VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen 4 (a70f41); 2023 AMD Ryzen 5 7640HS; 6 x 4300MHz; phoenix, supercop-20260217

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.13? 0.14? 0.15? T:tiaoxinv1 0.13 0.14 0.14 T:tiaoxinv2 0.10? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.19 T:aegis128l 0.19 0.19 0.19 aegis128l 0.17? 0.25? 0.39? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.32 T:aegis128 0.32 0.32 0.32 aegis256 0.36 0.36 0.37 T:aezv4 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.39 T:aezv5 0.25? 0.39? 0.54? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.41 0.41 0.42 T:aes128otrsv3 0.47 0.48 0.49 T:morus1280128v2 0.47 0.48 0.50 T:morus1280128v1 0.48 0.48 0.49 T:morus1280256v1 0.48 0.49 0.51 T:morus1280256v2 0.53 0.53 0.54 T:aes256otrcv3 0.53 0.54 0.55 T:deoxysi128v141 0.54 0.54 0.55 T:aes256otrsv3 0.57 0.58 0.59 aes256gcmv1 0.58 0.59 0.60 T:deoxysi256v141 0.61 0.62 0.62 T:deoxysneq128128v1 0.70 0.71 0.72 T:deoxysneq256128v1 0.74 0.75 0.77 T:morus640128v2 0.74 0.75 0.77 T:morus640128v1 0.72? 0.76? 0.89? T:oceankeyakv2 0.74? 0.80? 0.83? T:aes128gcmv1 0.78 0.82 0.84 T:lunarkeyakv2 0.85 0.86 0.88 T:norx6444v3 0.94 0.96 1.01 T:aes128otrpv3 1.04 1.07 1.10 T:deoxysii128v141 1.18 1.19 1.19 T:colm0v1 1.14 1.20 1.25 T:aes256otrpv3 1.18 1.20 1.21 T:deoxysii256v141 1.23 1.24 1.26 T:deoxyseq128128v1 1.38 1.40 1.41 T:seakeyakv2 1.43 1.44 1.47 T:deoxyseq256128v1 2.17 2.18 2.19 T:norx6441v2 2.18 2.19 2.20 T:norx6441v3 2.61 2.62 2.64 T:norx6441v1 2.62 2.62 2.63 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.63 2.63 T:aes128n8t8clocv2 2.62 2.63 2.63 T:aes128n12t8silcv2 2.63 2.63 2.63 T:aes128n12t8silcv3 2.63 2.63 2.63 T:aes128n8t8silcv2 3.21 3.23 3.24 T:norx6461v2 3.22 3.24 3.26 T:norx6461v3 3.22 3.25 3.28 T:norx6444v2 3.20 3.27 3.34 T:lakekeyakv1 3.24 3.34 3.35 T:lakekeyakv2 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.53 T:norx3241v3 3.67 3.67 3.68 T:norx6444v1 3.88 3.92 3.93 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 5.00 5.00 5.00 T:acorn128v3 5.05 5.08 5.11 T:ketjemajorv2 5.12 5.13 5.13 T:acorn128v2 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.28 T:norx3261v3 5.28 5.30 5.31 T:aesjambuv1 5.31 5.31 5.31 ascon128av12 5.44 5.44 5.44 T:ascon128av11 5.56 5.56 5.56 T:ascon96v1 6.59 6.67 6.75 T:ketjeminorv2 7.52 7.53 7.53 T:norx3261v1 7.67 7.68 7.69 T:riverkeyakv2 7.75 7.75 7.75 ascon128v12 8.25 8.25 8.25 T:ascon128v1 8.25 8.25 8.25 T:ascon128v11 12.96 12.99 13.01 T:aes128otrsv1 12.96 12.99 13.01 T:aes128otrpv1 12.97 13.00 13.02 T:aes128otrpv2 12.99 13.03 13.08 T:aes128otrsv2 16.84 16.88 16.99 T:aes256otrsv1 16.86 16.90 16.94 T:aes256otrsv2 16.89 16.93 16.98 T:aes256otrpv1 16.90 16.94 16.97 T:aes256otrpv2 18.15 18.19 18.22 T:proest256otrv1 19.20 19.35 19.42 T:twine80n6t4clocv3 19.89 20.40 20.42 T:twine80n6t4clocv2 21.15 21.19 21.36 T:aeadaes128ocbtaglen64v1 21.16 21.24 21.28 T:aeadaes128ocbtaglen96v1 21.79 21.86 22.00 T:aes128n12clocv1 21.99 22.03 22.08 T:aes128n8clocv1 25.02 25.09 25.63 T:aeadaes192ocbtaglen96v1 24.99 25.10 25.14 T:aeadaes192ocbtaglen64v1 26.70 26.74 26.80 T:ketjesrv1 28.86 28.94 29.00 T:aeadaes256ocbtaglen64v1 28.92 29.09 29.22 T:aeadaes256ocbtaglen96v1 30.12 30.23 30.36 T:ketjesrv2 42.07 42.11 42.19 T:ketjejrv1 44.14 44.17 44.20 T:proest128otrv1 46.84 46.93 46.99 T:colm127v1 64.60 64.72 65.05 T:deoxysneq128128v13 68.11 68.20 68.26 T:present80n6t4silcv3 69.16 69.28 69.51 T:ketjejrv2 97.40 99.85 105.13 T:led80n6t4silcv3 106.69 106.86 107.28 T:deoxysneq256128v13 129.47 129.69 129.82 T:deoxyseq128128v13 141.60 141.84 142.20 T:aezv1 213.20 213.38 214.36 T:deoxyseq256128v13 532.54? 571.02? 641.45? T:acorn128 3024.95 3027.69 3044.01 T:led80n6t4silcv2 3056.41 3057.56 3059.32 T:led80n6silcv1 3619.26 3620.85 3621.73 T:present80n6t4silcv2 3619.05 3621.74 3623.36 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.10? 0.18? 0.27? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.19 0.19 0.20 aegis128l 0.11? 0.25? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.31 0.31 0.32 aegis256 0.28? 0.31? 0.33? T:tiaoxinv2 0.28? 0.32? 0.34? T:tiaoxinv1 0.36 0.37 0.37 T:aezv4 0.36 0.37 0.38 T:aezv3 0.38 0.38 0.39 T:aezv5 0.26? 0.40? 0.49? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.41 0.42 0.42 T:aes128otrcv3 0.48 0.49 0.49 aes256gcmv1 0.50 0.50 0.51 T:morus1280128v2 0.50 0.51 0.51 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v2 0.50 0.51 0.51 T:morus1280256v1 0.54 0.54 0.55 T:aes256otrsv3 0.55 0.55 0.56 T:aes256otrcv3 0.58 0.59 0.60 T:deoxysi128v141 0.65 0.65 0.66 T:deoxysi256v141 0.65 0.66 0.68 T:deoxysneq128128v1 0.69 0.70 0.72 T:deoxysneq256128v1 0.67 0.71 0.73 T:oceankeyakv2 0.76 0.76 0.76 T:aes128gcmv1 0.77 0.78 0.80 T:morus640128v1 0.77 0.79 0.80 T:morus640128v2 0.86 0.87 0.88 T:norx6444v3 0.91 0.94 0.98 T:lunarkeyakv2 0.93 0.95 1.01 T:aes128otrpv3 1.07 1.07 1.08 T:deoxysii128v141 1.15 1.16 1.19 T:colm0v1 1.21 1.22 1.23 T:deoxysii256v141 1.18? 