VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20260330

[Page version: 20260415 05:37:31]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.22 0.22 0.23 T:tiaoxinv2 0.22 0.22 0.23 T:tiaoxinv1 0.24 0.25 0.25 aegis128l 0.37 0.38 0.38 T:aegis128 0.41 0.42 0.43 aegis256 0.42 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv3 0.46 0.46 0.47 T:aezv5 0.46 0.47 0.47 T:aeadaes128ocbtaglen128v1 0.51 0.52 0.53 T:aes128otrcv3 0.53 0.53 0.54 T:aes128otrpv3 0.52 0.53 0.54 T:aes128otrsv3 0.05? 0.56? 1.39? T:aeadaes192ocbtaglen128v1 0.58 0.59 0.61 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrpv3 0.66 0.67 0.68 T:aes256otrsv3 0.68 0.69 0.71 T:aes256otrcv3 0.80 0.81 0.83 T:deoxysi128v141 0.86 0.86 0.87 T:deoxysneq128128v1 0.91 0.91 0.92 T:aes128gcmv1 0.91 0.92 0.93 T:deoxysi256v141 0.95 0.96 0.97 T:deoxysneq256128v1 0.96 0.97 0.98 T:morus1280256v1 0.96 0.97 0.99 T:morus1280256v2 0.96 0.97 0.98 T:morus1280128v2 0.97 0.98 0.99 T:morus1280128v1 1.05 1.07 1.09 aes256gcmv1 1.09 1.12 1.15 T:morus640128v2 1.12 1.14 1.16 T:morus640128v1 1.61 1.62 1.64 T:deoxysii128v141 1.74 1.75 1.76 T:colm0v1 1.79 1.81 1.82 T:deoxyseq128128v1 1.80 1.82 1.83 T:deoxysii256v141 1.95 2.00 2.04 T:lunarkeyakv2 2.04 2.05 2.06 T:deoxyseq256128v1 2.12 2.12 2.13 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n8t8clocv2 2.12 2.12 2.13 T:aes128n12t8clocv3 2.12 2.12 2.13 T:aes128n12t8clocv2 2.29 2.32 2.36 T:norx6444v3 2.55 2.58 2.61 T:norx6441v3 2.57 2.62 2.68 T:norx6441v2 2.69 2.70 2.72 T:seakeyakv2 2.72 2.75 2.78 T:oceankeyakv2 3.09 3.10 3.13 T:lakekeyakv1 3.07 3.13 3.18 T:norx6441v1 3.19 3.20 3.22 T:lakekeyakv2 3.37 3.39 3.42 T:norx6444v2 3.72 3.78 3.84 T:norx3241v3 3.81 3.85 3.87 T:norx6444v1 3.80 3.87 3.95 T:norx3241v2 3.84 3.90 3.94 T:norx6461v3 3.85 3.90 3.95 T:norx6461v2 4.25 4.25 4.26 T:aesjambuv1 4.52 4.60 4.66 T:norx3241v1 4.66 4.70 4.75 T:norx6461v1 4.83 4.87 4.91 T:acorn128v2 4.81 4.89 4.94 T:acorn128v3 5.56 5.73 5.74 T:ketjemajorv2 5.76 5.81 5.89 T:norx3261v3 5.83 5.89 5.98 T:norx3261v2 6.20 6.21 6.23 ascon128av12 6.31 6.34 6.36 T:ascon128av11 6.34 6.36 6.38 T:ascon96v1 7.07 7.23 7.58 T:ketjeminorv2 7.22 7.26 7.37 T:riverkeyakv2 7.35 7.39 7.43 T:norx3261v1 9.06 9.09 9.18 T:ascon128v11 9.10 9.19 9.21 T:ascon128v1 9.19 9.21 9.22 ascon128v12 11.77 11.79 11.82 T:aes128otrpv2 11.78 11.80 11.82 T:aes128otrpv1 12.24 12.26 12.30 T:aes128otrsv2 12.23 12.26 12.30 T:aes128otrsv1 14.50 14.51 14.53 T:twine80n6t4clocv3 15.26 15.28 15.31 T:aes256otrpv2 15.27 15.29 15.32 T:aes256otrpv1 15.38 15.40 15.43 T:aes256otrsv1 15.42 15.45 15.48 T:aes256otrsv2 15.49 15.56 15.61 T:twine80n6t4clocv2 18.76 18.87 19.12 T:proest256otrv1 20.40 20.45 20.49 T:aes128n8clocv1 20.43 20.45 20.47 T:aes128n12clocv1 22.40 22.44 22.48 T:aeadaes128ocbtaglen96v1 22.42 22.45 22.49 T:aeadaes128ocbtaglen64v1 26.57 26.59 26.62 T:aeadaes192ocbtaglen96v1 26.55 26.59 26.62 T:aeadaes192ocbtaglen64v1 26.87 26.93 27.06 T:ketjesrv1 27.06 27.30 27.52 T:ketjesrv2 30.80 30.83 30.87 T:aeadaes256ocbtaglen96v1 30.81 30.83 30.86 T:aeadaes256ocbtaglen64v1 43.52 43.72 44.23 T:proest128otrv1 47.35 47.66 48.92 T:ketjejrv1 48.33 48.40 48.47 T:colm127v1 63.19 63.59 63.65 T:deoxysneq128128v13 68.31 68.60 70.94 T:ketjejrv2 70.86 71.03 71.22 T:present80n6t4silcv3 103.92 105.12 105.30 T:deoxysneq256128v13 126.22 126.33 126.44 T:led80n6t4silcv3 125.47 127.60 129.33 T:deoxyseq128128v13 135.52 136.49 137.89 T:aezv1 209.14 209.57 213.22 T:deoxyseq256128v13 397.59 406.15 417.92 T:acorn128 3556.62 3575.85 3621.54 T:led80n6t4silcv2 3605.19 3631.32 3653.10 T:led80n6silcv1 3804.71 3839.19 3904.46 T:present80n6t4silcv2 3809.93 3875.32 3926.96 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.26 0.26 0.27 aegis128l 0.33 0.34 0.35 T:tiaoxinv2 0.33 0.34 0.34 T:tiaoxinv1 0.40 0.40 0.41 T:aegis128 0.41 0.42 0.42 aegis256 0.42 0.43 0.43 T:aezv4 0.43 0.43 0.44 T:aezv3 0.46 0.47 0.48 T:aezv5 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.56 0.57 0.58 T:aes128otrsv3 -0.25? 0.58? 1.03? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.70 0.71 T:aes256otrcv3 0.69 0.71 0.72 T:aes256otrsv3 0.70 0.71 0.71 T:aes256otrpv3 0.87 0.89 0.90 T:deoxysi128v141 0.94 0.95 0.96 T:deoxysneq128128v1 0.95 0.96 0.97 T:aes128gcmv1 0.97 0.98 0.98 T:morus1280128v1 0.97 0.98 0.99 T:morus1280256v1 0.97 0.98 0.99 T:morus1280256v2 0.97 0.98 0.99 T:morus1280128v2 0.98 0.99 1.00 T:deoxysi256v141 1.05 1.06 1.08 T:deoxysneq256128v1 1.11 1.14 1.16 T:morus640128v2 1.12 1.14 1.16 T:morus640128v1 1.16 1.17 1.18 aes256gcmv1 1.61 1.62 1.63 T:deoxysii128v141 1.80 1.82 1.83 T:deoxysii256v141 1.83 1.84 1.86 T:colm0v1 1.84 1.85 1.85 T:deoxyseq128128v1 2.04 2.05 2.07 T:deoxyseq256128v1 2.05 2.06 2.06 T:aes128n12t8silcv3 2.05 2.06 2.06 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.02 2.07 2.11 T:lunarkeyakv2 2.29 2.31 2.35 T:norx6444v3 2.50 2.54 2.59 T:norx6441v2 2.54 2.57 2.60 T:norx6441v3 2.75 2.77 2.78 T:seakeyakv2 2.79 2.82 2.86 T:oceankeyakv2 3.03 3.07 3.13 T:norx6441v1 3.07 3.09 3.11 T:lakekeyakv1 3.17 3.19 3.22 T:lakekeyakv2 3.39 3.41 3.45 T:norx6444v2 3.64 3.70 3.78 T:norx3241v3 3.80 3.85 3.90 T:norx6461v2 3.82 3.85 3.87 T:norx6444v1 3.82 3.86 3.91 T:norx6461v3 3.83 3.88 3.94 T:norx3241v2 4.37 4.43 4.48 T:norx3241v1 4.56 4.56 4.57 T:aesjambuv1 4.53 4.59 4.63 T:norx6461v1 4.88 4.97 5.41 T:acorn128v2 5.40 5.56 5.71 T:ketjemajorv2 5.27? 5.71? 5.98? T:acorn128v3 5.74 5.78 5.83 T:norx3261v3 5.75 5.81 5.87 T:norx3261v2 6.20 6.21 6.23 ascon128av12 6.27 6.29 6.32 T:ascon128av11 6.28 6.31 6.33 T:ascon96v1 7.23 7.25 7.27 T:norx3261v1 7.30 7.40 7.45 T:ketjeminorv2 7.38 7.40 7.44 T:riverkeyakv2 9.10 9.12 9.15 T:ascon128v11 9.13 9.15 9.17 T:ascon128v1 9.18 9.20 9.22 ascon128v12 11.91 11.95 11.99 T:aes128otrpv1 11.94 12.07 12.16 T:aes128otrpv2 12.53 12.57 12.60 T:aes128otrsv1 12.54 12.58 12.62 T:aes128otrsv2 14.50 14.51 14.53 T:twine80n6t4clocv3 15.43 15.46 15.57 T:twine80n6t4clocv2 15.42 15.46 15.63 T:aes256otrpv2 15.43 15.48 15.52 T:aes256otrpv1 15.66 15.70 15.73 T:aes256otrsv1 15.71 15.74 15.78 T:aes256otrsv2 18.72 18.85 19.08 T:proest256otrv1 21.15 21.19 21.22 T:aes128n12clocv1 21.18 21.23 21.27 T:aes128n8clocv1 27.27 27.61 27.80 T:ketjesrv1 27.64 27.75 27.95 T:ketjesrv2 30.43 30.48 30.53 T:aeadaes128ocbtaglen96v1 30.47 30.50 30.57 T:aeadaes128ocbtaglen64v1 36.36 36.40 36.45 T:aeadaes192ocbtaglen64v1 36.38 36.41 36.45 T:aeadaes192ocbtaglen96v1 42.34 42.39 42.43 T:aeadaes256ocbtaglen96v1 42.37 42.41 42.46 T:aeadaes256ocbtaglen64v1 42.52 42.80 43.28 T:proest128otrv1 47.30 47.42 49.10 T:ketjejrv1 64.37 64.44 64.51 T:colm127v1 69.64 69.85 71.50 T:ketjejrv2 70.89 70.99 71.06 T:present80n6t4silcv3 86.29 86.77 87.06 T:deoxysneq128128v13 125.96 126.07 126.22 T:led80n6t4silcv3 125.51 128.48 129.31 T:deoxyseq128128v13 131.02 131.95 132.03 T:deoxysneq256128v13 135.69 136.64 137.82 T:aezv1 207.74 208.42 210.67 T:deoxyseq256128v13 397.23 406.06 418.55 T:acorn128 3568.69 3592.25 3629.35 T:led80n6t4silcv2 3606.33 3632.39 3661.62 T:led80n6silcv1 3805.34 3846.87 3937.92 T:present80n6t4silcv2 3812.43 3876.97 3918.58 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.16 0.16 0.16 T:aezv4 0.16 0.16 0.16 T:aezv3 0.18? 