v1 1.13 1.13 1.14 T:morus1280128v1 1.13 1.14 1.14 T:morus1280256v1 1.14 1.14 1.14 T:morus1280256v2 1.14 1.14 1.15 T:morus1280128v2 1.14 1.15 1.17 T:deoxysi256v141 1.16 1.17 1.19 T:deoxysneq256128v1 1.21 1.22 1.24 T:morus640128v1 1.23 1.24 1.25 T:morus640128v2 1.35 1.36 1.38 T:colm0v1 1.36 1.36 1.36 T:aes128otrsv3 1.39 1.39 1.40 T:deoxysii128v141 1.53 1.54 1.56 T:deoxyseq128128v1 1.59 1.59 1.60 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.84 T:aes256otrsv3 2.08 2.08 2.08 T:aes128n12t8clocv3 2.08 2.08 2.08 T:aes128n8t8clocv2 2.09 2.10 2.10 T:aes128n12t8silcv3 2.09 2.12 2.12 T:aes128n12t8clocv2 2.10 2.14 2.14 T:aes128n12t8silcv2 2.09 2.14 2.14 T:aes128n8t8silcv2 2.95 2.98 3.01 T:norx6441v3 2.98 3.00 3.02 T:norx6441v2 3.07 3.08 3.09 T:lakekeyakv2 3.31 3.33 3.37 T:seakeyakv2 3.42 3.44 3.45 T:lakekeyakv1 3.47 3.48 3.50 T:norx6441v1 3.80 3.81 3.83 T:norx6444v3 4.14 4.17 4.23 T:norx3241v3 4.19 4.21 4.25 T:norx3241v2 4.35 4.36 4.37 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.46 4.49 4.53 T:norx6461v2 4.48 4.50 4.51 T:norx6461v3 4.65 4.68 4.69 T:norx6444v2 4.84 4.89 4.94 T:norx3241v1 5.14 5.18 5.21 T:norx6461v1 5.50 5.53 5.56 T:norx6444v1 5.52 5.55 5.57 T:riverkeyakv2 5.90 5.93 6.05 T:acorn128v3 5.95 6.10 6.11 T:acorn128v2 6.31 6.32 6.32 ascon128av12 6.32 6.35 6.36 T:norx3261v2 6.35 6.38 6.40 T:norx3261v3 6.44 6.45 6.47 T:ascon128av11 6.45 6.46 6.47 T:ascon96v1 6.59 6.61 6.65 T:ketjemajorv2 7.47 7.49 7.53 T:lunarkeyakv2 7.72 7.74 7.75 T:norx3261v1 7.34 7.79 7.82 T:ketjeminorv2 9.16 9.17 9.23 T:ascon128v1 9.19 9.21 9.23 T:ascon128v11 9.33 9.35 9.36 ascon128v12 11.52 11.56 11.70 T:aes128otrsv2 11.74 11.75 11.77 T:aes128otrpv1 11.67 11.76 11.79 T:aes128otrsv1 11.77 11.85 11.86 T:aes128otrpv2 14.51 14.52 14.52 T:twine80n6t4clocv3 14.75 14.98 15.07 T:aes256otrsv1 14.80 15.07 15.09 T:aes256otrsv2 15.35 15.38 15.43 T:aes256otrpv1 15.43 15.45 15.46 T:twine80n6t4clocv2 15.38 15.47 15.49 T:aes256otrpv2 15.90 15.91 15.93 T:aes128n12clocv1 15.89 15.91 15.94 T:aes128n8clocv1 21.26 21.52 21.55 T:proest256otrv1 26.86 26.88 26.90 T:aeadaes128ocbtaglen64v1 26.86 26.88 26.91 T:aeadaes128ocbtaglen96v1 27.39 27.42 27.51 T:ketjesrv1 27.66 27.99 28.04 T:ketjesrv2 31.99 32.00 32.01 T:aeadaes192ocbtaglen96v1 31.99 32.01 32.03 T:aeadaes192ocbtaglen64v1 37.25 37.27 37.30 T:aeadaes256ocbtaglen64v1 37.28 37.30 37.39 