1.24? 1.32? T:aes256otrpv3 1.32 1.33 1.34 T:deoxyseq128128v1 1.42 1.43 1.44 T:deoxyseq256128v1 1.42 1.43 1.45 T:seakeyakv2 2.14 2.15 2.18 T:norx6441v3 2.15 2.17 2.19 T:norx6441v2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n12t8clocv3 2.55 2.57 2.58 T:aes128n12t8silcv2 2.56 2.57 2.57 T:aes128n8t8silcv2 2.55 2.57 2.58 T:aes128n12t8silcv3 2.58 2.60 2.64 T:norx6441v1 3.22 3.24 3.25 T:norx6461v2 3.22 3.24 3.26 T:norx6461v3 3.23 3.26 3.29 T:norx6444v2 3.28 3.29 3.30 T:lakekeyakv2 3.28 3.30 3.32 T:lakekeyakv1 3.57 3.57 3.58 T:norx3241v3 3.57 3.58 3.59 T:norx3241v2 3.65 3.67 3.69 T:norx6444v1 3.84 3.86 3.88 T:norx6461v1 4.34 4.34 4.37 T:norx3241v1 4.92 4.95 4.98 T:ketjemajorv2 5.25 5.25 5.25 T:acorn128v2 5.25 5.25 5.25 T:ascon128av11 5.25 5.25 5.25 T:acorn128v3 5.31 5.31 5.31 ascon128av12 5.32 5.32 5.33 T:norx3261v3 5.32 5.33 5.34 T:norx3261v2 5.50 5.50 5.50 T:ascon96v1 5.72 5.77 5.86 T:aesjambuv1 7.11 7.16 7.22 T:ketjeminorv2 7.37 7.38 7.41 T:norx3261v1 7.63 7.64 7.64 ascon128v12 7.75 7.77 7.80 T:riverkeyakv2 7.87 7.87 7.88 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 13.30 13.35 13.40 T:aes128otrpv2 13.33 13.37 13.41 T:aes128otrsv2 13.32 13.39 13.42 T:aes128otrsv1 13.33 13.42 13.47 T:aes128otrpv1 17.26 17.29 17.34 T:aes256otrsv2 17.24 17.30 17.35 T:aes256otrpv2 17.25 17.30 17.35 T:aes256otrpv1 17.58 17.63 17.74 T:aes256otrsv1 18.76 18.80 18.82 T:proest256otrv1 19.04 19.08 19.17 T:twine80n6t4clocv3 20.25 20.39 20.42 T:twine80n6t4clocv2 22.68 22.77 22.88 T:ketjesrv2 22.86 22.91 22.96 T:aes128n8clocv1 22.91 22.99 23.21 T:aes128n12clocv1 27.89 28.00 28.08 T:ketjesrv1 29.03 29.07 29.10 T:aeadaes128ocbtaglen96v1 29.05 29.11 29.19 T:aeadaes128ocbtaglen64v1 34.64 34.68 34.70 T:aeadaes192ocbtaglen96v1 34.73 34.82 34.84 T:aeadaes192ocbtaglen64v1 40.38 40.41 40.45 T:aeadaes256ocbtaglen96v1 40.39 40.46 40.52 T:aeadaes256ocbtaglen64v1 42.62 42.66 42.69 T:proest128otrv1 43.46 43.53 43.61 T:ketjejrv1 62.71 62.86 63.45 T:colm127v1 68.12 68.24 68.35 T:ketjejrv2 68.06 68.32 68.39 T:present80n6t4silcv3 86.32 86.39 86.46 T:deoxysneq128128v13 101.22 102.01 106.10 T:led80n6t4silcv3 128.82 128.93 129.07 T:deoxyseq128128v13 130.77 130.97 131.05 T:deoxysneq256128v13 141.26 141.80 142.07 T:aezv1 213.09 213.54 213.91 T:deoxyseq256128v13 461.45? 465.28? 574.01? T:acorn128 3020.34 3022.84 3034.54 T:led80n6t4silcv2 3058.48 3060.98 3062.37 T:led80n6silcv1 3614.15 3618.39 3622.57 T:present80n6t4silcv2 3613.83 3618.98 3620.37 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.14 0.14 0.14 T:aezv3 0.13 0.14 0.14 T:aezv4 0.14 0.15 0.15 T:aezv5 0.11? 0.18? 0.26? T:aeadaes128ocbtaglen128v1 0.19 0.19 0.20 T:aegis128l 0.23 0.24 0.25 aegis128l 0.11? 0.25? 0.40? T:aeadaes256ocbtaglen128v1 0.27? 0.31? 0.33? T:tiaoxinv2 0.31 0.31 0.31 T:aegis128 0.29? 0.33? 0.34? T:tiaoxinv1 0.36 0.37 0.37 aegis256 0.33? 0.40? 0.54? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrsv3 0.41 0.42 0.42 T:aes128otrcv3 0.48 0.48 0.49 aes256gcmv1 0.50 0.51 0.51 T:morus1280128v1 0.50 0.51 0.52 T:morus1280256v2 0.50 0.51 0.52 T:morus1280256v1 0.50 0.51 0.52 T:morus1280128v2 0.54 0.54 0.55 T:aes256otrsv3 0.54 0.55 0.55 T:aes256otrcv3 0.58 0.59 0.60 T:deoxysi128v141 0.64 0.65 0.66 T:deoxysneq128128v1 0.64 0.65 0.66 T:deoxysi256v141 0.65? 0.69? 0.74? T:oceankeyakv2 0.69 0.70 0.71 T:deoxysneq256128v1 0.76 0.76 0.76 T:aes128gcmv1 0.77 0.78 0.79 T:morus640128v2 0.77 0.79 0.80 T:morus640128v1 0.85 0.87 0.88 T:norx6444v3 0.92 0.97 1.02 T:aes128otrpv3 0.94 0.97 0.99 T:lunarkeyakv2 1.07 1.08 1.08 T:deoxysii128v141 1.13 1.16 1.18 T:colm0v1 1.21 1.22 1.23 T:deoxysii256v141 1.18? 1.26? 1.33? T:aes256otrpv3 1.32 1.33 1.34 T:deoxyseq128128v1 1.43 1.43 1.45 T:deoxyseq256128v1 1.44 1.47 1.48 T:seakeyakv2 2.13 2.15 2.17 T:norx6441v3 2.15 2.17 2.19 T:norx6441v2 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.53 2.56 2.58 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8clocv3 2.62 2.64 2.66 T:norx6441v1 3.22 3.24 3.29 T:norx6461v3 3.24 3.27 3.32 T:norx6444v2 3.28 3.30 3.32 T:norx6461v2 3.30 3.31 3.32 T:lakekeyakv2 3.30 3.32 3.35 T:lakekeyakv1 3.59 3.60 3.60 T:norx3241v2 3.59 3.60 3.61 T:norx3241v3 3.67 3.68 3.69 T:norx6444v1 3.87 3.94 3.95 T:norx6461v1 4.34 4.37 4.39 T:norx3241v1 4.96 4.99 5.03 T:ketjemajorv2 5.25 5.25 5.25 T:acorn128v2 5.25 5.25 5.25 T:acorn128v3 5.25 5.25 5.25 T:ascon128av11 5.31 5.31 5.31 ascon128av12 5.32 5.32 5.33 T:norx3261v3 5.32 5.32 5.33 T:norx3261v2 5.50 5.50 5.51 T:ascon96v1 5.72 5.78 5.86 T:aesjambuv1 7.15 7.19 7.24 T:ketjeminorv2 7.36 7.37 7.40 T:norx3261v1 7.64 7.64 7.64 ascon128v12 7.79 7.80 7.83 T:riverkeyakv2 7.88 7.88 7.88 T:ascon128v11 7.88 7.88 7.88 T:ascon128v1 13.33 13.38 13.42 T:aes128otrpv1 13.35 13.39 13.43 T:aes128otrsv2 