0.19? 0.20? T:aezv5 0.26 0.27 0.27 aegis128l 0.33 0.34 0.34 T:tiaoxinv2 0.33 0.34 0.35 T:tiaoxinv1 0.40 0.41 0.41 T:aegis128 0.46 0.47 0.47 aegis256 0.48 0.49 0.50 T:aeadaes128ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.58 T:aes128otrpv3 0.57 0.57 0.58 T:aes128otrsv3 0.16? 0.59? 1.46? T:aeadaes192ocbtaglen128v1 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes256otrcv3 0.70 0.71 0.71 T:aes256otrpv3 0.71 0.72 0.73 T:aes256otrsv3 0.87 0.88 0.90 T:deoxysi128v141 0.93 0.95 0.96 T:deoxysneq128128v1 0.95 0.96 0.97 T:aes128gcmv1 0.97 0.97 0.98 T:morus1280256v2 0.97 0.98 0.99 T:morus1280128v2 0.97 0.98 0.99 T:morus1280128v1 0.97 0.98 0.98 T:morus1280256v1 0.98 0.99 0.99 T:deoxysi256v141 1.06 1.07 1.08 T:deoxysneq256128v1 1.12 1.14 1.16 T:morus640128v1 1.13 1.15 1.17 T:morus640128v2 1.16 1.17 1.19 aes256gcmv1 1.60 1.62 1.63 T:deoxysii128v141 1.81 1.82 1.83 T:deoxysii256v141 1.83 1.84 1.85 T:colm0v1 1.84 1.85 1.86 T:deoxyseq128128v1 2.04 2.05 2.07 T:deoxyseq256128v1 2.06 2.06 2.06 T:aes128n12t8silcv3 2.05 2.06 2.08 T:aes128n12t8clocv3 2.06 2.06 2.08 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.04 2.08 2.12 T:lunarkeyakv2 2.29 2.33 2.36 T:norx6444v3 2.53 2.56 2.60 T:norx6441v2 2.54 2.57 2.60 T:norx6441v3 2.79 2.81 2.82 T:seakeyakv2 2.83 2.86 2.89 T:oceankeyakv2 3.04 3.09 3.14 T:norx6441v1 3.09 3.12 3.13 T:lakekeyakv1 3.19 3.21 3.24 T:lakekeyakv2 3.41 3.43 3.45 T:norx6444v2 3.65 3.71 3.76 T:norx3241v3 3.81 3.86 3.91 T:norx6461v3 3.83 3.87 3.91 T:norx6461v2 3.85 3.88 3.91 T:norx6444v1 3.83 3.91 3.97 T:norx3241v2 4.35 4.43 4.50 T:norx3241v1 4.56 4.57 4.57 T:aesjambuv1 4.53 4.57 4.62 T:norx6461v1 4.89 4.98 5.42 T:acorn128v2 5.55 5.60 5.64 T:ketjemajorv2 5.27? 5.70? 5.98? T:acorn128v3 5.72 5.77 5.82 T:norx3261v3 5.77 5.83 5.88 T:norx3261v2 6.19 6.21 6.23 ascon128av12 6.28 6.30 6.32 T:ascon128av11 6.29 6.31 6.33 T:ascon96v1 7.23 7.26 7.28 T:norx3261v1 7.41 7.43 7.44 T:riverkeyakv2 7.33 7.44 7.49 T:ketjeminorv2 9.09 9.11 9.14 T:ascon128v11 9.04 9.14 9.17 T:ascon128v1 9.19 9.21 9.22 ascon128v12 11.95 11.99 12.02 T:aes128otrpv1 12.00 12.16 12.19 T:aes128otrpv2 12.57 12.61 12.64 T:aes128otrsv1 12.57 12.62 12.65 T:aes128otrsv2 14.50 14.51 14.54 T:twine80n6t4clocv3 15.43 15.48 15.58 T:twine80n6t4clocv2 15.41 15.49 15.54 T:aes256otrpv1 15.47 15.60 15.70 T:aes256otrpv2 15.70 15.73 15.76 T:aes256otrsv1 15.76 15.79 15.82 T:aes256otrsv2 18.73 18.84 19.06 T:proest256otrv1 21.15 21.19 21.21 T:aes128n12clocv1 21.17 21.22 21.27 T:aes128n8clocv1 27.44 27.63 27.75 T:ketjesrv1 27.68 27.74 28.02 T:ketjesrv2 30.46 30.50 30.52 T:aeadaes128ocbtaglen96v1 30.46 30.52 30.65 T:aeadaes128ocbtaglen64v1 36.37 36.40 36.44 T:aeadaes192ocbtaglen64v1 36.37 36.41 36.44 T:aeadaes192ocbtaglen96v1 42.34 42.39 42.43 T:aeadaes256ocbtaglen96v1 42.36 42.39 42.43 T:aeadaes256ocbtaglen64v1 42.57 42.99 43.31 T:proest128otrv1 47.14 47.42 48.99 T:ketjejrv1 63.39 63.48 63.59 T:colm127v1 69.66 69.84 71.73 T:ketjejrv2 70.88 70.98 71.06 T:present80n6t4silcv3 86.22 86.86 87.06 T:deoxysneq128128v13 126.00 126.08 126.44 T:led80n6t4silcv3 125.75 128.38 129.41 T:deoxyseq128128v13 131.04 132.02 132.07 T:deoxysneq256128v13 135.65 136.53 137.79 T:aezv1 207.86 208.35 209.76 T:deoxyseq256128v13 397.64 406.94 418.55 T:acorn128 3569.07 3601.19 3657.92 T:led80n6t4silcv2 3607.35 3632.72 3655.83 T:led80n6silcv1 3809.58 3852.67 3917.04 T:present80n6silcv1 3809.14 3855.61 3907.48 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.17 0.17 0.18 T:tiaoxinv1 0.17 0.18 0.18 T:tiaoxinv2 0.20 0.21 0.22 aegis128l 0.31 0.31 0.31 T:aezv4 0.32 0.32 0.33 T:aezv3 0.34 0.35 0.35 T:aezv5 0.36 0.37 0.37 aegis256 0.37 0.37 0.38 T:aegis128 0.44 0.44 0.45 T:aeadaes128ocbtaglen128v1 0.22? 0.51? 0.79? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrcv3 0.54 0.55 0.55 T:aes128otrpv3 0.62 0.62 0.63 T:aeadaes256ocbtaglen128v1 0.67 0.67 0.68 T:aes128gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.69 0.70 0.71 T:aes256otrpv3 0.74 0.75 0.76 aes256gcmv1 0.81 0.82 0.82 T:deoxysi128v141 0.86 0.86 0.87 T:deoxysneq128128v1 0.91 0.91 0.92 T:deoxysi256v141 0.91 0.92 0.93 T:morus1280256v1 0.92 0.92 0.93 T:morus1280128v1 0.92 0.92 0.93 T:morus1280128v2 0.92 0.93 0.93 T:morus1280256v2 0.96 0.97 0.98 T:deoxysneq256128v1 1.09 1.10 1.11 T:morus640128v2 1.09 1.10 1.12 T:morus640128v1 1.21 1.22 1.22 T:deoxysii128v141 1.23 1.24 1.24 T:colm0v1 1.29 1.30 1.30 T:aes128otrsv3 1.34 1.35 1.36 T:deoxyseq128128v1 1.36 1.37 1.38 T:deoxysii256v141 1.53 1.54 1.55 T:deoxyseq256128v1 1.74 1.74 1.75 T:aes256otrsv3 2.09 2.09 2.09 T:aes128n12t8clocv2 2.09 2.09 2.10 T:aes128n12t8silcv2 2.09 2.09 2.10 T:aes128n12t8silcv3 2.09 2.09 2.10 T:aes128n8t8silcv2 2.09 2.09 2.10 T:aes128n8t8clocv2 2.09 2.09 2.10 T:aes128n12t8clocv3 2.26 2.27 2.32 T:seakeyakv2 2.30 2.32 2.34 T:oceankeyakv2 2.57 2.59 2.62 T:norx6441v3 2.57 2.61 2.65 T:norx6441v2 2.78 2.80 2.82 T:lunarkeyakv2 2.79 2.80 2.82 T:lakekeyakv2 2.81 2.84 2.87 T:norx6444v3 2.93 2.94 2.96 T:lakekeyakv1 3.05 3.10 3.12 T:norx6441v1 3.25 3.27 3.29 T:norx6444v2 3.81 3.82 3.84 T:norx6444v1 3.85 3.87 3.91 T:norx6461v2 3.85 3.88 3.91 T:norx6461v3 3.86 3.92 3.95 T:norx3241v3 3.88 3.92 3.97 T:norx3241v2 4.21 4.22 4.23 T:aesjambuv1 4.55 4.58 4.62 T:norx6461v1 4.70 4.75 4.80 T:norx3241v1 4.88 4.94 5.02 T:acorn128v3 4.96 4.99 5.05 T:acorn128v2 4.95 5.08 5.11 T:ketjemajorv2 5.16 5.18 5.20 T:riverkeyakv2 5.90 5.96 6.03 T:norx3261v2 5.90 5.96 6.00 T:norx3261v3 6.18 6.19 6.20 ascon128av12 6.32 6.33 6.34 T:ascon128av11 6.32 6.33 6.34 T:ascon96v1 6.59 6.65 6.73 T:ketjeminorv2 7.36 7.38 7.41 T:norx3261v1 9.07? 9.09? 