T:aeadaes256ocbtaglen96v1 44.46 44.49 44.51 T:colm127v1 44.65 44.72 45.17 T:proest128otrv1 45.43 45.60 45.84 T:ketjejrv1 69.18 69.25 71.00 T:ketjejrv2 70.84 70.85 70.88 T:present80n6t4silcv3 73.20 75.17 75.44 T:deoxysneq128128v13 84.58 88.39 88.91 T:aezv1 96.09 96.49 96.59 T:deoxyseq128128v13 117.17 117.52 119.12 T:deoxysneq256128v13 126.61 126.68 126.80 T:led80n6t4silcv3 155.82 155.88 156.94 T:deoxyseq256128v13 450.34 464.41 468.39 T:acorn128 2701.62 2712.29 2727.78 T:led80n6silcv1 2695.64 2715.19 2742.80 T:led80n6t4silcv2 2863.45 2895.19 2913.38 T:present80n6t4silcv2 2872.63 2911.79 2952.41 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.98? 1.00? 1.16? T:aegis128 1.10 1.12 1.16 aegis128l 1.27? 1.28? 1.63? T:tiaoxinv2 1.29? 1.31? 1.45? aegis256 1.30? 1.32? 1.69? T:tiaoxinv1 1.39 1.43 1.51 T:aezv4 1.51? 1.53? 1.77? T:aezv3 1.61? 1.66? 1.84? T:aeadaes128ocbtaglen128v1 1.65? 1.84? 1.87? T:aezv5 1.91 1.96 2.00 T:aes128otrpv3 2.05 2.09 2.22 T:aeadaes256ocbtaglen128v1 2.27 2.30 2.35 T:aes128otrsv3 2.48 2.50 2.55 T:aes256otrpv3 2.53 2.55 2.58 T:aes128n12t8clocv3 2.50 2.55 2.59 T:aes128n8t8clocv2 2.52 2.63 2.76 T:aes128n12t8clocv2 2.68 2.73 2.86 T:colm0v1 2.77 2.80 2.84 T:aes128n12t8silcv2 2.77 2.80 2.80 T:aes128otrcv3 2.79 2.80 2.83 T:aes128n8t8silcv2 2.83 2.85 2.86 T:aes128n12t8silcv3 3.05 3.06 3.07 T:aes256otrsv3 3.12 3.19 3.39 T:deoxysneq128128v1 3.03? 3.38? 28.42? T:aeadaes192ocbtaglen128v1 3.55 3.56 3.59 T:aes256otrcv3 3.43 3.59 3.66 T:deoxysi128v141 3.95 3.98 4.09 T:deoxysneq256128v1 4.11 4.22 4.39 T:morus640128v1 4.14 4.24 4.39 T:deoxysi256v141 4.37 4.39 4.42 T:aes128gcmv1 4.33 4.43 4.62 T:morus640128v2 4.63 4.66 4.70 T:deoxyseq128128v1 4.70 4.72 4.80 T:deoxysii128v141 5.49 5.58 5.59 T:aesjambuv1 5.55 5.62 5.66 T:deoxyseq256128v1 5.58 5.62 5.72 T:deoxysii256v141 5.58 5.68 5.95 aes256gcmv1 5.90 5.95 6.06 T:morus1280128v1 5.95 6.01 6.12 T:morus1280256v1 6.26 6.38 6.48 T:morus1280256v2 6.44 6.48 6.66 T:morus1280128v2 9.65 9.70 9.88 T:ascon96v1 9.64 9.73 10.03 T:ascon128av11 9.69 9.95 10.35 T:norx6441v2 9.80 9.96 10.45 ascon128av12 9.78 10.02 10.29 T:norx6441v3 10.05 10.34 10.51 T:norx3241v2 10.27 10.34 10.55 T:norx3241v3 10.24 10.42 10.60 T:norx3241v1 10.64 10.87 11.05 T:norx6441v1 11.19 11.42 11.72 T:lakekeyakv1 12.08 12.13 12.54 T:ascon128v11 12.14 12.20 12.32 T:ascon128v1 12.43 12.47 12.57 T:riverkeyakv2 12.62 12.73 12.85 ascon128v12 13.08 13.13 13.74 T:lakekeyakv2 14.48 14.69 15.04 T:norx6461v1 14.48 14.80 15.27 T:norx6461v2 14.96 15.13 15.27 T:norx6461v3 15.27 15.45 15.61 T:norx3261v2 16.12 16.16 16.19 T:norx3261v1 16.14? 