13.35 13.40 13.44 T:aes128otrpv2 13.33 13.40 13.48 T:aes128otrsv1 17.25 17.31 17.37 T:aes256otrpv1 17.28 17.34 17.37 T:aes256otrpv2 17.31 17.35 17.41 T:aes256otrsv2 17.60 17.65 17.74 T:aes256otrsv1 18.76 18.78 18.81 T:proest256otrv1 19.03 19.10 19.25 T:twine80n6t4clocv3 19.88 19.90 20.09 T:twine80n6t4clocv2 22.74 22.84 22.93 T:ketjesrv2 22.86 22.91 22.97 T:aes128n8clocv1 22.93 22.98 23.25 T:aes128n12clocv1 27.85 27.96 28.08 T:ketjesrv1 29.10 29.12 29.20 T:aeadaes128ocbtaglen96v1 29.17 29.19 29.21 T:aeadaes128ocbtaglen64v1 34.66 34.72 34.73 T:aeadaes192ocbtaglen96v1 34.63 34.72 34.82 T:aeadaes192ocbtaglen64v1 40.21 40.29 40.36 T:aeadaes256ocbtaglen64v1 40.24 40.31 40.34 T:aeadaes256ocbtaglen96v1 42.62 42.65 42.70 T:proest128otrv1 43.53 43.60 43.70 T:ketjejrv1 61.73 61.98 62.27 T:colm127v1 68.07 68.17 68.38 T:present80n6t4silcv3 68.11 68.20 68.30 T:ketjejrv2 86.25 86.34 86.39 T:deoxysneq128128v13 98.01 101.45 106.28 T:led80n6t4silcv3 128.73 128.81 128.93 T:deoxyseq128128v13 130.72 131.19 131.61 T:deoxysneq256128v13 141.07 141.43 142.48 T:aezv1 212.98 213.21 214.27 T:deoxyseq256128v13 465.20? 525.02? 583.51? T:acorn128 3018.41 3023.32 3036.45 T:led80n6t4silcv2 3056.32 3057.42 3058.99 T:led80n6silcv1 3613.13 3617.77 3624.48 T:present80n6t4silcv2 3613.72 3618.23 3620.19 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.12 0.12 0.12 T:tiaoxinv2 0.12 0.12 0.13 T:tiaoxinv1 0.13? 0.17? 0.22? T:aeadaes128ocbtaglen128v1 0.17 0.17 0.17 T:aegis128l 0.17 0.17 0.17 aegis128l 0.19? 0.23? 0.29? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.26 0.26 T:aezv4 0.26 0.26 0.26 T:aezv5 0.31 0.31 0.31 T:aegis128 0.32 0.33 0.33 aegis256 0.31? 0.39? 0.46? T:aeadaes192ocbtaglen128v1 0.41 0.41 0.42 T:aes128otrcv3 0.47 0.47 0.50 T:morus1280128v1 0.47 0.48 0.50 T:morus1280128v2 0.47 0.48 0.50 T:morus1280256v1 0.48 0.48 0.49 aes256gcmv1 0.47 0.48 0.49 T:morus1280256v2 0.54 0.54 0.55 T:aes256otrcv3 0.54 0.54 0.55 T:deoxysi128v141 0.59 0.59 0.59 T:aes128gcmv1 0.54? 0.59? 0.62? T:oceankeyakv2 0.59 0.59 0.60 T:deoxysi256v141 0.61 0.61 0.62 T:deoxysneq128128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.72 0.73 0.75 T:morus640128v2 0.73 0.74 0.75 T:morus640128v1 0.80 0.80 0.82 T:deoxysii128v141 0.84 0.84 0.85 T:colm0v1 0.89 0.90 0.90 T:deoxysii256v141 0.93 0.94 0.95 T:deoxyseq128128v1 0.94 0.96 0.98 T:lunarkeyakv2 0.97 0.99 1.01 T:aes128otrpv3 1.07 1.07 1.10 T:deoxyseq256128v1 1.11 1.16 1.18 T:seakeyakv2 1.23 1.25 1.26 T:aes256otrpv3 1.49 1.49 1.50 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 2.05 2.05 2.06 T:aes256otrsv3 2.11 2.12 2.14 T:norx6441v2 2.13 2.14 2.16 T:norx6441v3 2.54 2.56 2.58 T:norx6441v1 2.59 2.59 2.59 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.59 T:aes128n12t8clocv3 2.59 2.59 2.59 T:aes128n12t8clocv2 2.59 2.59 2.59 T:aes128n12t8silcv2 2.59 2.59 2.59 T:aes128n12t8silcv3 2.81 2.82 2.88 T:lakekeyakv2 2.94 2.95 2.98 T:norx6444v2 3.07 3.08 3.13 T:lakekeyakv1 3.14 3.19 3.22 T:norx6461v3 3.16 3.20 3.21 T:norx6461v2 3.52 3.52 3.53 T:norx3241v2 3.52 3.52 3.53 T:norx3241v3 3.55 3.56 3.57 T:norx6444v1 3.78 3.83 3.84 T:norx6461v1 4.22 4.23 4.23 T:norx3241v1 4.46 4.49 4.50 T:ketjemajorv2 5.01 5.01 5.01 T:acorn128v3 5.15 5.15 5.16 T:acorn128v2 5.27 5.27 5.28 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.27 5.28 5.29 ascon128av12 5.34 5.34 5.35 T:ascon128av11 5.38 5.38 5.38 T:ascon96v1 5.52 5.53 5.54 T:riverkeyakv2 6.16 6.25 6.39 T:ketjeminorv2 7.52 7.53 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 8.06 8.06 8.06 T:ascon128v11 8.06 8.07 8.07 T:ascon128v1 12.32 12.35 12.38 T:aes128otrpv2 12.33 12.35 12.39 T:aes128otrpv1 12.50 12.53 12.55 T:aes128otrsv2 12.52 12.53 12.55 T:aes128otrsv1 16.28 16.31 16.36 T:aes256otrpv2 16.38 16.43 16.46 T:aes256otrsv1 16.34 16.45 16.57 T:aes256otrpv1 16.45 16.47 16.49 T:aes256otrsv2 16.71 16.73 16.83 T:aes128n12clocv1 16.83 16.84 16.87 T:aes128n8clocv1 19.03 19.15 19.17 T:twine80n6t4clocv3 19.15 19.21 19.24 T:proest256otrv1 19.68 20.12 20.24 T:twine80n6t4clocv2 20.82 20.86 20.99 T:aeadaes128ocbtaglen96v1 20.80 20.89 20.90 T:aeadaes128ocbtaglen64v1 24.49 24.60 24.66 T:ketjesrv1 24.63 24.65 24.76 T:aeadaes192ocbtaglen96v1 24.74 24.76 25.05 T:aeadaes192ocbtaglen64v1 25.63 25.68 25.74 T:ketjesrv2 28.43 28.48 28.54 T:aeadaes256ocbtaglen64v1 28.52 28.54 28.67 T:aeadaes256ocbtaglen96v1 34.54 34.59 34.81 T:colm127v1 40.82 40.85 40.87 T:ketjejrv1 43.12 43.26 43.29 T:proest128otrv1 64.27 64.32 64.54 T:deoxysneq128128v13 67.13 67.23 67.37 T:ketjejrv2 67.32 67.54 67.68 T:present80n6t4silcv3 93.43 93.64 94.02 T:aezv1 96.54 96.64 96.73 T:deoxyseq128128v13 98.91 103.31 104.41 T:led80n6t4silcv3 106.20 106.34 106.48 T:deoxysneq256128v13 159.40 159.70 160.00 T:deoxyseq256128v13 502.16? 595.30? 