17.00? T:ascon128v11 9.14 9.15 9.16 T:ascon128v1 9.20 9.21 9.23 ascon128v12 11.02 11.03 11.05 T:aes128otrsv2 11.01 11.03 11.05 T:aes128otrsv1 11.30 11.32 11.35 T:aes128otrpv2 11.31 11.33 11.35 T:aes128otrpv1 14.14 14.16 14.19 T:aes256otrsv1 14.18 14.21 14.22 T:aes256otrsv2 14.32 14.32 14.33 T:twine80n6t4clocv3 14.84 14.86 14.88 T:aes256otrpv2 14.84 14.86 14.88 T:aes256otrpv1 15.19 15.25 15.29 T:twine80n6t4clocv2 15.27 15.28 15.30 T:aes128n12clocv1 15.27 15.29 15.31 T:aes128n8clocv1 18.53 18.72 18.86 T:proest256otrv1 22.13 22.16 22.20 T:aeadaes128ocbtaglen96v1 22.14 22.16 22.18 T:aeadaes128ocbtaglen64v1 25.79 25.92 26.01 T:ketjesrv1 26.29 26.31 26.33 T:aeadaes192ocbtaglen64v1 26.30 26.32 26.37 T:aeadaes192ocbtaglen96v1 26.47 26.58 26.79 T:ketjesrv2 30.52 30.54 30.57 T:aeadaes256ocbtaglen64v1 30.53 30.56 30.61 T:aeadaes256ocbtaglen96v1 35.80 35.85 35.97 T:colm127v1 43.53 44.13 44.19 T:proest128otrv1 44.21 44.38 45.67 T:ketjejrv1 63.03 63.37 64.18 T:deoxysneq128128v13 67.19 67.40 69.52 T:ketjejrv2 70.11 70.19 70.30 T:present80n6t4silcv3 86.18 90.48 90.74 T:aezv1 94.29 95.06 96.41 T:deoxyseq128128v13 103.50 104.18 105.34 T:deoxysneq256128v13 125.68 125.76 126.35 T:led80n6t4silcv3 155.91 156.40 157.36 T:deoxyseq256128v13 400.62 408.48 417.73 T:acorn128 2662.53 2670.85 2686.12 T:led80n6t4silcv2 2666.03 2678.85 2684.18 T:led80n6silcv1 2855.36 2859.65 2861.17 T:present80n6silcv1 2867.81 2882.07 2906.06 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.21 0.22 0.22 aegis128l 0.23 0.23 0.24 T:tiaoxinv2 0.23 0.23 0.24 T:tiaoxinv1 0.30 0.31 0.31 T:aezv4 0.31 0.32 0.32 T:aezv3 0.34 0.34 0.35 T:aezv5 0.35 0.36 0.36 T:aegis128 0.36 0.36 0.37 aegis256 0.45 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.27? 0.53? 0.97? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.65 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.70 T:aes128gcmv1 0.70 0.71 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aes256otrpv3 0.79 0.80 0.81 aes256gcmv1 0.84 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.91 0.92 0.92 T:morus1280256v2 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.93 T:morus1280256v1 0.91 0.92 0.92 T:morus1280128v2 0.95 0.95 0.96 T:deoxysi256v141 1.01 1.02 1.02 T:deoxysneq256128v1 1.08 1.10 1.11 T:morus640128v1 1.08 1.10 1.12 T:morus640128v2 1.21 1.21 1.22 T:deoxysii128v141 1.27 1.28 1.28 T:colm0v1 1.31 1.31 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxyseq128128v1 1.36 1.37 1.38 T:deoxysii256v141 1.53 1.54 1.56 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128n8t8clocv2 2.06 2.06 2.06 T:aes128n12t8clocv3 2.32 2.33 2.37 T:seakeyakv2 2.35 2.36 2.38 T:oceankeyakv2 2.56 2.58 2.60 T:norx6441v3 2.56 2.58 2.62 T:norx6441v2 2.80 2.81 2.83 T:lakekeyakv2 2.81 2.83 2.86 T:norx6444v3 2.81 2.84 2.87 T:lunarkeyakv2 2.92 2.93 2.95 T:lakekeyakv1 3.07 3.09 3.12 T:norx6441v1 3.23 3.26 3.30 T:norx6444v2 3.82 3.83 3.85 T:norx6444v1 3.79 3.84 3.89 T:norx3241v3 3.82 3.86 3.90 T:norx6461v2 3.85 3.87 3.90 T:norx6461v3 3.86 3.90 3.94 T:norx3241v2 4.39 4.39 4.39 T:aesjambuv1 4.55 4.60 4.65 T:norx3241v1 4.57 4.60 4.64 T:norx6461v1 4.83 4.90 4.96 T:ketjemajorv2 5.00 5.12 5.15 T:acorn128v3 5.14 5.17 5.25 T:acorn128v2 5.26 5.28 5.29 T:riverkeyakv2 5.80 5.87 5.93 T:norx3261v2 5.84 5.89 5.96 T:norx3261v3 6.17 6.19 6.20 ascon128av12 6.30 6.31 6.32 T:ascon128av11 6.31 6.33 6.34 T:ascon96v1 6.64 6.69 6.85 T:ketjeminorv2 7.31 7.33 7.36 T:norx3261v1 9.04 9.07 9.12 T:ascon128v11 9.04 9.07 9.10 T:ascon128v1 9.17 9.19 9.23 ascon128v12 11.14 11.16 11.18 T:aes128otrsv2 11.12 11.17 11.20 T:aes128otrsv1 11.38 11.41 11.43 T:aes128otrpv1 11.39 11.45 11.51 T:aes128otrpv2 14.26 14.30 14.33 T:aes256otrsv1 14.32 14.32 14.33 T:twine80n6t4clocv3 14.34 14.35 14.37 T:aes256otrsv2 14.89 14.91 14.94 T:aes256otrpv1 14.97 15.02 15.05 T:aes256otrpv2 15.19 15.21 15.27 T:twine80n6t4clocv2 15.63 15.65 15.67 T:aes128n12clocv1 15.64 15.66 15.68 T:aes128n8clocv1 18.53 18.70 18.81 T:proest256otrv1 26.14 26.18 26.21 T:aeadaes128ocbtaglen64v1 26.16 26.19 26.26 T:aeadaes128ocbtaglen96v1 26.03 26.26 26.34 T:ketjesrv1 26.76 26.82 27.05 T:ketjesrv2 31.19 31.22 31.24 T:aeadaes192ocbtaglen64v1 31.19 31.23 31.28 T:aeadaes192ocbtaglen96v1 36.29 36.32 36.35 T:aeadaes256ocbtaglen64v1 36.30 36.38 36.46 T:aeadaes256ocbtaglen96v1 42.97 43.46 43.92 T:proest128otrv1 43.85 43.91 44.02 T:colm127v1 44.19 44.47 45.66 T:ketjejrv1 67.79 68.20 69.94 T:ketjejrv2 70.11 70.14 70.19 T:present80n6t4silcv3 74.76 75.23 76.18 T:deoxysneq128128v13 86.46 90.60 90.95 T:aezv1 94.39 95.22 96.50 T:deoxyseq128128v13 116.97 117.64 119.07 T:deoxysneq256128v13 125.56 125.62 126.11 T:led80n6t4silcv3 155.58 155.76 156.46 T:deoxyseq256128v13 399.93 406.15 416.19 T:acorn128 2658.57 2666.76 2684.99 T:led80n6t4silcv2 2666.92 2677.40 2683.09 T:led80n6silcv1 2856.06 2859.43 2861.41 T:present80n6silcv1 2854.98 2881.48 2901.27 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.17 0.17 0.18 T:aezv4 0.18 0.18 0.18 T:aezv3 0.20 0.20 0.20 T:aezv5 0.21 0.22 0.22 aegis128l 0.22 0.23 0.24 T:tiaoxinv2 0.23 0.23 0.24 T:tiaoxinv1 0.35 0.36 0.36 T:aegis128 0.39 0.40 0.40 aegis256 0.45 0.45 0.46 T:aeadaes128ocbtaglen128v1 0.11? 0.53? 0.76? T:aeadaes192ocbtaglen128v1 0.56 0.56 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.64 0.65 0.65 T:aeadaes256ocbtaglen128v1 0.69 0.70 0.71 T:aes128gcmv1 0.70 0.71 0.71 T:aes256otrcv3 0.71 0.72 0.72 T:aes256otrpv3 0.78 0.80 0.80 aes256gcmv1 0.84 0.85 0.86 T:deoxysi128v141 0.90 0.91 0.92 T:deoxysneq128128v1 0.91 0.92 0.92 T:morus1280256v1 0.91 0.92 0.93 T:morus1280128v1 0.91 0.92 0.92 T:morus1280256v2 0.91 0.92 0.92 T:morus1280128v2 0.95 0.96 0.97 T:deoxysi256v141 1.01 1.02 1.03 T:deoxysneq256128v1 1.08 1.10 1.11 T:morus640128v1 1.08 1.10 1.12 T:morus640128v2 1.20 1.21 1.22 T:deoxysii128v141 1.27 1.28 1.29 T:colm0v1 1.31 1.32 1.32 T:aes128otrsv3 1.36 1.37 1.38 T:deoxysii256v141 1.36 1.37 1.38 T:deoxyseq128128v1 1.54 1.55 1.56 T:deoxyseq256128v1 1.75 1.76 1.76 T:aes256otrsv3 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.06 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.08 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.08 T:aes128n12t8silcv3 2.33 2.34 2.39 T:seakeyakv2 2.35 2.38 2.39 T:oceankeyakv2 2.56 2.58 2.60 T:norx6441v3 2.56 2.59 2.63 T:norx6441v2 2.81 2.82 2.84 T:lakekeyakv2 2.82 2.84 2.87 T:norx6444v3 2.83 2.84 2.88 T:lunarkeyakv2 2.93 2.95 2.96 T:lakekeyakv1 3.08 3.08 3.10 T:norx6441v1 3.25 3.27 3.30 T:norx6444v2 3.83 3.85 3.86 T:norx6444v1 3.83 3.86 3.89 T:norx6461v2 3.84 3.87 3.90 T:norx6461v3 3.83 3.88 3.94 T:norx3241v3 3.86 3.91 3.97 T:norx3241v2 4.38 4.39 4.39 T:aesjambuv1 4.55 4.60 4.66 T:norx3241v1 4.61 4.64 4.67 T:norx6461v1 4.86 4.95 4.98 T:ketjemajorv2 4.99 5.13 5.15 T:acorn128v3 5.15 5.18 5.25 T:acorn128v2 5.27 5.29 5.30 T:riverkeyakv2 5.80 5.86 5.91 T:norx3261v2 5.88 5.92 5.97 T:norx3261v3 6.18 6.18 6.20 ascon128av12 6.30 6.31 6.33 T:ascon128av11 6.31 6.32 6.34 T:ascon96v1 6.67 6.71 6.74 T:ketjeminorv2 7.30 7.33 7.35 T:norx3261v1 9.03? 9.06? 