16.38? 19.88? T:norx3261v3 18.00 18.06 18.25 T:aes128otrsv1 18.52 18.55 18.68 T:twine80n6t4clocv3 18.66 18.73 19.01 T:aes128otrsv2 18.70 18.90 19.08 T:aes128otrpv2 18.87 19.02 19.16 T:aes128otrpv1 19.23 19.33 19.98 T:aes128n8clocv1 19.44 19.48 19.59 T:twine80n6t4clocv2 19.45 19.48 20.01 T:aes128n12clocv1 23.59 23.77 24.02 T:norx6444v3 23.82 24.10 24.40 T:aes256otrsv1 24.08 24.39 24.79 T:aes256otrsv2 24.39 24.52 24.86 T:aes256otrpv1 24.59 24.84 24.98 T:aes256otrpv2 25.32 25.48 25.65 T:ketjeminorv2 25.67 26.27 27.06 T:acorn128v2 26.14 26.48 26.71 T:acorn128v3 29.67 29.76 30.07 T:seakeyakv2 33.14 33.30 33.53 T:norx6444v2 35.44 35.60 36.10 T:aeadaes128ocbtaglen96v1 35.30 35.63 36.05 T:aeadaes128ocbtaglen64v1 39.16 39.26 39.36 T:norx6444v1 41.43 41.52 41.84 T:aeadaes192ocbtaglen64v1 41.48 41.74 42.05 T:aeadaes192ocbtaglen96v1 42.43 42.60 42.81 T:ketjesrv1 43.58 44.41 44.82 T:ketjemajorv2 46.79 47.05 47.45 T:oceankeyakv2 47.89 48.28 48.59 T:ketjesrv2 48.41 48.65 49.08 T:aeadaes256ocbtaglen64v1 48.59 48.68 48.94 T:aeadaes256ocbtaglen96v1 53.01 53.33 53.56 T:colm127v1 58.67 58.92 59.04 T:ketjejrv1 60.71 60.98 61.25 T:proest256otrv1 72.56 72.92 73.45 T:deoxysneq128128v13 86.84 87.12 87.47 T:proest128otrv1 87.06 87.17 87.48 T:present80n6t4silcv3 92.07 92.53 95.46 T:ketjejrv2 96.08 96.47 102.77 T:aezv1 117.40 118.22 118.93 T:deoxysneq256128v13 118.70 119.49 121.93 T:deoxyseq128128v13 119.62 120.02 120.79 T:lunarkeyakv2 149.77 150.05 150.41 T:led80n6t4silcv3 195.36 195.95 196.39 T:deoxyseq256128v13 1588.74 1625.63 1648.82 T:acorn128 2992.23 2995.10 2998.51 T:led80n6silcv1 3000.28 3003.42 3007.83 T:led80n6t4silcv2 3206.42 3208.77 3211.43 T:present80n6silcv1 3211.34 3213.28 3214.60 T:present80n6t4silcv2

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.01? 1.03? 1.34? T:aegis128 1.12? 1.19? 1.34? aegis128l 1.36 1.38 1.45 T:tiaoxinv1 1.38 1.42 1.52 aegis256 1.39? 1.44? 1.62? T:tiaoxinv2 1.41 1.45 1.52 T:aezv4 1.51 1.52 1.55 T:aezv3 1.64? 1.86? 2.16? T:aezv5 1.79? 1.91? 2.01? T:aeadaes128ocbtaglen128v1 1.97? 2.06? 2.20? T:aes128otrpv3 2.27? 2.30? 