650.09? T:acorn128 2271.26 2284.90 2287.13 T:led80n6t4silcv2 2293.97 2294.54 2295.18 T:led80n6silcv1 2709.83 2711.62 2714.61 T:present80n6t4silcv2 2712.37 2713.79 2716.05 T:present80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.17 0.17 0.18 T:aegis128l 0.17 0.18 0.18 aegis128l 0.11? 0.18? 0.23? T:aeadaes128ocbtaglen128v1 0.19? 0.21? 0.22? T:tiaoxinv2 0.21 0.22 0.22 T:tiaoxinv1 0.17? 0.25? 0.31? T:aeadaes256ocbtaglen128v1 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.31 0.31 0.32 aegis256 0.31 0.31 0.31 T:aegis128 0.34? 0.39? 0.47? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.43 0.44 0.44 aes256gcmv1 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280256v2 0.55 0.55 0.55 T:aes256otrcv3 0.56 0.56 0.57 T:deoxysi128v141 0.58 0.58 0.59 T:aes128gcmv1 0.62 0.62 0.62 T:deoxysi256v141 0.63 0.64 0.64 T:deoxysneq128128v1 0.63? 0.65? 0.72? T:oceankeyakv2 0.69 0.70 0.71 T:deoxysneq256128v1 0.74 0.75 0.76 T:morus640128v2 0.74 0.75 0.76 T:morus640128v1 0.81 0.81 0.81 T:deoxysii128v141 0.82 0.82 0.83 T:colm0v1 0.91 0.92 0.93 T:deoxysii256v141 0.97 0.97 0.99 T:deoxyseq128128v1 0.96 0.99 1.00 T:aes128otrpv3 1.02 1.03 1.05 T:lunarkeyakv2 1.07 1.07 1.08 T:deoxyseq256128v1 1.18 1.20 1.20 T:seakeyakv2 1.23 1.25 1.26 T:aes256otrpv3 1.49 1.49 1.50 T:aes128otrsv3 1.51 1.51 1.52 T:norx6444v3 2.06 2.06 2.06 T:aes256otrsv3 2.10 2.12 2.13 T:norx6441v3 2.11 2.13 2.14 T:norx6441v2 2.53 2.55 2.56 T:norx6441v1 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n12t8clocv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128n12t8silcv3 2.56 2.57 2.57 T:aes128n12t8silcv2 2.86 2.87 2.88 T:lakekeyakv2 2.89 2.91 2.92 T:norx6444v2 3.11 3.12 3.14 T:lakekeyakv1 3.15 3.15 3.20 T:norx6461v3 3.16 3.19 3.21 T:norx6461v2 3.55 3.55 3.56 T:norx3241v2 3.55 3.56 3.56 T:norx3241v3 3.62 3.64 3.65 T:norx6444v1 3.82 3.83 3.84 T:norx6461v1 4.27 4.28 4.28 T:norx3241v1 4.40 4.41 4.42 T:ketjemajorv2 5.13 5.13 5.13 T:acorn128v3 5.13 5.13 5.13 T:acorn128v2 5.27 5.27 5.27 T:ascon128av11 5.28 5.28 5.28 ascon128av12 5.30 5.30 5.31 T:norx3261v2 5.30 5.31 5.32 T:norx3261v3 5.34 5.35 5.35 T:ascon96v1 5.49 5.53 5.57 T:aesjambuv1 5.56 5.56 5.57 T:riverkeyakv2 6.44 6.48 6.50 T:ketjeminorv2 7.44 7.45 7.46 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.81 7.81 7.82 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 12.45 12.52 12.56 T:aes128otrpv1 12.51 12.54 12.56 T:aes128otrpv2 12.69 12.71 12.74 T:aes128otrsv2 12.70 12.72 12.74 T:aes128otrsv1 16.48 16.51 16.54 T:aes256otrpv2 16.49 16.58 16.73 T:aes256otrpv1 16.62 16.65 16.68 T:aes256otrsv2 16.76 16.79 16.82 T:aes256otrsv1 17.25 17.27 17.32 T:aes128n8clocv1 17.29 17.31 17.45 T:aes128n12clocv1 18.94 19.01 19.06 T:twine80n6t4clocv3 19.44 19.51 19.54 T:proest256otrv1 19.68 19.71 20.08 T:twine80n6t4clocv2 21.91 21.97 22.05 T:ketjesrv2 24.77 24.79 24.87 T:aeadaes128ocbtaglen96v1 24.77 24.79 24.81 T:aeadaes128ocbtaglen64v1 25.06 25.14 25.23 T:ketjesrv1 29.45 29.49 29.65 T:aeadaes192ocbtaglen96v1 29.50 29.58 29.63 T:aeadaes192ocbtaglen64v1 34.30 34.32 34.50 T:aeadaes256ocbtaglen96v1 34.29 34.36 34.73 T:aeadaes256ocbtaglen64v1 41.53 41.55 41.58 T:ketjejrv1 42.34 42.37 42.40 T:proest128otrv1 42.65 42.67 42.70 T:colm127v1 66.61 66.68 66.78 T:ketjejrv2 67.37 67.50 67.62 T:present80n6t4silcv3 75.19 75.26 75.41 T:deoxysneq128128v13 93.25 93.41 93.87 T:aezv1 96.09 96.15 96.22 T:deoxyseq128128v13 97.67 101.44 101.55 T:led80n6t4silcv3 118.39 118.44 118.52 T:deoxysneq256128v13 159.77 159.92 160.25 T:deoxyseq256128v13 524.94 531.86 560.44 T:acorn128 2268.59 2284.37 2285.12 T:led80n6t4silcv2 2292.21 2293.32 2294.12 T:led80n6silcv1 2710.78 2712.88 2713.83 T:present80n6t4silcv2 2711.18 2713.26 2714.40 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.13 0.13 0.13 T:aezv3 0.14 0.14 0.14 T:aezv5 0.13 0.14 0.14 T:aezv4 0.17 0.17 0.18 T:aegis128l 0.13? 0.17? 0.21? T:aeadaes128ocbtaglen128v1 0.20 0.20 0.20 aegis128l 0.19 0.20 0.21 T:tiaoxinv2 0.21 0.22 0.22 T:tiaoxinv1 0.17? 0.25? 0.33? T:aeadaes256ocbtaglen128v1 0.31 0.31 0.31 T:aegis128 0.33 0.34 0.34 aegis256 0.32? 0.39? 0.43? T:aeadaes192ocbtaglen128v1 0.41 0.42 0.42 T:aes128otrcv3 0.43 0.44 0.44 aes256gcmv1 0.48 0.49 0.50 T:morus1280128v2 0.48 0.49 0.50 T:morus1280128v1 0.48 0.49 0.50 T:morus1280256v1 0.48 0.49 0.50 T:morus1280256v2 0.55 0.55 0.55 T:aes256otrcv3 0.56 0.57 0.57 T:deoxysi128v141 0.58 0.58 0.59 T:aes128gcmv1 0.62 0.62 0.63 T:deoxysi256v141 0.63 0.63 0.64 T:deoxysneq128128v1 0.54? 0.67? 