17.11? T:ascon128v11 9.06 9.08 9.11 T:ascon128v1 9.18 9.19 9.21 ascon128v12 11.17 11.18 11.20 T:aes128otrsv2 11.14 11.19 11.22 T:aes128otrsv1 11.39 11.41 11.44 T:aes128otrpv1 11.42 11.52 11.54 T:aes128otrpv2 14.31 14.32 14.34 T:twine80n6t4clocv3 14.29 14.33 14.35 T:aes256otrsv1 14.35 14.37 14.39 T:aes256otrsv2 14.91 14.95 14.98 T:aes256otrpv1 14.95 15.03 15.06 T:aes256otrpv2 15.19 15.22 15.27 T:twine80n6t4clocv2 15.63 15.65 15.67 T:aes128n12clocv1 15.65 15.67 15.69 T:aes128n8clocv1 18.52 18.70 18.81 T:proest256otrv1 26.16 26.18 26.21 T:aeadaes128ocbtaglen64v1 26.16 26.20 26.26 T:aeadaes128ocbtaglen96v1 26.05 26.25 26.36 T:ketjesrv1 26.77 26.84 27.05 T:ketjesrv2 31.20 31.22 31.24 T:aeadaes192ocbtaglen64v1 31.19 31.22 31.27 T:aeadaes192ocbtaglen96v1 36.29 36.31 36.34 T:aeadaes256ocbtaglen64v1 36.33 36.37 36.44 T:aeadaes256ocbtaglen96v1 43.33 43.41 43.51 T:colm127v1 42.96 43.45 43.88 T:proest128otrv1 44.31 44.50 45.67 T:ketjejrv1 67.86 68.31 69.99 T:ketjejrv2 70.10 70.13 70.16 T:present80n6t4silcv3 74.69 75.19 76.01 T:deoxysneq128128v13 86.33 90.55 90.89 T:aezv1 94.52 95.11 96.59 T:deoxyseq128128v13 117.00 117.69 120.08 T:deoxysneq256128v13 125.52 125.60 126.11 T:led80n6t4silcv3 155.57 155.74 156.53 T:deoxyseq256128v13 400.69 407.05 415.53 T:acorn128 2655.62 2667.77 2683.14 T:led80n6t4silcv2 2664.29 2681.24 2686.82 T:led80n6silcv1 2854.15 2856.75 2863.50 T:present80n6silcv1 2856.03 2877.11 2908.53 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv1 0.12? 0.13? 0.14? T:tiaoxinv2 0.16 0.17 0.17 aegis128l 0.18 0.19 0.19 T:aezv4 0.20 0.21 0.22 T:aezv3 0.21 0.22 0.22 T:aezv5 0.32 0.32 0.33 aegis256 0.37 0.38 0.38 T:aegis128 0.42 0.43 0.44 T:aes128gcmv1 0.42 0.43 0.44 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.45 aes256gcmv1 -0.05? 0.46? 0.91? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.57 T:aes128otrcv3 0.56 0.56 0.57 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.70 0.72 T:aes256otrcv3 0.71 0.71 0.72 T:colm0v1 0.72 0.73 0.74 T:aes256otrpv3 0.80 0.81 0.83 T:deoxysii128v141 0.80 0.82 0.83 T:deoxysi128v141 0.85 0.86 0.87 T:deoxysneq128128v1 0.85 0.86 0.87 T:morus1280128v1 0.86 0.86 0.88 T:morus1280256v1 0.86 0.87 0.88 T:morus1280256v2 0.87 0.88 0.88 T:morus1280128v2 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.93 T:deoxysii256v141 0.91 0.92 0.92 T:deoxysi256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.01 1.02 1.03 T:deoxyseq256128v1 1.03 1.06 1.07 T:morus640128v2 1.04 1.06 1.08 T:morus640128v1 1.80 1.82 1.87 T:oceankeyakv2 1.79 1.83 1.89 T:lunarkeyakv2 2.06 2.06 2.06 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.20 2.22 2.24 T:seakeyakv2 2.52 2.54 2.57 T:lakekeyakv2 2.56 2.58 2.62 T:norx6441v3 2.52 2.59 2.63 T:norx6441v2 2.74 2.76 2.80 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.05 3.10 3.17 T:norx6441v1 3.12 3.14 3.15 T:norx6444v2 3.32 3.35 3.39 T:norx6444v3 3.81 3.85 3.89 T:norx6461v2 3.81 3.85 3.90 T:norx6444v1 3.82 3.86 3.91 T:norx6461v3 3.87 3.92 3.96 T:norx3241v2 3.94 4.01 4.10 T:norx3241v3 4.01 4.10 4.19 T:ketjemajorv2 4.20 4.20 4.20 T:aesjambuv1 4.52 4.57 4.63 T:norx6461v1 4.79 4.80 4.83 T:riverkeyakv2 4.79 4.84 4.92 T:norx3241v1 4.94 4.97 5.00 T:acorn128v3 5.03 5.19 5.31 T:acorn128v2 5.83 5.94 6.04 T:norx3261v2 5.97 6.05 6.12 T:norx3261v3 6.15 6.17 6.18 ascon128av12 6.28 6.31 6.33 T:ascon96v1 6.30 6.32 6.34 T:ascon128av11 6.04 6.47 6.54 T:ketjeminorv2 7.37 7.40 7.43 T:norx3261v1 9.03 9.05 9.06 T:ascon128v1 8.94 9.06 9.09 T:ascon128v11 9.14 9.18 9.23 ascon128v12 9.78 9.79 9.81 T:aes128otrsv2 9.80 9.82 9.85 T:aes128otrsv1 10.09 10.12 10.14 T:aes128n12clocv1 10.11 10.13 10.15 T:aes128n8clocv1 10.86 10.88 10.90 T:aes128otrpv1 10.86 10.88 10.90 T:aes128otrpv2 12.90 12.92 12.94 T:aes256otrsv1 12.95 12.97 13.00 T:aes256otrsv2 14.11 14.13 14.14 T:twine80n6t4clocv3 14.40 14.43 14.46 T:aes256otrpv1 14.41 14.43 14.45 T:aes256otrpv2 14.96 14.96 15.01 T:twine80n6t4clocv2 18.53 18.89 19.43 T:proest256otrv1 21.82 21.86 21.89 T:aeadaes128ocbtaglen96v1 21.85 21.88 21.92 T:aeadaes128ocbtaglen64v1 23.16 23.20 23.30 T:colm127v1 24.74 24.82 24.96 T:ketjesrv1 25.92 25.99 26.17 T:ketjesrv2 26.01 26.05 26.08 T:aeadaes192ocbtaglen64v1 26.04 26.08 26.14 T:aeadaes192ocbtaglen96v1 30.21 30.24 30.26 T:aeadaes256ocbtaglen96v1 30.21 30.25 30.28 T:aeadaes256ocbtaglen64v1 40.27 40.83 41.08 T:ketjejrv1 43.43 43.49 43.54 T:aezv1 44.13 44.41 44.52 T:proest128otrv1 62.15 62.76 62.87 T:deoxysneq128128v13 62.39 62.93 63.09 T:deoxyseq128128v13 65.87 66.16 68.36 T:ketjejrv2 69.25 69.28 69.31 T:present80n6t4silcv3 104.12 104.23 104.41 T:deoxyseq256128v13 103.31 104.48 104.61 T:deoxysneq256128v13 124.90 125.15 125.21 T:led80n6t4silcv3 397.51 405.13 416.97 T:acorn128 1777.92 1796.55 1818.78 T:led80n6t4silcv2 1785.35 1800.78 1824.38 T:led80n6silcv1 1899.51 1902.92 1918.77 T:present80n6t4silcv2 1901.14 1903.22 1921.67 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv2 0.12 0.13 0.13 T:tiaoxinv1 0.16? 0.17? 0.18? aegis128l 0.18? 0.19? 0.20? T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31? 0.32? 0.35? aegis256 0.41 0.42 0.44 aes256gcmv1 0.43 0.43 0.44 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.44 T:aes128gcmv1 0.03? 0.46? 0.90? T:aeadaes192ocbtaglen128v1 0.55 0.55 0.56 T:aes128otrcv3 0.55 0.56 0.57 T:aes128otrpv3 0.65 0.66 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.72 T:aes256otrcv3 0.71 0.71 0.72 T:colm0v1 0.70 0.72 0.73 T:aes256otrpv3 0.80 0.81 0.82 T:deoxysi128v141 0.81 0.82 0.83 T:deoxysii128v141 0.85 0.86 0.86 T:morus1280256v1 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v2 0.86 0.87 0.88 T:deoxysneq128128v1 0.89 0.90 0.91 T:deoxyseq128128v1 0.90 0.91 0.93 T:deoxysii256v141 0.91 0.92 0.93 T:deoxysi256v141 0.96 0.97 0.98 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.03 1.06 1.08 T:morus640128v1 1.04 1.06 1.08 T:morus640128v2 1.79 1.82 1.86 T:oceankeyakv2 1.80 1.85 1.89 T:lunarkeyakv2 2.06 2.06 2.07 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n8t8clocv2 2.06 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.06 T:aes128otrsv3 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.21 2.22 2.24 T:seakeyakv2 2.53 2.56 2.59 T:lakekeyakv2 2.56 2.58 2.62 T:norx6441v3 2.54 2.59 2.66 T:norx6441v2 2.74 2.76 2.78 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.09 3.11 3.12 T:norx6444v2 3.05 3.12 3.17 T:norx6441v1 3.32 3.36 3.40 T:norx6444v3 3.78 3.81 3.86 T:norx6461v2 3.81 3.86 3.91 T:norx6444v1 3.83 3.87 3.91 T:norx6461v3 3.89 3.93 3.98 T:norx3241v2 3.96 4.01 4.08 T:norx3241v3 4.05 4.12 4.18 T:ketjemajorv2 4.21 4.22 4.23 T:aesjambuv1 4.59 4.66 4.71 T:norx6461v1 4.79 4.81 4.83 T:riverkeyakv2 4.73 4.81 4.91 T:norx3241v1 4.97 5.00 5.07 T:acorn128v3 5.00 5.02 5.09 T:acorn128v2 5.84 5.91 6.02 T:norx3261v2 6.02 6.10 6.12 T:norx3261v3 6.15 6.17 6.19 ascon128av12 6.29 6.31 6.33 T:ascon128av11 6.31 6.33 6.35 T:ascon96v1 6.07 6.46 6.50 T:ketjeminorv2 7.36 7.39 7.42 T:norx3261v1 9.01 9.03 9.07 T:ascon128v11 9.10 9.14 9.16 T:ascon128v1 9.14 9.21 9.25 ascon128v12 9.78 9.80 