2.57? T:aeadaes256ocbtaglen128v1 2.34 2.38 2.44 T:aes128otrsv3 2.46 2.48 2.66 T:aes256otrpv3 2.70 2.73 2.75 T:aes128n12t8clocv3 2.72 2.73 2.73 T:aes128n8t8clocv2 2.81? 2.94? 3.51? T:aes128n12t8clocv2 2.93 2.94 2.95 T:aes128otrcv3 3.04 3.07 3.12 T:aes128n12t8silcv3 3.12 3.15 3.30 T:colm0v1 3.30 3.31 3.31 T:aes256otrsv3 3.41? 3.44? 4.43? T:aeadaes192ocbtaglen128v1 3.73 3.79 3.80 T:aes256otrcv3 3.04? 3.80? 3.84? T:aes128n12t8silcv2 3.04? 3.83? 3.87? T:aes128n8t8silcv2 4.25 4.35 4.49 T:morus640128v1 4.33 4.41 4.52 T:aes128gcmv1 4.73 4.83 4.97 T:morus640128v2 4.88 4.93 5.06 T:deoxysneq128128v1 4.92 4.99 5.07 T:deoxysi128v141 5.00 5.07 5.17 T:deoxysneq256128v1 5.31 5.33 5.39 T:deoxysii128v141 5.75 5.76 5.78 T:aesjambuv1 5.80 5.90 6.01 aes256gcmv1 5.82 5.91 5.97 T:deoxysi256v141 6.00 6.05 6.22 T:morus1280256v1 6.07 6.14 6.20 T:morus1280128v1 6.22 6.24 6.36 T:morus1280256v2 6.23 6.37 6.45 T:morus1280128v2 6.57 6.60 6.66 T:deoxyseq128128v1 6.63 6.70 6.77 T:deoxysii256v141 6.64 6.70 6.72 T:deoxyseq256128v1 9.61 9.67 9.85 T:ascon96v1 9.63 9.69 10.01 T:ascon128av11 10.05 10.27 10.40 ascon128av12 10.15 10.34 10.53 T:norx6441v2 10.23 10.35 10.50 T:norx6441v3 10.23 10.41 10.64 T:norx3241v3 10.30 10.43 10.61 T:norx3241v2 10.29 10.45 10.63 T:norx6441v1 10.44 10.49 10.81 T:norx3241v1 11.27 11.48 11.81 T:lakekeyakv1 12.07 12.09 12.55 T:ascon128v11 12.02 12.16 12.40 T:ascon128v1 12.55 12.65 12.84 T:riverkeyakv2 12.77 12.84 12.89 ascon128v12 13.10 13.18 13.39 T:lakekeyakv2 14.66 14.95 15.57 T:norx6461v1 14.85 15.06 15.30 T:norx6461v2 15.12 15.23 15.53 T:norx6461v3 15.41 15.77 15.93 T:norx3261v2 16.05? 16.09? 19.48? T:norx3261v3 16.12 16.30 16.54 T:norx3261v1 17.96 18.05 18.52 T:aes128otrsv1 18.66 18.70 18.84 T:twine80n6t4clocv3 19.06 19.16 19.36 T:aes128otrpv2 19.02 19.19 19.41 T:aes128otrpv1 18.83 19.23 19.48 T:aes128otrsv2 19.51 19.59 19.72 T:twine80n6t4clocv2 19.88 19.97 20.59 T:aes128n12clocv1 19.75 19.99 20.48 T:aes128n8clocv1 23.50 23.56 23.87 T:norx6444v3 23.97 24.17 24.80 T:aes256otrsv1 24.20 24.71 25.21 T:aes256otrsv2 24.88 25.02 25.27 T:aes256otrpv1 24.91 25.03 25.25 T:aes256otrpv2 25.59 26.46 26.80 T:ketjeminorv2 26.38 26.64 26.85 T:acorn128v3 26.17 26.80 27.15 T:acorn128v2 29.66 29.84 29.95 T:seakeyakv2 33.30 33.44 34.01 T:norx6444v2 39.26 39.59 39.98 T:norx6444v1 42.84 43.01 43.47 T:aeadaes128ocbtaglen64v1 42.93 43.14 43.41 T:aeadaes128ocbtaglen96v1 