0.72? T:oceankeyakv2 0.69 0.70 0.71 T:deoxysneq256128v1 0.73 0.74 0.76 T:morus640128v2 0.75 0.75 0.76 T:morus640128v1 0.81 0.81 0.81 T:deoxysii128v141 0.82 0.82 0.83 T:colm0v1 0.91 0.91 0.92 T:deoxysii256v141 0.97 0.98 0.98 T:deoxyseq128128v1 0.97 0.99 1.00 T:aes128otrpv3 1.04 1.06 1.07 T:lunarkeyakv2 1.07 1.07 1.09 T:deoxyseq256128v1 1.14 1.20 1.21 T:seakeyakv2 1.24 1.25 1.27 T:aes256otrpv3 1.49 1.49 1.50 T:aes128otrsv3 1.50 1.51 1.52 T:norx6444v3 2.06 2.06 2.06 T:aes256otrsv3 2.10 2.11 2.11 T:norx6441v2 2.10 2.11 2.12 T:norx6441v3 2.54 2.56 2.57 T:norx6441v1 2.56 2.56 2.56 T:aes128n12t8clocv3 2.56 2.56 2.57 T:aes128n8t8silcv2 2.56 2.56 2.56 T:aes128n8t8clocv2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.56 T:aes128n12t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.87 2.88 2.92 T:lakekeyakv2 2.90 2.93 2.94 T:norx6444v2 3.11 3.13 3.14 T:lakekeyakv1 3.16 3.19 3.20 T:norx6461v3 3.16 3.19 3.21 T:norx6461v2 3.55 3.55 3.56 T:norx3241v2 3.56 3.56 3.57 T:norx3241v3 3.63 3.64 3.65 T:norx6444v1 3.81 3.82 3.83 T:norx6461v1 4.31 4.31 4.32 T:norx3241v1 4.40 4.42 4.46 T:ketjemajorv2 5.13 5.13 5.13 T:acorn128v3 5.13 5.13 5.13 T:acorn128v2 5.27 5.27 5.27 T:ascon128av11 5.28 5.28 5.28 ascon128av12 5.29 5.30 5.32 T:norx3261v3 5.30 5.31 5.31 T:norx3261v2 5.34 5.34 5.35 T:ascon96v1 5.49 5.54 5.56 T:aesjambuv1 5.57 5.58 5.59 T:riverkeyakv2 6.46 6.48 6.51 T:ketjeminorv2 7.44 7.45 7.46 T:norx3261v1 7.62 7.62 7.62 ascon128v12 7.81 7.81 7.81 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 12.51 12.53 12.56 T:aes128otrpv2 12.51 12.54 12.59 T:aes128otrpv1 12.71 12.73 12.76 T:aes128otrsv2 12.75 12.78 12.82 T:aes128otrsv1 16.46 16.50 16.56 T:aes256otrpv2 16.52 16.61 16.75 T:aes256otrpv1 16.66 16.67 16.69 T:aes256otrsv2 16.76 16.81 16.85 T:aes256otrsv1 17.26 17.27 17.30 T:aes128n8clocv1 17.28 17.31 17.44 T:aes128n12clocv1 18.93 19.00 19.08 T:twine80n6t4clocv3 19.29 19.43 19.55 T:proest256otrv1 19.68 19.72 20.12 T:twine80n6t4clocv2 21.95 22.00 22.06 T:ketjesrv2 24.74 24.80 24.81 T:aeadaes128ocbtaglen64v1 24.78 24.81 24.86 T:aeadaes128ocbtaglen96v1 25.10 25.15 25.26 T:ketjesrv1 29.47 29.50 29.60 T:aeadaes192ocbtaglen96v1 29.56 29.65 29.66 T:aeadaes192ocbtaglen64v1 34.16 34.19 34.55 T:aeadaes256ocbtaglen64v1 34.35 34.48 34.52 T:aeadaes256ocbtaglen96v1 41.54 41.59 41.68 T:ketjejrv1 42.15 42.19 42.23 T:colm127v1 42.35 42.40 42.47 T:proest128otrv1 66.56 66.67 66.76 T:ketjejrv2 67.35 67.45 67.55 T:present80n6t4silcv3 75.11 75.23 75.26 T:deoxysneq128128v13 93.15 93.36 93.68 T:aezv1 96.21 96.27 96.50 T:deoxyseq128128v13 97.13 97.48 104.84 T:led80n6t4silcv3 118.50 118.63 118.80 T:deoxysneq256128v13 159.66 159.75 159.86 T:deoxyseq256128v13 484.67? 495.40? 576.51? T:acorn128 2261.62 2280.98 2282.75 T:led80n6t4silcv2 2292.66 2293.56 2295.29 T:led80n6silcv1 2710.30 2711.91 2714.26 T:present80n6t4silcv2 2713.35 2714.48 2716.49 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv2 0.10 0.11 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13? 0.14? 0.15? T:aezv3 0.14? 0.15? 0.16? T:aezv4 0.15 0.16 0.16 T:aegis128l 0.16 0.16 0.16 aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.10? 0.24? 0.32? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.32 T:aegis128 0.31 0.32 0.34 aegis256 0.29? 0.38? 0.46? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.41 aes256gcmv1 0.40 0.41 0.41 T:aes128gcmv1 0.42 0.42 0.43 T:aes128otrcv3 0.45 0.47 0.49 T:morus1280128v2 0.46 0.47 0.48 T:morus1280256v2 0.45 0.48 0.50 T:morus1280256v1 0.47 0.49 0.50 T:oceankeyakv2 0.46 0.50 0.50 T:morus1280128v1 0.49 0.50 0.51 T:colm0v1 0.53 0.54 0.55 T:deoxysii128v141 0.54 0.55 0.56 T:deoxysi128v141 0.54 0.55 0.56 T:aes256otrcv3 0.58 0.59 0.60 T:deoxysi256v141 0.59 0.60 0.61 T:deoxysii256v141 0.60 0.61 0.62 T:deoxysneq128128v1 0.61 0.62 0.63 T:deoxyseq128128v1 0.60? 0.63? 0.67? T:lunarkeyakv2 0.69 0.70 0.71 T:deoxyseq256128v1 0.69 0.70 0.71 T:deoxysneq256128v1 0.71 0.73 0.74 T:morus640128v1 0.70 0.73 0.76 T:morus640128v2 1.00 1.01 1.03 T:aes128otrpv3 1.09 1.10 1.12 T:seakeyakv2 1.19 1.19 1.20 T:aes256otrpv3 2.02 2.03 2.04 T:norx6441v3 2.04 2.09 2.11 T:norx6441v2 2.13 2.14 2.16 T:norx6444v3 2.46 2.51 2.53 T:norx6441v1 2.55 2.55 2.57 T:aes128n12t8silcv2 2.55 2.56 2.56 T:aes128n12t8clocv2 2.55 2.56 2.58 T:aes128otrsv3 2.56 2.56 2.57 T:aes128n12t8silcv3 2.56 2.56 2.58 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv3 2.56 2.57 2.57 T:aes128n8t8clocv2 2.59 2.60 2.69 T:lakekeyakv2 2.65 2.66 2.66 T:norx6444v2 2.76 2.80 2.82 T:lakekeyakv1 3.14 3.15 3.18 T:norx6461v2 3.03 3.16 3.18 T:norx6461v3 3.45 3.46 3.46 T:norx6444v1 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.52 T:norx3241v3 3.56 3.56 3.57 T:aes256otrsv3 3.78 3.80 3.81 T:norx6461v1 3.88 3.91 3.94 T:ketjemajorv2 4.22 4.23 4.23 T:norx3241v1 5.00 5.00 5.00 T:acorn128v3 5.17 5.17 5.17 T:acorn128v2 5.19 5.19 5.19 T:ascon96v1 5.18 5.20 5.21 T:riverkeyakv2 5.25 5.25 5.25 ascon128av12 5.25 5.26 5.26 T:ascon128av11 5.25 5.27 5.28 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v2 5.27 5.27 5.27 T:norx3261v3 5.79 5.85 5.90 T:ketjeminorv2 7.50 7.50 7.50 ascon128v12 7.52 7.53 7.53 T:norx3261v1 7.87 7.88 7.88 T:ascon128v11 7.87 7.88 7.88 T:ascon128v1 11.60 11.63 11.65 T:aes128n8clocv1 11.61 11.64 11.68 T:aes128n12clocv1 11.68 11.69 11.73 T:aes128otrpv1 11.68 