9.82 T:aes128otrsv2 9.79 9.81 9.84 T:aes128otrsv1 10.11 10.13 10.15 T:aes128n12clocv1 10.13 10.15 10.17 T:aes128n8clocv1 10.86 10.89 10.90 T:aes128otrpv1 10.86 10.89 10.91 T:aes128otrpv2 12.90 12.93 12.96 T:aes256otrsv1 12.94 12.98 13.00 T:aes256otrsv2 14.11 14.13 14.14 T:twine80n6t4clocv3 14.39 14.43 14.46 T:aes256otrpv1 14.40 14.44 14.48 T:aes256otrpv2 14.95 14.96 14.98 T:twine80n6t4clocv2 18.53 18.90 19.38 T:proest256otrv1 21.85 21.88 21.91 T:aeadaes128ocbtaglen64v1 21.86 21.89 21.93 T:aeadaes128ocbtaglen96v1 23.19 23.25 23.31 T:colm127v1 24.75 24.86 24.98 T:ketjesrv1 25.91 25.98 26.15 T:ketjesrv2 26.00 26.04 26.07 T:aeadaes192ocbtaglen64v1 26.00 26.05 26.13 T:aeadaes192ocbtaglen96v1 30.21 30.24 30.28 T:aeadaes256ocbtaglen64v1 30.21 30.25 30.29 T:aeadaes256ocbtaglen96v1 40.23 40.76 41.23 T:ketjejrv1 43.41 43.49 43.55 T:aezv1 44.05 44.17 44.97 T:proest128otrv1 62.37 62.72 63.07 T:deoxyseq128128v13 62.18 62.72 62.92 T:deoxysneq128128v13 65.91 66.14 68.34 T:ketjejrv2 69.22 69.28 69.33 T:present80n6t4silcv3 104.12 104.24 104.44 T:deoxyseq256128v13 103.30 104.49 104.62 T:deoxysneq256128v13 125.06 125.15 125.31 T:led80n6t4silcv3 396.73 406.31 417.32 T:acorn128 1779.72 1791.97 1823.00 T:led80n6t4silcv2 1785.45 1808.92 1826.97 T:led80n6silcv1 1898.41 1902.13 1919.22 T:present80n6t4silcv2 1901.28 1903.33 1914.60 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.12 0.13 0.13 T:tiaoxinv2 0.12? 0.13? 0.14? T:tiaoxinv1 0.16 0.17 0.17 aegis128l 0.18 0.19 0.19 T:aezv4 0.20 0.20 0.21 T:aezv3 0.21 0.22 0.22 T:aezv5 0.31 0.31 0.32 T:aegis128 0.31 0.32 0.33 aegis256 0.41 0.43 0.43 T:aeadaes128ocbtaglen128v1 0.42 0.43 0.44 aes256gcmv1 0.42 0.43 0.44 T:aes128gcmv1 0.05? 0.47? 0.90? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.56 T:aes128otrcv3 0.56 0.57 0.57 T:aes128otrpv3 0.65 0.66 0.66 T:aeadaes256ocbtaglen128v1 0.70 0.71 0.71 T:aes256otrcv3 0.70 0.71 0.72 T:aes256otrpv3 0.70 0.71 0.72 T:colm0v1 0.81 0.82 0.82 T:deoxysii128v141 0.81 0.82 0.84 T:deoxysi128v141 0.84 0.85 0.86 T:morus1280256v2 0.85 0.86 0.87 T:morus1280128v2 0.85 0.86 0.87 T:morus1280128v1 0.85 0.86 0.87 T:morus1280256v1 0.86 0.87 0.89 T:deoxysneq128128v1 0.89 0.90 0.91 T:deoxyseq128128v1 0.89 0.91 0.92 T:deoxysii256v141 0.91 0.92 0.93 T:deoxysi256v141 0.95 0.97 0.98 T:deoxysneq256128v1 1.02 1.03 1.04 T:deoxyseq256128v1 1.03 1.06 1.08 T:morus640128v1 1.04 1.07 1.10 T:morus640128v2 1.80 1.82 1.86 T:oceankeyakv2 1.80 1.84 1.88 T:lunarkeyakv2 2.06 2.06 2.06 T:aes128n12t8clocv2 2.06 2.06 2.07 T:aes128n8t8clocv2 2.05 2.06 2.07 T:aes128n8t8silcv2 2.06 2.06 2.07 T:aes128n12t8clocv3 2.06 2.06 2.07 T:aes128n12t8silcv2 2.06 2.06 2.07 T:aes128n12t8silcv3 2.06 2.06 2.06 T:aes128otrsv3 2.20 2.22 2.23 T:seakeyakv2 2.53 2.55 2.59 T:lakekeyakv2 2.55 2.58 2.60 T:norx6441v3 2.57 2.61 2.66 T:norx6441v2 2.74 2.76 2.78 T:lakekeyakv1 2.81 2.81 2.81 T:aes256otrsv3 3.08 3.10 3.12 T:norx6444v2 3.04 3.12 3.17 T:norx6441v1 3.32 3.35 3.39 T:norx6444v3 3.81 3.84 3.87 T:norx6461v2 3.81 3.85 3.90 T:norx6444v1 3.83 3.87 3.90 T:norx6461v3 3.87 3.92 3.99 T:norx3241v2 3.95 4.02 4.07 T:norx3241v3 4.07 4.13 4.18 T:ketjemajorv2 4.21 4.22 4.23 T:aesjambuv1 4.59 4.64 4.71 T:norx6461v1 4.79 4.80 4.82 T:riverkeyakv2 4.75 4.82 4.93 T:norx3241v1 5.01 5.02 5.09 T:acorn128v2 4.98 5.07 5.20 T:acorn128v3 5.81 5.92 5.99 T:norx3261v2 6.07 6.10 6.12 T:norx3261v3 6.14 6.15 6.17 ascon128av12 6.28 6.31 6.34 T:ascon128av11 6.31 6.33 6.35 T:ascon96v1 6.06 6.46 6.51 T:ketjeminorv2 7.36 7.40 7.43 T:norx3261v1 9.01 9.03 9.08 T:ascon128v11 9.10 9.13 9.16 T:ascon128v1 9.15 9.18 9.23 ascon128v12 9.78 9.80 9.83 T:aes128otrsv2 9.79 9.82 9.85 T:aes128otrsv1 10.10 10.12 10.15 T:aes128n12clocv1 10.12 10.14 10.17 T:aes128n8clocv1 10.86 10.88 10.91 T:aes128otrpv2 10.86 10.89 10.91 T:aes128otrpv1 12.88 12.92 12.95 T:aes256otrsv1 12.96 13.00 13.02 T:aes256otrsv2 14.10 14.13 14.15 T:twine80n6t4clocv3 14.38 14.43 14.46 T:aes256otrpv1 14.40 14.44 14.47 T:aes256otrpv2 14.95 14.96 14.98 T:twine80n6t4clocv2 18.53 18.90 19.40 T:proest256otrv1 21.84 21.88 21.91 T:aeadaes128ocbtaglen96v1 21.86 21.90 21.92 T:aeadaes128ocbtaglen64v1 23.17 23.24 23.29 T:colm127v1 24.73 24.84 24.95 T:ketjesrv1 25.91 25.99 26.15 T:ketjesrv2 26.01 26.04 26.07 T:aeadaes192ocbtaglen64v1 26.01 26.06 26.16 T:aeadaes192ocbtaglen96v1 30.21 30.24 30.28 T:aeadaes256ocbtaglen64v1 30.24 30.26 30.29 T:aeadaes256ocbtaglen96v1 40.27 40.79 41.24 T:ketjejrv1 43.44 43.51 43.57 T:aezv1 44.08 44.17 44.91 T:proest128otrv1 62.38 62.72 62.96 T:deoxyseq128128v13 62.05 62.79 62.94 T:deoxysneq128128v13 65.84 66.08 68.37 T:ketjejrv2 69.22 69.27 69.31 T:present80n6t4silcv3 104.11 104.24 104.48 T:deoxyseq256128v13 103.42 104.48 104.62 T:deoxysneq256128v13 125.07 125.17 125.31 T:led80n6t4silcv3 397.82 405.86 415.10 T:acorn128 1780.01 1794.30 1817.26 T:led80n6t4silcv2 1784.75 1800.91 1822.95 T:led80n6silcv1 1898.95 1902.34 1942.96 T:present80n6t4silcv2 1903.65 1906.61 1930.39 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.22 0.22 0.23 T:tiaoxinv2 0.22 0.22 0.23 T:tiaoxinv1 0.24 0.25 0.25 aegis128l 0.35 0.36 0.36 T:aezv4 0.36 0.36 0.37 T:aezv3 0.38 0.39 0.39 T:aezv5 0.40 0.40 0.41 T:aegis128 0.41 0.41 0.42 aegis256 0.49 0.49 0.49 T:aeadaes128ocbtaglen128v1 0.60? 0.61? 1.18? T:aeadaes192ocbtaglen128v1 0.61 0.61 0.62 T:aes128otrpv3 0.64 0.64 0.65 T:aes128otrcv3 0.66 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.76 0.76 0.77 T:aes128gcmv1 0.78 0.78 0.79 T:aes256otrpv3 0.84 0.85 0.85 T:aes256otrcv3 0.85 0.86 0.86 aes256gcmv1 0.93 0.94 0.94 T:deoxysi128v141 0.95 0.95 0.96 T:deoxysneq128128v1 1.07 1.07 1.08 T:deoxysi256v141 1.08 1.08 1.08 T:deoxysneq256128v1 1.11 1.12 1.12 T:morus1280256v1 1.12 1.12 1.13 T:morus1280128v1 1.14 1.14 1.15 T:morus1280256v2 1.14 1.14 1.15 T:morus1280128v2 1.21 1.22 1.23 T:morus640128v1 1.21 1.23 1.24 T:morus640128v2 1.29 1.29 1.30 T:colm0v1 1.34 1.34 1.35 T:aes128otrsv3 1.36 1.37 1.37 T:deoxysii128v141 1.46 1.47 1.48 T:deoxyseq128128v1 1.55 1.55 1.56 T:deoxysii256v141 1.66 1.67 1.68 T:deoxyseq256128v1 1.81 1.81 1.82 T:aes256otrsv3 2.11 2.11 2.11 T:aes128n12t8clocv2 2.11 2.11 2.12 T:aes128n12t8clocv3 2.11 2.11 2.12 T:aes128n8t8clocv2 2.12 2.12 2.12 T:aes128n8t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv2 2.12 2.12 2.13 T:aes128n12t8silcv3 2.97 3.00 3.05 T:norx6441v2 3.01 3.03 3.05 T:norx6441v3 3.05 3.06 3.07 T:lakekeyakv2 3.24 3.25 3.25 T:seakeyakv2 3.41 3.42 3.44 T:lakekeyakv1 3.49 3.51 3.61 T:norx6441v1 3.80 3.82 3.86 T:norx6444v3 4.15 4.18 4.23 T:norx3241v3 4.20 4.22 4.27 T:norx3241v2 4.27 4.28 4.28 T:aesjambuv1 4.28 4.29 4.31 T:oceankeyakv2 4.48 4.51 4.54 T:norx6461v3 4.48 4.51 4.54 T:norx6461v2 4.63 4.64 4.67 T:norx6444v2 4.95 4.99 5.02 