42.88 43.20 43.55 T:ketjesrv1 44.15 44.45 45.05 T:ketjemajorv2 46.95 47.21 47.64 T:oceankeyakv2 48.49 48.76 49.41 T:ketjesrv2 50.30 50.51 50.80 T:aeadaes192ocbtaglen96v1 50.23 50.52 50.84 T:aeadaes192ocbtaglen64v1 58.55 58.98 59.42 T:ketjejrv1 59.08 59.23 59.38 T:aeadaes256ocbtaglen96v1 59.19 59.25 59.70 T:aeadaes256ocbtaglen64v1 61.37 61.50 61.68 T:colm127v1 61.57 61.98 62.49 T:proest256otrv1 84.22 84.70 85.48 T:deoxysneq128128v13 87.26 87.83 88.16 T:present80n6t4silcv3 86.55 88.12 90.66 T:proest128otrv1 93.07 93.54 95.52 T:ketjejrv2 102.59 102.90 109.55 T:aezv1 118.82 120.20 122.20 T:deoxyseq128128v13 120.51 121.04 121.82 T:lunarkeyakv2 130.91 131.52 132.19 T:deoxysneq256128v13 149.73 150.05 150.33 T:led80n6t4silcv3 195.12 195.55 196.65 T:deoxyseq256128v13 1601.80 1604.17 1634.61 T:acorn128 2991.45 2995.43 3000.51 T:led80n6silcv1 3002.03 3004.04 3009.29 T:led80n6t4silcv2 3205.88 3208.15 3213.84 T:present80n6silcv1 3202.48 3213.34 3215.09 T:present80n6t4silcv2

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.02 1.05 1.08 T:aegis128 1.11? 1.11? 1.79? T:aezv4 1.12? 1.12? 1.70? T:aezv5 1.12? 1.16? 1.34? aegis128l 1.18 1.18 1.19 T:aezv3 1.36 1.38 1.45 T:tiaoxinv1 1.36? 1.41? 1.95? T:tiaoxinv2 1.41? 1.44? 2.16? aegis256 1.75 1.78 1.81 T:aeadaes128ocbtaglen128v1 1.92 1.95 1.98 T:aes128otrpv3 2.29 2.31 2.45 T:aeadaes256ocbtaglen128v1 2.38 2.41 2.45 T:aes128otrsv3 2.42 2.45 2.46 T:aes256otrpv3 2.50 2.53 2.77 T:aes128n8t8clocv2 2.52? 2.57? 3.49? T:aes128n12t8clocv3 2.56? 2.77? 3.51? T:aes128n12t8clocv2 2.85? 2.89? 3.82? T:aes128n12t8silcv3 2.92 2.94 2.95 T:aes128otrcv3 3.12? 3.19? 4.13? T:colm0v1 3.30 3.31 3.32 T:aes256otrsv3 3.44? 3.48? 29.00? T:aeadaes192ocbtaglen128v1 3.77 3.78 3.79 T:aes256otrcv3 2.87? 3.83? 3.84? T:aes128n12t8silcv2 2.84? 3.86? 3.88? T:aes128n8t8silcv2 4.20 4.28 4.33 T:morus640128v1 4.30 4.35 4.41 T:aes128gcmv1 4.71 4.77 5.12 T:deoxysneq128128v1 4.74 4.84 4.91 T:morus640128v2 4.88 4.92 4.96 T:deoxysneq256128v1 4.90 4.96 5.32 T:deoxysi128v141 5.30 5.31 5.38 T:deoxysii128v141 5.73 5.75 5.77 T:aesjambuv1 5.77 5.80 6.17 T:deoxysi256v141 5.91 5.95 6.03 T:morus1280256v1 5.93 6.00 6.06 T:morus1280128v1 5.84 6.02 6.06 aes256gcmv1 6.15 6.16 6.21 T:morus1280256v2 6.15 6.18 6.22 T:morus1280128v2 6.54 6.58 6.64 T:deoxyseq128128v1 6.60 6.63 6.70 T:deoxysii256v141 6.69 6.71 7.22 T:deoxyseq256128v1 