11.72 11.74 T:aes128otrpv2 12.05 12.08 12.11 T:aes128otrsv2 12.07 12.09 12.12 T:aes128otrsv1 15.62 15.67 15.82 T:aes256otrpv2 15.70 15.80 16.12 T:aes256otrpv1 15.90 15.94 16.04 T:aes256otrsv1 16.03 16.05 16.06 T:aes256otrsv2 18.83 18.86 18.90 T:twine80n6t4clocv3 19.47 19.55 19.85 T:twine80n6t4clocv2 20.22 20.26 20.30 T:proest256otrv1 20.47 20.52 20.58 T:aeadaes128ocbtaglen64v1 20.48 20.56 20.90 T:aeadaes128ocbtaglen96v1 21.10 21.17 21.26 T:ketjesrv2 22.29 22.38 22.46 T:ketjesrv1 22.63 22.71 22.73 T:colm127v1 24.23 24.36 24.39 T:aeadaes192ocbtaglen96v1 24.31 24.36 24.39 T:aeadaes192ocbtaglen64v1 28.02 28.10 28.32 T:aeadaes256ocbtaglen64v1 28.08 28.11 28.29 T:aeadaes256ocbtaglen96v1 39.57 39.61 39.66 T:ketjejrv1 42.07 42.34 42.37 T:proest128otrv1 45.59 45.75 46.04 T:aezv1 63.58 63.67 63.73 T:deoxyseq128128v13 63.83 63.95 64.08 T:deoxysneq128128v13 65.00 65.13 65.29 T:ketjejrv2 66.78 66.82 66.88 T:present80n6t4silcv3 96.95 96.99 97.03 T:led80n6t4silcv3 105.61 105.79 105.93 T:deoxyseq256128v13 105.75 105.85 106.03 T:deoxysneq256128v13 476.41? 480.79? 577.77? T:acorn128 1507.56 1513.09 1522.04 T:led80n6t4silcv2 1525.26 1530.34 1531.81 T:led80n6silcv1 1805.60 1806.45 1807.04 T:present80n6t4silcv2 1806.98 1807.84 1808.69 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.10 0.10 0.11 T:tiaoxinv1 0.10 0.10 0.11 T:tiaoxinv2 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.15 0.15 0.16 T:aezv4 0.16 0.16 0.16 aegis128l 0.15 0.16 0.16 T:aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.10? 0.24? 0.39? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.32 aegis256 0.30? 0.37? 0.46? T:aeadaes192ocbtaglen128v1 0.39 0.40 0.40 T:aes128gcmv1 0.39 0.40 0.41 aes256gcmv1 0.41 0.42 0.42 T:aes128otrcv3 0.46 0.48 0.49 T:morus1280128v2 0.46 0.48 0.49 T:morus1280256v1 0.45 0.48 0.49 T:morus1280256v2 0.45 0.48 0.49 T:morus1280128v1 0.48 0.49 0.51 T:oceankeyakv2 0.49 0.51 0.51 T:colm0v1 0.52 0.53 0.54 T:deoxysi128v141 0.54 0.54 0.55 T:deoxysii128v141 0.55 0.55 0.55 T:aes256otrcv3 0.59 0.60 0.60 T:deoxysi256v141 0.61 0.61 0.62 T:deoxysii256v141 0.61 0.62 0.62 T:deoxysneq128128v1 0.61 0.62 0.63 T:deoxyseq128128v1 0.61 0.64 0.67 T:lunarkeyakv2 0.69 0.70 0.71 T:deoxysneq256128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.70 0.72 0.74 T:morus640128v2 0.72 0.73 0.73 T:morus640128v1 0.99 1.01 1.04 T:aes128otrpv3 1.10 1.11 1.13 T:seakeyakv2 1.18 1.18 1.19 T:aes256otrpv3 2.03 2.03 2.05 T:norx6441v2 2.04 2.05 2.09 T:norx6441v3 2.14 2.15 2.16 T:norx6444v3 2.44 2.46 2.52 T:norx6441v1 2.56 2.56 2.57 T:norx6444v2 2.56 2.56 2.56 T:aes128n12t8silcv3 2.56 2.56 2.57 T:aes128n12t8silcv2 2.54 2.56 2.56 T:aes128otrsv3 2.56 2.56 2.56 T:aes128n8t8silcv2 2.56 2.56 2.57 T:aes128n12t8clocv2 2.56 2.57 2.58 T:aes128n8t8clocv2 2.56 2.57 2.57 T:aes128n12t8clocv3 2.59 2.60 2.69 T:lakekeyakv2 2.75 2.78 2.81 T:lakekeyakv1 3.01 3.03 3.14 T:norx6461v3 3.03 3.15 3.17 T:norx6461v2 3.52 3.52 3.52 T:norx3241v3 3.52 3.52 3.52 T:norx3241v2 3.56 3.56 3.56 T:aes256otrsv3 3.56 3.56 3.58 T:norx6444v1 3.65 3.78 3.81 T:norx6461v1 3.89 3.93 3.96 T:ketjemajorv2 4.22 4.23 4.23 T:norx3241v1 5.00 5.00 5.00 T:acorn128v2 5.00 5.00 5.00 T:acorn128v3 5.19 5.19 5.19 T:ascon96v1 5.18 5.21 5.29 T:riverkeyakv2 5.25 5.26 5.26 ascon128av12 5.25 5.27 5.28 T:aesjambuv1 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.28 5.28 5.28 T:ascon128av11 5.79 5.86 5.92 T:ketjeminorv2 7.52 7.53 7.53 T:norx3261v1 7.62 7.63 7.63 ascon128v12 7.75 7.75 7.76 T:ascon128v11 7.88 7.88 7.88 T:ascon128v1 11.61 11.63 11.65 T:aes128n8clocv1 11.60 11.64 11.67 T:aes128n12clocv1 11.67 11.70 11.73 T:aes128otrpv2 11.71 11.74 11.76 T:aes128otrpv1 12.05 12.09 12.11 T:aes128otrsv2 12.08 12.11 12.14 T:aes128otrsv1 15.65 15.70 15.80 T:aes256otrpv2 15.72 15.82 16.12 T:aes256otrpv1 15.86 15.90 16.00 T:aes256otrsv1 16.03 16.05 16.08 T:aes256otrsv2 18.83 18.88 18.92 T:twine80n6t4clocv3 19.47 19.77 20.03 T:twine80n6t4clocv2 20.25 20.29 20.43 T:proest256otrv1 20.34 20.38 20.61 T:aeadaes128ocbtaglen64v1 20.37 20.54 20.57 T:aeadaes128ocbtaglen96v1 21.07 21.16 21.23 T:ketjesrv2 22.26 22.41 22.54 T:ketjesrv1 22.63 22.68 22.72 T:colm127v1 24.28 24.34 24.38 T:aeadaes192ocbtaglen96v1 24.38 24.41 24.57 T:aeadaes192ocbtaglen64v1 28.04 28.08 28.25 T:aeadaes256ocbtaglen64v1 28.09 28.23 28.58 T:aeadaes256ocbtaglen96v1 39.54 39.61 39.72 T:ketjejrv1 42.03 42.07 42.12 T:proest128otrv1 45.59 45.74 45.97 T:aezv1 63.63 63.68 63.74 T:deoxyseq128128v13 63.82 63.91 64.00 T:deoxysneq128128v13 64.93 65.04 65.20 T:ketjejrv2 66.78 66.81 66.87 T:present80n6t4silcv3 96.60 96.98 97.03 T:led80n6t4silcv3 105.78 105.93 106.70 T:deoxyseq256128v13 105.96 106.37 106.99 T:deoxysneq256128v13 461.24? 508.13? 