T:norx3241v1 5.16 5.19 5.22 T:norx6461v1 5.41 5.42 5.44 T:riverkeyakv2 5.41 5.44 5.46 T:norx6444v1 5.82 5.83 5.90 T:acorn128v3 5.82 5.85 5.90 T:acorn128v2 6.23 6.30 6.32 T:ketjemajorv2 6.32 6.33 6.35 ascon128av12 6.31 6.37 6.43 T:norx3261v2 6.40 6.46 6.49 T:norx3261v3 6.45 6.46 6.48 T:ascon96v1 6.45 6.46 6.48 T:ascon128av11 7.26 7.36 7.49 T:ketjeminorv2 7.36 7.37 7.38 T:lunarkeyakv2 7.77 7.79 7.81 T:norx3261v1 9.16 9.20 9.22 T:ascon128v11 9.26 9.27 9.29 T:ascon128v1 9.33 9.35 9.37 ascon128v12 11.34 11.36 11.36 T:aes128otrsv2 11.35 11.37 11.39 T:aes128otrsv1 11.62 11.63 11.64 T:aes128otrpv1 11.60 11.63 11.65 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.56 14.59 14.84 T:aes256otrsv1 14.60 14.62 14.64 T:aes256otrsv2 15.24 15.26 15.28 T:aes256otrpv1 15.26 15.27 15.29 T:aes256otrpv2 15.36 15.36 15.39 T:twine80n6t4clocv2 15.45 15.46 15.47 T:aes128n12clocv1 15.46 15.47 15.48 T:aes128n8clocv1 19.96 20.19 20.79 T:proest256otrv1 22.68 22.69 22.71 T:aeadaes128ocbtaglen96v1 22.67 22.70 22.72 T:aeadaes128ocbtaglen64v1 26.44 26.57 26.66 T:ketjesrv1 26.93 26.94 26.96 T:aeadaes192ocbtaglen64v1 26.94 26.95 26.97 T:aeadaes192ocbtaglen96v1 27.26 27.35 27.51 T:ketjesrv2 31.26 31.28 31.30 T:aeadaes256ocbtaglen96v1 31.27 31.29 31.31 T:aeadaes256ocbtaglen64v1 36.43 36.47 36.51 T:colm127v1 44.59 45.78 46.25 T:ketjejrv1 45.79 45.87 46.13 T:proest128otrv1 63.31 63.48 64.31 T:deoxysneq128128v13 68.33 68.41 70.47 T:ketjejrv2 70.79 70.88 70.95 T:present80n6t4silcv3 82.45 83.38 88.12 T:aezv1 96.49 96.77 97.96 T:deoxyseq128128v13 104.64 105.13 105.53 T:deoxysneq256128v13 126.67 126.76 127.11 T:led80n6t4silcv3 158.25 158.61 159.41 T:deoxyseq256128v13 451.34 456.57 466.74 T:acorn128 2697.61 2716.82 2741.50 T:led80n6t4silcv2 2685.56 2724.30 2739.06 T:led80n6silcv1 2868.01 2869.37 2897.79 T:present80n6t4silcv2 2867.53 2873.04 2903.39 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.28 0.28 0.28 T:tiaoxinv1 0.35 0.36 0.36 T:aezv4 0.36 0.36 0.37 T:aezv3 0.38 0.39 0.39 T:aegis128 0.38 0.39 0.39 T:aezv5 0.41 0.41 0.41 aegis256 0.51 0.51 0.52 T:aeadaes128ocbtaglen128v1 0.62? 0.62? 0.97? T:aeadaes192ocbtaglen128v1 0.62 0.63 0.64 T:aes128otrpv3 0.66 0.66 0.67 T:aes128otrcv3 0.71 0.71 0.72 T:aeadaes256ocbtaglen128v1 0.78 0.79 0.79 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.86 0.86 0.87 T:aes256otrcv3 0.90 0.90 0.91 aes256gcmv1 1.01 1.02 1.02 T:deoxysi128v141 1.05 1.06 1.06 T:deoxysneq128128v1 1.12 1.13 1.14 T:morus1280256v1 1.13 1.13 1.14 T:morus1280128v1 1.13 1.14 1.14 T:morus1280256v2 1.14 1.14 1.15 T:morus1280128v2 1.14 1.15 1.16 T:deoxysi256v141 1.16 1.17 1.18 T:deoxysneq256128v1 1.21 1.22 1.24 T:morus640128v1 1.23 1.25 1.26 T:morus640128v2 1.34 1.35 1.36 T:colm0v1 1.36 1.36 1.37 T:aes128otrsv3 1.39 1.40 1.40 T:deoxysii128v141 1.53 1.54 1.54 T:deoxyseq128128v1 1.59 1.60 1.61 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.83 1.84 1.85 T:aes256otrsv3 2.08 2.08 2.09 T:aes128n12t8clocv2 2.08 2.08 2.09 T:aes128n12t8clocv3 2.08 2.08 2.09 T:aes128n8t8clocv2 2.10 2.10 2.11 T:aes128n12t8silcv2 2.10 2.10 2.10 T:aes128n8t8silcv2 2.10 2.10 2.10 T:aes128n12t8silcv3 2.99 3.01 3.03 T:norx6441v2 3.00 3.02 3.03 T:norx6441v3 3.06 3.07 3.09 T:lakekeyakv2 3.28 3.29 3.30 T:seakeyakv2 3.41 3.42 3.46 T:lakekeyakv1 3.43 3.47 3.48 T:norx6441v1 3.79 3.82 3.83 T:norx6444v3 4.12 4.17 4.21 T:norx3241v3 4.18 4.21 4.25 T:norx3241v2 4.32 4.33 4.35 T:oceankeyakv2 4.44 4.45 4.45 T:aesjambuv1 4.46 4.48 4.50 T:norx6461v2 4.49 4.51 4.53 T:norx6461v3 4.61 4.62 4.64 T:norx6444v2 4.84 4.88 4.94 T:norx3241v1 5.16 5.19 5.21 T:norx6461v1 5.42 5.44 5.46 T:norx6444v1 5.52 5.53 5.55 T:riverkeyakv2 5.97 6.00 6.11 T:acorn128v2 5.95 6.05 6.06 T:acorn128v3 6.24 6.25 6.29 T:ketjemajorv2 6.31 6.32 6.33 ascon128av12 6.31 6.36 6.41 T:norx3261v2 6.35 6.39 6.42 T:norx3261v3 6.43 6.44 6.46 T:ascon128av11 6.45 6.46 6.48 T:ascon96v1 7.42 7.43 7.49 T:lunarkeyakv2 7.31 7.43 7.50 T:ketjeminorv2 7.72 7.74 7.75 T:norx3261v1 9.17 9.19 9.22 T:ascon128v11 9.18 9.21 9.23 T:ascon128v1 9.32 9.34 9.36 ascon128v12 11.49 11.51 11.53 T:aes128otrsv2 11.50 11.52 11.54 T:aes128otrsv1 11.70 11.72 11.75 T:aes128otrpv1 11.72 11.78 11.82 T:aes128otrpv2 14.50 14.51 14.51 T:twine80n6t4clocv3 14.71 14.75 15.01 T:aes256otrsv1 14.75 14.76 14.79 T:aes256otrsv2 15.34 15.35 15.37 T:aes256otrpv1 15.37 15.44 15.45 T:aes256otrpv2 15.41 15.45 15.46 T:twine80n6t4clocv2 15.83 15.84 15.86 T:aes128n12clocv1 15.85 15.86 15.88 T:aes128n8clocv1 20.03 20.21 20.87 T:proest256otrv1 26.86 26.87 26.90 T:aeadaes128ocbtaglen64v1 26.86 26.88 26.90 T:aeadaes128ocbtaglen96v1 26.84 26.89 26.94 T:ketjesrv1 27.64 27.69 27.82 T:ketjesrv2 32.01 32.03 32.05 T:aeadaes192ocbtaglen64v1 32.02 32.03 32.05 T:aeadaes192ocbtaglen96v1 37.27 37.29 37.31 T:aeadaes256ocbtaglen96v1 37.26 37.29 37.32 T:aeadaes256ocbtaglen64v1 44.48 44.53 44.60 T:colm127v1 45.33 45.44 45.48 T:proest128otrv1 44.74 45.69 46.24 T:ketjejrv1 68.96 69.15 70.82 T:ketjejrv2 70.82 70.83 70.86 T:present80n6t4silcv3 74.83 75.28 76.14 T:deoxysneq128128v13 82.98 83.84 87.95 T:aezv1 96.69 96.87 98.04 T:deoxyseq128128v13 118.12 118.60 118.92 T:deoxysneq256128v13 126.58 126.63 126.79 T:led80n6t4silcv3 157.79 158.43 158.89 T:deoxyseq256128v13 452.22 457.76 476.16 T:acorn128 2696.74 2719.81 2745.60 T:led80n6t4silcv2 2685.27 2723.53 2754.50 T:led80n6silcv1 2866.81 2868.75 2900.29 T:present80n6t4silcv2 2867.15 2870.19 2905.55 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.21 0.21 0.21 T:aezv4 0.22 0.22 0.22 T:aezv3 0.23 0.23 0.24 T:aezv5 0.25 0.26 0.26 aegis128l 0.27 0.28 0.28 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.38 0.39 0.39 T:aegis128 0.43 0.44 0.44 aegis256 0.51 0.51 0.51 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.63 T:aes128otrpv3 0.62? 0.63? 