9.57 9.65 10.16 T:ascon96v1 9.61 9.68 9.89 T:ascon128av11 9.86 9.98 10.07 ascon128av12 10.20 10.23 10.38 T:norx6441v3 10.19 10.29 10.59 T:norx3241v3 10.22 10.35 10.46 T:norx6441v2 10.28 10.42 10.45 T:norx6441v1 10.30 10.44 10.63 T:norx3241v2 10.35 10.49 10.58 T:norx3241v1 11.25 11.35 11.52 T:lakekeyakv1 12.05 12.14 12.47 T:ascon128v11 12.15 12.20 12.39 T:ascon128v1 12.59 12.65 12.91 T:riverkeyakv2 12.52 12.66 12.82 ascon128v12 13.16 13.26 13.52 T:lakekeyakv2 14.44 14.61 14.84 T:norx6461v1 14.81 15.02 15.22 T:norx6461v2 15.10 15.34 15.50 T:norx6461v3 15.58 15.80 16.04 T:norx3261v2 15.94? 16.09? 19.30? T:norx3261v3 16.20 16.27 16.35 T:norx3261v1 17.99 18.10 18.62 T:aes128otrsv1 18.52 18.59 18.74 T:twine80n6t4clocv3 18.87 18.99 19.50 T:aes128otrsv2 19.05 19.14 19.58 T:aes128otrpv1 19.16 19.25 19.61 T:aes128otrpv2 19.48 19.61 19.70 T:twine80n6t4clocv2 19.76 19.95 20.17 T:aes128n12clocv1 19.76 20.00 20.07 T:aes128n8clocv1 23.42 23.58 23.82 T:norx6444v3 24.02 24.47 24.66 T:aes256otrsv1 24.17 24.65 24.88 T:aes256otrsv2 24.80 25.01 25.12 T:aes256otrpv1 25.09 25.15 25.30 T:aes256otrpv2 25.57 26.24 26.34 T:ketjeminorv2 25.98 26.49 26.59 T:acorn128v3 25.86 26.56 26.93 T:acorn128v2 29.63 29.84 30.24 T:seakeyakv2 33.34 33.51 33.52 T:norx6444v2 39.16 39.38 39.75 T:norx6444v1 42.81 42.95 43.06 T:aeadaes128ocbtaglen64v1 42.82 42.95 43.34 T:aeadaes128ocbtaglen96v1 43.09 43.44 43.77 T:ketjesrv1 44.23 44.73 44.92 T:ketjemajorv2 46.66 46.91 47.10 T:oceankeyakv2 48.45 48.66 49.22 T:ketjesrv2 50.23 50.30 50.44 T:aeadaes192ocbtaglen96v1 50.20 50.31 50.38 T:aeadaes192ocbtaglen64v1 58.93 59.06 59.47 T:ketjejrv1 59.04 59.10 59.19 T:aeadaes256ocbtaglen96v1 59.18 59.25 59.38 T:aeadaes256ocbtaglen64v1 59.96 60.12 60.43 T:proest256otrv1 61.04 61.52 61.63 T:colm127v1 84.76 84.92 85.19 T:deoxysneq128128v13 86.62 87.05 87.19 T:proest128otrv1 87.40 87.65 87.91 T:present80n6t4silcv3 93.28 93.48 95.95 T:ketjejrv2 102.84 103.48 109.69 T:aezv1 118.62 119.98 122.34 T:deoxyseq128128v13 120.52 120.98 121.34 T:lunarkeyakv2 130.86 131.26 132.09 T:deoxysneq256128v13 150.00 150.18 150.62 T:led80n6t4silcv3 194.97 195.40 195.73 T:deoxyseq256128v13 1601.88 1622.13 1644.80 T:acorn128 2993.41 2996.23 3008.11 T:led80n6silcv1 2999.98 3005.20 3012.27 T:led80n6t4silcv2 3205.58 3207.22 3213.74 T:present80n6silcv1 3203.88 3213.08 3213.81 T:present80n6t4silcv2