541.25? T:acorn128 1502.93 1506.13 1521.62 T:led80n6t4silcv2 1527.57 1529.03 1531.06 T:led80n6silcv1 1806.19 1806.91 1808.08 T:present80n6t4silcv2 1807.03 1807.94 1808.64 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10 0.10 0.10 T:tiaoxinv2 0.10 0.10 0.11 T:tiaoxinv1 0.13 0.13 0.14 T:aezv5 0.13 0.14 0.14 T:aezv3 0.15 0.15 0.16 T:aezv4 0.15 0.16 0.16 aegis128l 0.15 0.16 0.16 T:aegis128l 0.09? 0.17? 0.25? T:aeadaes128ocbtaglen128v1 0.16? 0.24? 0.38? T:aeadaes256ocbtaglen128v1 0.30 0.31 0.31 T:aegis128 0.31 0.31 0.31 aegis256 0.31? 0.37? 0.45? T:aeadaes192ocbtaglen128v1 0.40 0.40 0.40 T:aes128gcmv1 0.39 0.40 0.41 aes256gcmv1 0.41 0.42 0.42 T:aes128otrcv3 0.45 0.47 0.49 T:morus1280256v2 0.45 0.48 0.50 T:morus1280128v2 0.45 0.48 0.50 T:morus1280256v1 0.46 0.48 0.49 T:morus1280128v1 0.48 0.49 0.51 T:oceankeyakv2 0.49 0.51 0.51 T:colm0v1 0.53 0.53 0.54 T:deoxysi128v141 0.54 0.54 0.55 T:deoxysii128v141 0.55 0.55 0.55 T:aes256otrcv3 0.59 0.59 0.60 T:deoxysi256v141 0.61 0.61 0.62 T:deoxysii256v141 0.60 0.61 0.62 T:deoxysneq128128v1 0.61 0.62 0.63 T:deoxyseq128128v1 0.60 0.64 0.66 T:lunarkeyakv2 0.69 0.70 0.71 T:deoxysneq256128v1 0.69 0.70 0.71 T:deoxyseq256128v1 0.71 0.72 0.74 T:morus640128v1 0.71 0.73 0.73 T:morus640128v2 0.98 1.01 1.04 T:aes128otrpv3 1.09 1.11 1.12 T:seakeyakv2 1.19 1.20 1.23 T:aes256otrpv3 2.05 2.09 2.11 T:norx6441v3 2.04 2.09 2.12 T:norx6441v2 2.14 2.16 2.16 T:norx6444v3 2.45 2.51 2.54 T:norx6441v1 2.56 2.56 2.58 T:norx6444v2 2.55 2.56 2.57 T:aes128n12t8clocv2 2.54 2.56 2.56 T:aes128otrsv3 2.55 2.56 2.57 T:aes128n8t8clocv2 2.56 2.56 2.57 T:aes128n8t8silcv2 2.55 2.56 2.57 T:aes128n12t8clocv3 2.57 2.57 2.57 T:aes128n12t8silcv2 2.57 2.57 2.57 T:aes128n12t8silcv3 2.59 2.60 2.69 T:lakekeyakv2 2.79 2.84 2.87 T:lakekeyakv1 3.03 3.15 3.17 T:norx6461v2 3.04 3.15 3.18 T:norx6461v3 3.52 3.52 3.52 T:norx3241v2 3.52 3.52 3.53 T:norx3241v3 3.56 3.56 3.56 T:aes256otrsv3 3.56 3.57 3.59 T:norx6444v1 3.78 3.80 3.81 T:norx6461v1 3.91 3.95 3.96 T:ketjemajorv2 4.22 4.23 4.24 T:norx3241v1 5.00 5.00 5.00 T:acorn128v2 5.00 5.00 5.00 T:acorn128v3 5.19 5.19 5.19 T:ascon96v1 5.18 5.20 5.21 T:riverkeyakv2 5.26 5.26 5.26 ascon128av12 5.27 5.27 5.27 T:norx3261v3 5.27 5.27 5.27 T:norx3261v2 5.26 5.27 5.28 T:aesjambuv1 5.28 5.28 5.28 T:ascon128av11 5.80 5.86 5.91 T:ketjeminorv2 7.52 7.53 7.53 T:norx3261v1 7.62 7.62 7.63 ascon128v12 7.75 7.75 7.76 T:ascon128v11 7.88 7.88 7.88 T:ascon128v1 11.61 11.63 11.66 T:aes128n8clocv1 11.62 11.64 11.68 T:aes128n12clocv1 11.67 11.72 11.75 T:aes128otrpv1 11.69 11.72 11.75 T:aes128otrpv2 12.04 12.09 12.12 T:aes128otrsv2 12.06 12.11 12.13 T:aes128otrsv1 15.66 15.71 15.83 T:aes256otrpv2 15.71 15.79 16.10 T:aes256otrpv1 15.88 15.92 16.01 T:aes256otrsv1 16.02 16.05 16.07 T:aes256otrsv2 18.82 18.87 18.93 T:twine80n6t4clocv3 19.47 19.48 19.67 T:twine80n6t4clocv2 20.22 20.27 20.38 T:proest256otrv1 20.34 20.37 20.56 T:aeadaes128ocbtaglen64v1 20.48 20.51 20.54 T:aeadaes128ocbtaglen96v1 21.10 21.17 21.24 T:ketjesrv2 22.28 22.39 22.55 T:ketjesrv1 22.65 22.72 22.74 T:colm127v1 24.18 24.19 24.37 T:aeadaes192ocbtaglen64v1 24.28 24.33 24.36 T:aeadaes192ocbtaglen96v1 28.04 28.07 28.11 T:aeadaes256ocbtaglen64v1 28.21 28.29 28.56 T:aeadaes256ocbtaglen96v1 39.55 39.59 39.64 T:ketjejrv1 42.01 42.07 42.12 T:proest128otrv1 45.75 46.03 46.16 T:aezv1 63.60 63.66 63.72 T:deoxyseq128128v13 63.82 63.92 64.22 T:deoxysneq128128v13 65.02 65.14 65.31 T:ketjejrv2 66.77 66.84 66.88 T:present80n6t4silcv3 96.98 98.07 103.08 T:led80n6t4silcv3 105.49 105.61 107.35 T:deoxyseq256128v13 105.89 106.01 106.63 T:deoxysneq256128v13 452.44? 460.49? 572.33? T:acorn128 1507.20 1511.06 1523.56 T:led80n6t4silcv2 1526.66 1528.23 1530.39 T:led80n6silcv1 1807.06 1807.89 1808.70 T:present80n6silcv1 1807.03 1807.99 1810.55 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.16 0.17 0.17 T:tiaoxinv2 0.16 0.17 0.17 T:tiaoxinv1 0.20 0.20 0.20 T:aegis128l 0.20 0.21 0.21 aegis128l 0.28? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv5 0.30 0.30 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 aegis256 0.37? 0.38? 0.44? T:aeadaes256ocbtaglen128v1 0.49? 0.50? 0.59? T:aeadaes192ocbtaglen128v1 0.53 0.54 0.54 T:aes128otrcv3 0.57 0.57 0.58 aes256gcmv1 0.59 0.59 0.60 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v1 0.59 0.60 0.62 T:morus1280128v2 0.59 0.60 0.62 T:morus1280256v2 0.66 0.66 0.67 T:deoxysi128v141 0.68 0.68 0.69 T:aes128gcmv1 0.71 0.72 0.72 T:aes256otrcv3 0.73 0.73 0.74 T:deoxysneq128128v1 0.76 0.77 0.77 T:deoxysi256v141 0.81 0.82 0.83 T:morus640128v1 0.82 0.83 0.84 T:deoxysneq256128v1 0.82 0.83 0.84 T:morus640128v2 0.92 0.92 0.93 T:colm0v1 0.99 0.99 1.00 T:deoxysii128v141 1.07 1.07 1.09 T:deoxyseq128128v1 1.09 1.10 1.12 T:aes128otrpv3 1.13 1.14 1.14 T:deoxysii256v141 1.22 1.22 1.24 T:deoxyseq256128v1 1.33 1.34 1.37 T:oceankeyakv2 1.38 1.39 1.40 T:aes256otrpv3 1.53 1.54 1.55 T:aes128otrsv3 1.72 1.73 1.74 T:seakeyakv2 2.08 2.09 2.10 T:norx6444v3 2.13 2.13 2.14 T:aes256otrsv3 2.44 2.45 