1.18? T:aeadaes192ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrcv3 0.71 0.71 0.71 T:aeadaes256ocbtaglen128v1 0.78 0.79 0.79 T:aes128gcmv1 0.80 0.80 0.81 T:aes256otrpv3 0.86 0.86 0.87 T:aes256otrcv3 0.90 0.91 0.91 aes256gcmv1 1.01 1.01 1.02 T:deoxysi128v141 1.05 1.05 1.06 T:deoxysneq128128v1 1.12 1.13 1.14 T:morus1280128v1 1.13 1.13 1.14 T:morus1280256v1 1.13 1.14 1.14 T:morus1280128v2 1.13 1.14 1.14 T:morus1280256v2 1.14 1.15 1.15 T:deoxysi256v141 1.16 1.17 1.17 T:deoxysneq256128v1 1.21 1.23 1.24 T:morus640128v1 1.23 1.25 1.26 T:morus640128v2 1.35 1.35 1.36 T:colm0v1 1.36 1.36 1.36 T:aes128otrsv3 1.39 1.39 1.40 T:deoxysii128v141 1.53 1.54 1.55 T:deoxyseq128128v1 1.58 1.58 1.59 T:deoxysii256v141 1.70 1.71 1.72 T:deoxyseq256128v1 1.84 1.84 1.85 T:aes256otrsv3 2.08 2.08 2.08 T:aes128n12t8clocv2 2.08 2.08 2.08 T:aes128n12t8clocv3 2.08 2.08 2.08 T:aes128n8t8clocv2 2.09 2.09 2.09 T:aes128n12t8silcv3 2.09 2.09 2.09 T:aes128n12t8silcv2 2.09 2.09 2.09 T:aes128n8t8silcv2 2.98 3.01 3.05 T:norx6441v2 3.00 3.02 3.04 T:norx6441v3 3.07 3.08 3.09 T:lakekeyakv2 3.30 3.30 3.31 T:seakeyakv2 3.43 3.44 3.47 T:lakekeyakv1 3.44 3.46 3.49 T:norx6441v1 3.79 3.81 3.83 T:norx6444v3 4.14 4.18 4.22 T:norx3241v3 4.20 4.23 4.27 T:norx3241v2 4.33 4.34 4.35 T:oceankeyakv2 4.44 4.44 4.45 T:aesjambuv1 4.46 4.48 4.52 T:norx6461v2 4.48 4.50 4.51 T:norx6461v3 4.63 4.64 4.65 T:norx6444v2 4.83 4.87 4.92 T:norx3241v1 5.16 5.18 5.21 T:norx6461v1 5.44 5.45 5.48 T:norx6444v1 5.53 5.55 5.56 T:riverkeyakv2 5.98 6.00 6.09 T:acorn128v2 5.95 6.05 6.06 T:acorn128v3 6.25 6.26 6.30 T:ketjemajorv2 6.31 6.32 6.33 ascon128av12 6.30 6.35 6.40 T:norx3261v2 6.34 6.37 6.42 T:norx3261v3 6.42 6.44 6.45 T:ascon128av11 6.44 6.46 6.47 T:ascon96v1 7.34 7.44 7.53 T:ketjeminorv2 7.44 7.46 7.51 T:lunarkeyakv2 7.71 7.73 7.75 T:norx3261v1 9.17 9.19 9.20 T:ascon128v11 9.18 9.22 9.24 T:ascon128v1 9.32 9.34 9.37 ascon128v12 11.52 11.53 11.54 T:aes128otrsv2 11.52 11.54 11.55 T:aes128otrsv1 11.72 11.75 11.77 T:aes128otrpv1 11.74 11.76 11.80 T:aes128otrpv2 14.50 14.50 14.51 T:twine80n6t4clocv3 14.72 14.75 15.01 T:aes256otrsv1 14.78 14.79 14.80 T:aes256otrsv2 15.34 15.37 15.39 T:aes256otrpv1 15.38 15.40 15.44 T:twine80n6t4clocv2 15.38 15.45 15.49 T:aes256otrpv2 15.83 15.85 15.86 T:aes128n12clocv1 15.85 15.86 15.88 T:aes128n8clocv1 19.97 20.21 20.81 T:proest256otrv1 26.86 26.87 26.89 T:aeadaes128ocbtaglen96v1 26.78 26.88 26.96 T:ketjesrv1 26.87 26.89 26.90 T:aeadaes128ocbtaglen64v1 27.63 27.72 27.87 T:ketjesrv2 31.99 32.01 32.04 T:aeadaes192ocbtaglen64v1 32.00 32.02 32.04 T:aeadaes192ocbtaglen96v1 37.25 37.27 37.29 T:aeadaes256ocbtaglen64v1 37.26 37.28 37.31 T:aeadaes256ocbtaglen96v1 44.47 44.52 44.58 T:colm127v1 45.30 45.45 45.51 T:proest128otrv1 44.75 45.74 46.36 T:ketjejrv1 68.99 69.22 70.90 T:ketjejrv2 70.81 70.83 70.87 T:present80n6t4silcv3 74.96 75.28 75.91 T:deoxysneq128128v13 82.84 83.53 87.91 T:aezv1 96.60 96.84 97.94 T:deoxyseq128128v13 118.10 118.60 119.14 T:deoxysneq256128v13 126.60 126.65 127.10 T:led80n6t4silcv3 157.83 158.46 158.89 T:deoxyseq256128v13 451.31 456.98 469.74 T:acorn128 2694.66 2713.90 2743.68 T:led80n6t4silcv2 2687.50 2727.80 2745.71 T:led80n6silcv1 2866.70 2868.32 2899.42 T:present80n6t4silcv2 2869.11 2871.35 2895.77 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.95 0.98 1.02 T:aegis128 1.08 1.12 1.14 aegis128l 1.25 1.27 1.34 T:tiaoxinv2 1.27 1.29 1.33 T:tiaoxinv1 1.28 1.30 1.34 aegis256 1.36 1.37 1.41 T:aezv4 1.35? 1.39? 1.71? T:aezv5 1.48 1.48 1.49 T:aezv3 1.52 1.58 1.62 T:aeadaes128ocbtaglen128v1 1.90 1.93 1.96 T:aes128otrpv3 1.98 2.00 2.04 T:aeadaes256ocbtaglen128v1 2.22 2.23 2.24 T:aes128otrsv3 2.44 2.46 2.49 T:aes256otrpv3 2.52 2.54 2.56 T:aes128n12t8clocv2 2.53 2.56 2.59 T:aes128n8t8clocv2 2.54 2.56 2.58 T:aes128n12t8clocv3 2.66 2.70 2.74 T:colm0v1 2.73 2.75 2.78 T:aes128n8t8silcv2 2.75 2.77 2.81 T:aes128n12t8silcv3 2.73 2.77 2.81 T:aes128otrcv3 2.76 2.79 2.82 T:aes128n12t8silcv2 2.99 3.01 3.03 T:aes256otrsv3 3.02? 3.06? 10.61? T:aeadaes192ocbtaglen128v1 3.11 3.13 3.16 T:deoxysneq128128v1 3.36 3.39 3.43 T:deoxysi128v141 3.51 3.53 3.54 T:aes256otrcv3 3.79 3.82 3.89 T:deoxysneq256128v1 3.98 4.07 4.16 T:morus640128v1 4.04 4.08 4.14 T:deoxysi256v141 4.33 4.51 4.57 T:morus640128v2 4.59 4.62 4.66 T:deoxyseq128128v1 4.68 4.72 4.75 T:deoxysii128v141 4.73 4.84 4.97 aes256gcmv1 5.32 5.38 5.44 T:aes128gcmv1 5.50 5.54 5.61 T:deoxysii256v141 5.55 5.59 5.64 T:deoxyseq256128v1 5.58 5.60 5.63 T:aesjambuv1 5.71 5.76 5.81 T:morus1280128v1 5.78 5.82 5.89 T:morus1280256v1 6.03 6.11 6.21 T:morus1280128v2 6.10 6.14 6.22 T:morus1280256v2 9.50 9.54 9.65 ascon128av12 9.58 9.65 9.73 T:ascon96v1 9.59 9.66 9.74 T:ascon128av11 9.62 9.83 10.13 T:norx6441v2 10.14 10.25 10.41 T:norx6441v3 10.16 10.29 10.44 T:norx3241v2 10.16 10.31 10.51 T:norx3241v1 10.17 10.33 10.57 T:norx3241v3 10.92 10.99 11.06 T:norx6441v1 11.13 11.19 11.43 T:lakekeyakv1 12.03 12.11 12.23 T:ascon128v11 12.07 12.14 12.23 T:ascon128v1 12.24 12.32 12.43 ascon128v12 12.39 12.43 12.51 T:riverkeyakv2 13.00 13.05 13.15 T:lakekeyakv2 14.36 14.61 14.89 T:norx6461v1 14.92 15.08 15.25 T:norx6461v3 14.87 15.09 15.36 T:norx6461v2 15.29 15.48 15.75 T:norx3261v2 15.99 16.07 16.19 T:norx3261v1 16.20 16.33 16.40 T:norx3261v3 18.43 18.47 18.69 T:twine80n6t4clocv3 18.59 18.67 18.83 T:aes128otrpv1 18.62 18.69 18.80 T:aes128otrsv1 18.68 18.76 18.89 T:aes128otrpv2 18.71 18.76 18.89 T:aes128otrsv2 19.21 19.27 19.43 T:aes128n8clocv1 19.28 19.34 19.47 T:aes128n12clocv1 19.45 19.47 19.49 T:twine80n6t4clocv2 23.77 23.85 23.96 T:aes256otrsv1 23.64 23.87 24.09 T:norx6444v3 23.92 24.02 24.12 T:aes256otrsv2 24.41 24.51 24.68 T:aes256otrpv1 24.51 24.60 24.83 T:aes256otrpv2 25.19 25.31 25.38 T:ketjeminorv2 25.58 26.10 26.29 T:acorn128v2 26.42 26.79 27.29 T:acorn128v3 29.53 29.62 29.71 T:seakeyakv2 33.05 33.15 33.30 T:norx6444v2 35.24 35.33 35.62 T:aeadaes128ocbtaglen64v1 35.31 35.43 35.78 T:aeadaes128ocbtaglen96v1 37.92 38.31 38.49 T:ketjemajorv2 39.13 39.26 39.41 T:norx6444v1 41.29 41.43 41.62 T:aeadaes192ocbtaglen96v1 41.38 41.56 41.78 T:aeadaes192ocbtaglen64v1 41.89 42.07 42.37 T:ketjesrv1 46.17 46.35 46.60 T:oceankeyakv2 47.39 47.61 47.87 T:ketjesrv2 48.22 48.32 48.51 T:aeadaes256ocbtaglen64v1 48.23 48.32 48.56 T:aeadaes256ocbtaglen96v1 53.06 53.26 53.46 T:colm127v1 58.03 58.31 58.59 T:ketjejrv1 58.31 58.79 60.06 T:proest256otrv1 71.73 71.89 72.16 T:deoxysneq128128v13 86.96 87.15 87.39 T:present80n6t4silcv3 86.88 87.57 87.90 T:proest128otrv1 92.12 92.54 94.58 T:ketjejrv2 94.97 95.27 102.83 T:aezv1 117.89 118.20 118.51 T:deoxysneq256128v13 119.16 119.46 119.93 T:lunarkeyakv2 118.26 119.83 120.24 T:deoxyseq128128v13 149.75 150.03 150.22 T:led80n6t4silcv3 195.80 197.40 197.86 T:deoxyseq256128v13 1601.71 1614.57 1642.66 T:acorn128 2993.32 2995.97 2998.52 T:led80n6t4silcv2 2995.10 3002.10 3011.62 T:led80n6silcv1 3204.43 3205.09 3206.30 T:present80n6t4silcv2 3208.71 3211.70 3218.45 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.01 1.04 1.09 T:aegis128 1.13 1.17 1.20 aegis128l 1.31 1.35 1.41 T:tiaoxinv2 1.33 1.35 1.40 T:tiaoxinv1 1.35 1.36 1.39 T:aezv5 1.37 1.40 1.46 T:aezv4 1.38 1.41 1.44 aegis256 1.49 1.50 1.51 T:aezv3 1.68 1.74 1.79 T:aeadaes128ocbtaglen128v1 1.91 1.93 1.95 T:aes128otrpv3 2.26 2.28 2.30 T:aeadaes256ocbtaglen128v1 2.28 2.29 2.31 T:aes128otrsv3 2.41 2.42 2.44 T:aes256otrpv3 2.54 2.56 2.60 T:aes128n12t8clocv2 2.55 2.59 2.64 T:aes128n8t8clocv2 2.57 2.59 2.68 T:aes128n12t8clocv3 2.80 2.82 2.85 T:aes128otrcv3 2.90 2.93 2.96 T:aes128n8t8silcv2 2.92 2.95 2.99 T:aes128n12t8silcv2 2.93 2.96 3.02 T:aes128n12t8silcv3 3.09 3.12 3.15 T:colm0v1 3.28 3.29 3.30 T:aes256otrsv3 3.39? 3.43? 10.59? T:aeadaes192ocbtaglen128v1 3.68 3.69 3.71 T:aes256otrcv3 4.11 4.21 4.32 T:morus640128v1 4.39 4.52 4.62 T:morus640128v2 4.68 4.74 4.79 aes256gcmv1 4.86 4.90 4.93 T:deoxysneq128128v1 4.92 4.95 5.00 T:deoxysi128v141 4.95 4.99 5.04 T:deoxysneq256128v1 5.31 5.36 5.44 T:aes128gcmv1 5.31 5.36 5.39 T:deoxysii128v141 5.73 5.75 5.77 T:aesjambuv1 5.83 5.87 5.91 T:deoxysi256v141 5.90 5.94 6.01 T:morus1280256v1 5.89 5.95 6.02 T:morus1280128v1 6.11 6.14 6.22 T:morus1280256v2 6.09 6.15 6.25 T:morus1280128v2 6.57 6.61 6.64 T:deoxyseq128128v1 6.64 6.71 6.76 T:deoxysii256v141 6.65 6.71 6.77 T:deoxyseq256128v1 9.53 9.57 9.63 ascon128av12 9.61 9.65 9.73 T:ascon96v1 9.60 9.67 9.75 T:ascon128av11 9.97 10.13 10.35 T:norx6441v2 10.20 10.28 10.47 T:norx6441v1 10.23 10.38 10.54 T:norx3241v3 10.32 10.43 10.54 T:norx6441v3 10.29 10.46 10.68 T:norx3241v1 10.33 10.47 10.60 T:norx3241v2 11.17 11.27 11.53 T:lakekeyakv1 12.01 12.07 12.17 T:ascon128v1 12.01 12.08 12.18 T:ascon128v11 12.23 12.30 12.42 ascon128v12 12.48 12.53 12.61 T:riverkeyakv2 13.02 13.10 13.18 T:lakekeyakv2 14.49 14.58 14.86 T:norx6461v1 15.04 15.18 15.34 T:norx6461v2 15.05 15.22 15.45 T:norx6461v3 15.52 15.73 16.03 T:norx3261v2 15.94 16.17 16.29 T:norx3261v3 16.20 16.30 16.40 T:norx3261v1 18.57 18.61 18.85 T:twine80n6t4clocv3 18.71 18.77 18.87 T:aes128otrsv1 18.78 18.87 18.99 T:aes128otrsv2 18.93 19.01 19.10 T:aes128otrpv1 19.06 19.15 19.24 T:aes128otrpv2 19.56 19.58 19.59 T:twine80n6t4clocv2 19.69 19.78 19.94 T:aes128n8clocv1 19.74 19.81 19.93 T:aes128n12clocv1 23.32 23.48 23.63 T:norx6444v3 23.87 23.97 24.12 T:aes256otrsv1 24.04 24.13 24.34 T:aes256otrsv2 24.76 24.81 24.91 T:aes256otrpv1 24.86 24.94 25.07 T:aes256otrpv2 25.37 25.48 25.98 T:ketjeminorv2 25.57 26.28 26.36 T:acorn128v2 27.40 27.61 27.79 T:acorn128v3 29.53 29.62 29.75 T:seakeyakv2 33.14 33.24 33.47 T:norx6444v2 37.76 38.26 38.44 T:ketjemajorv2 39.16 39.32 39.65 T:norx6444v1 42.30 42.58 43.00 T:ketjesrv1 42.83 42.92 43.03 T:aeadaes128ocbtaglen96v1 42.83 42.92 43.16 T:aeadaes128ocbtaglen64v1 46.19 46.29 46.88 T:oceankeyakv2 47.79 48.03 48.33 T:ketjesrv2 50.18 50.25 50.40 T:aeadaes192ocbtaglen96v1 50.34 50.60 50.97 T:aeadaes192ocbtaglen64v1 58.15 58.38 58.87 T:ketjejrv1 59.03 59.17 59.52 T:aeadaes256ocbtaglen64v1 59.14 59.26 59.40 T:aeadaes256ocbtaglen96v1 59.21 59.67 60.39 T:proest256otrv1 61.26 61.43 61.68 T:colm127v1 83.40 83.59 83.96 T:deoxysneq128128v13 86.98 87.11 87.44 T:present80n6t4silcv3 86.96 87.45 88.03 T:proest128otrv1 92.62 93.12 95.02 T:ketjejrv2 101.55 101.87 109.42 T:aezv1 119.17 119.38 119.77 T:lunarkeyakv2 118.35 120.33 120.79 T:deoxyseq128128v13 131.14 131.47 131.88 T:deoxysneq256128v13 149.62 149.90 150.17 T:led80n6t4silcv3 195.31 197.08 197.41 T:deoxyseq256128v13 1597.31 1617.38 1642.82 T:acorn128 2992.95 2997.07 3003.69 T:led80n6t4silcv2 2996.12 3003.50 3020.48 T:led80n6silcv1 3204.06 3205.22 3212.87 T:present80n6t4silcv2 3209.02 3211.87 3223.65 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.02 1.05 1.07 T:aegis128 1.09? 1.09? 1.23? T:aezv5 1.09 1.09 1.10 T:aezv4 1.10 1.12 1.16 aegis128l 1.17 1.18 1.19 T:aezv3 1.30 1.33 1.42 T:tiaoxinv2 1.32 1.35 1.42 T:tiaoxinv1 1.40 1.43 1.47 aegis256 1.67 1.73 1.78 T:aeadaes128ocbtaglen128v1 1.93 1.94 1.97 T:aes128otrpv3 2.27 2.29 2.31 T:aeadaes256ocbtaglen128v1 2.29 2.30 2.31 T:aes128otrsv3 2.41 2.43 2.44 T:aes256otrpv3 2.45 2.46 2.55 T:aes128n12t8clocv2 2.46 2.49 2.65 T:aes128n8t8clocv2 2.47? 2.49? 2.80? T:aes128n12t8clocv3 2.76 2.77 2.80 T:aes128n12t8silcv2 2.76 2.77 2.80 T:aes128n12t8silcv3 2.77 2.78 2.98 T:aes128n8t8silcv2 2.81 2.83 2.86 T:aes128otrcv3 3.12 3.16 3.19 T:colm0v1 3.28 3.29 3.30 T:aes256otrsv3 3.39? 3.42? 9.92? T:aeadaes192ocbtaglen128v1 3.68 3.69 3.71 T:aes256otrcv3 4.05 4.12 4.23 T:morus640128v1 4.40 4.48 4.58 T:morus640128v2 4.68 4.72 4.76 aes256gcmv1 4.71 4.77 4.94 T:deoxysneq128128v1 4.84 4.88 4.93 T:deoxysneq256128v1 4.92 4.99 5.05 T:deoxysi128v141 5.30 5.34 5.38 T:deoxysii128v141 5.30 5.37 5.45 T:aes128gcmv1 5.74 5.75 5.77 T:aesjambuv1 5.85 5.90 5.97 T:deoxysi256v141 5.89 5.93 5.98 T:morus1280256v1 5.91 5.96 6.01 T:morus1280128v1 6.10 6.14 6.19 T:morus1280256v2 6.12 6.15 6.22 T:morus1280128v2 6.58 6.61 6.65 T:deoxyseq128128v1 6.60 6.65 6.71 T:deoxysii256v141 6.64 6.69 6.74 T:deoxyseq256128v1 9.50 9.54 9.63 ascon128av12 9.56 9.60 9.69 T:ascon96v1 9.55 9.62 9.71 T:ascon128av11 10.07 10.23 10.42 T:norx6441v2 10.26 10.33 10.46 T:norx6441v1 10.18 10.40 10.57 T:norx3241v3 10.26 10.41 10.57 T:norx3241v1 10.32 10.44 10.56 T:norx6441v3 10.32 10.49 10.64 T:norx3241v2 11.21 11.26 11.46 T:lakekeyakv1 12.00 12.04 12.15 T:ascon128v1 12.00 12.07 12.19 T:ascon128v11 12.25 12.30 12.36 ascon128v12 12.55 12.59 12.64 T:riverkeyakv2 13.07 13.13 13.22 T:lakekeyakv2 14.46 14.64 14.83 T:norx6461v1 14.95 15.11 15.25 T:norx6461v2 15.04 15.15 15.31 T:norx6461v3 15.52 15.76 15.92 T:norx3261v2 15.94 16.17 16.29 T:norx3261v3 16.16 16.26 16.39 T:norx3261v1 18.48 18.53 18.77 T:twine80n6t4clocv3 18.73 18.81 18.88 T:aes128otrsv1 18.83 18.90 19.07 T:aes128otrsv2 19.03 19.10 19.25 T:aes128otrpv1 19.09 19.17 19.32 T:aes128otrpv2 19.52 19.55 19.57 T:twine80n6t4clocv2 19.67 19.73 19.87 T:aes128n8clocv1 19.70 19.77 19.84 T:aes128n12clocv1 23.39 23.54 23.70 T:norx6444v3 23.89 24.00 24.18 T:aes256otrsv1 24.03 24.14 24.43 T:aes256otrsv2 24.85 24.93 25.04 T:aes256otrpv1 24.93 25.01 25.18 T:aes256otrpv2 25.40 25.49 25.93 T:ketjeminorv2 25.44 26.28 26.33 T:acorn128v2 27.24 27.59 27.70 T:acorn128v3 29.55 29.65 29.82 T:seakeyakv2 33.19 33.34 33.53 T:norx6444v2 37.82 38.26 38.54 T:ketjemajorv2 39.17 39.34 39.49 T:norx6444v1 42.19 42.55 43.02 T:ketjesrv1 42.79 42.90 43.06 T:aeadaes128ocbtaglen64v1 42.73 42.92 43.19 T:aeadaes128ocbtaglen96v1 46.25 46.43 46.89 T:oceankeyakv2 47.71 47.93 48.36 T:ketjesrv2 50.15 50.26 50.38 T:aeadaes192ocbtaglen96v1 50.36 50.52 50.83 T:aeadaes192ocbtaglen64v1 57.71 58.02 58.84 T:proest256otrv1 58.36 58.52 59.14 T:ketjejrv1 59.00 59.12 59.29 T:aeadaes256ocbtaglen64v1 59.10 59.22 59.37 T:aeadaes256ocbtaglen96v1 61.07 61.23 61.41 T:colm127v1 83.54 83.84 84.21 T:deoxysneq128128v13 86.86 87.18 87.61 T:proest128otrv1 87.02 87.18 87.70 T:present80n6t4silcv3 92.73 93.39 94.98 T:ketjejrv2 101.52 102.53 109.67 T:aezv1 119.25 119.46 119.75 T:lunarkeyakv2 118.23 120.32 120.76 T:deoxyseq128128v13 131.18 131.50 131.80 T:deoxysneq256128v13 149.67 149.95 150.22 T:led80n6t4silcv3 195.22 197.11 197.39 T:deoxyseq256128v13 1603.19 1617.33 1644.56 T:acorn128 2991.92 2996.97 3000.55 T:led80n6t4silcv2 2996.31 3002.87 3012.59 T:led80n6silcv1 3204.32 3205.44 3209.76 T:present80n6t4silcv2 3207.73 3210.09 3217.78 T:present80n6silcv1