2.47 T:lunarkeyakv2 2.46 2.46 2.47 T:norx6441v2 2.47 2.48 2.49 T:norx6441v3 2.61 2.61 2.61 T:aes128n8t8silcv2 2.61 2.61 2.61 T:aes128n12t8clocv3 2.61 2.61 2.61 T:aes128n8t8clocv2 2.61 2.61 2.61 T:aes128n12t8clocv2 2.61 2.61 2.61 T:aes128n12t8silcv3 2.61 2.61 2.61 T:aes128n12t8silcv2 2.85 2.87 2.88 T:norx6441v1 3.09 3.09 3.11 T:lakekeyakv2 3.63 3.66 3.70 T:norx6461v2 3.65 3.69 3.71 T:norx6461v3 3.68 3.71 3.72 T:lakekeyakv1 3.79 3.79 3.80 T:norx3241v2 3.79 3.80 3.80 T:norx3241v3 4.23 4.23 4.28 T:norx6461v1 4.30 4.31 4.33 T:norx6444v2 4.45 4.45 4.46 T:norx3241v1 5.05 5.05 5.05 T:norx6444v1 5.31 5.31 5.32 T:aesjambuv1 5.41 5.41 5.42 ascon128av12 5.47 5.47 5.47 T:ascon128av11 5.50 5.50 5.50 T:ascon96v1 5.68 5.68 5.68 T:norx3261v2 5.68 5.68 5.68 T:norx3261v3 5.77 5.78 5.80 T:ketjemajorv2 5.80 5.80 5.80 T:riverkeyakv2 5.81 5.81 5.82 T:acorn128v3 5.99 5.99 6.00 T:acorn128v2 7.15 7.18 7.21 T:ketjeminorv2 7.74 7.74 7.75 ascon128v12 7.92 7.92 7.92 T:norx3261v1 8.18 8.18 8.18 T:ascon128v11 8.18 8.18 8.18 T:ascon128v1 12.67 12.70 12.75 T:aes128otrpv1 12.69 12.71 12.73 T:aes128otrpv2 12.83 12.84 12.86 T:aes128otrsv2 12.84 12.85 12.86 T:aes128otrsv1 16.72 16.75 16.80 T:aes256otrpv2 16.76 16.85 16.99 T:aes256otrpv1 16.86 16.87 16.89 T:aes256otrsv2 16.82 16.89 16.94 T:aes256otrsv1 16.91 16.92 17.03 T:aes128n12clocv1 17.00 17.02 17.03 T:aes128n8clocv1 19.32 19.42 19.44 T:twine80n6t4clocv3 20.07 20.40 20.47 T:twine80n6t4clocv2 20.68 20.82 20.85 T:proest256otrv1 21.38 21.39 21.40 T:aeadaes128ocbtaglen64v1 21.37 21.42 21.56 T:aeadaes128ocbtaglen96v1 25.21 25.24 25.44 T:aeadaes192ocbtaglen64v1 25.23 25.27 25.31 T:ketjesrv1 25.38 25.39 25.53 T:aeadaes192ocbtaglen96v1 26.50 26.56 26.63 T:ketjesrv2 29.22 29.24 29.42 T:aeadaes256ocbtaglen64v1 29.29 29.41 29.46 T:aeadaes256ocbtaglen96v1 35.19 35.20 35.22 T:colm127v1 41.43 41.48 41.50 T:ketjejrv1 44.97 45.06 45.09 T:proest128otrv1 64.65 64.68 64.85 T:deoxysneq128128v13 68.15 68.21 68.28 T:present80n6t4silcv3 68.20 68.37 69.41 T:ketjejrv2 92.18 92.29 92.51 T:aezv1 97.65 98.02 98.14 T:deoxyseq128128v13 99.34 103.28 103.82 T:led80n6t4silcv3 106.81 106.88 107.02 T:deoxysneq256128v13 160.88 161.13 161.38 T:deoxyseq256128v13 555.42? 588.65? 735.46? T:acorn128 2282.63 2294.26 2296.10 T:led80n6t4silcv2 2306.26 2306.87 2307.47 T:led80n6silcv1 2726.17 2728.41 2729.04 T:present80n6t4silcv2 2727.80 2729.88 2731.55 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.20 0.21 0.21 T:aegis128l 0.21 0.21 0.21 aegis128l 0.24 0.24 0.26 T:tiaoxinv2 0.25 0.26 0.27 T:tiaoxinv1 0.28? 0.28? 0.35? T:aeadaes128ocbtaglen128v1 0.30 0.30 0.30 T:aezv3 0.30 0.30 0.31 T:aezv5 0.30 0.31 0.31 T:aezv4 0.34 0.34 0.34 T:aegis128 0.37 0.37 0.37 aegis256 0.38? 0.38? 0.45? T:aeadaes256ocbtaglen128v1 0.48? 0.48? 0.54? T:aeadaes192ocbtaglen128v1 0.52 0.52 0.53 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.60 0.61 0.62 T:morus1280128v1 0.60 0.61 0.61 T:morus1280256v1 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v2 0.67 0.67 0.69 T:aes128gcmv1 0.73 0.74 0.74 T:aes256otrcv3 0.76 0.76 0.77 T:deoxysi128v141 0.81 0.81 0.82 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.83 0.84 0.85 T:morus640128v2 0.86 0.86 0.87 T:deoxysi256v141 0.86 0.87 0.87 T:deoxysneq256128v1 0.92 0.92 0.93 T:colm0v1 1.01 1.01 1.02 T:deoxysii128v141 1.10 1.12 1.13 T:aes128otrpv3 1.17 1.18 1.19 T:deoxyseq128128v1 1.18 1.19 1.20 T:deoxysii256v141 1.26 1.27 1.29 T:deoxyseq256128v1 1.33 1.34 1.34 T:oceankeyakv2 1.41 1.43 1.44 T:aes256otrpv3 1.54 1.55 1.55 T:aes128otrsv3 1.75 1.75 1.76 T:seakeyakv2 2.09 2.10 2.11 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.45 2.45 2.45 T:norx6441v3 2.46 2.48 2.49 T:norx6441v2 2.52 2.53 2.55 T:lunarkeyakv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.58 2.58 2.58 T:aes128n12t8clocv2 2.58 2.58 2.58 T:aes128n8t8clocv2 2.59 2.59 2.59 T:aes128n8t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv2 2.59 2.59 2.60 T:aes128n12t8silcv3 2.88 2.88 2.88 T:norx6441v1 3.14 3.15 3.20 T:lakekeyakv2 3.68 3.69 3.71 T:norx6461v3 3.71 3.72 3.72 T:norx6461v2 3.72 3.73 3.77 T:lakekeyakv1 3.84 3.84 3.85 T:norx3241v3 3.84 3.84 3.85 T:norx3241v2 4.24 4.27 4.29 T:norx6444v2 4.29 4.31 4.31 T:norx6461v1 4.53 4.53 4.54 T:norx3241v1 5.11 5.12 5.14 T:norx6444v1 5.39 5.39 5.39 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.47 5.47 5.47 T:ascon96v1 5.54 5.57 5.60 T:aesjambuv1 5.68 5.70 5.73 T:ketjemajorv2 5.71 5.72 5.74 T:norx3261v3 5.72 5.72 5.72 T:norx3261v2 5.83 5.84 5.85 T:riverkeyakv2 5.94 5.94 5.94 T:acorn128v3 5.97 5.97 5.97 T:acorn128v2 7.39 7.41 7.43 T:ketjeminorv2 7.74 7.74 7.74 ascon128v12 7.85 7.85 7.85 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.99 7.99 7.99 T:ascon128v1 12.86 12.89 12.90 T:aes128otrpv2 12.88 12.90 12.99 T:aes128otrpv1 13.01 13.03 13.05 T:aes128otrsv2 13.02 13.03 13.06 T:aes128otrsv1 16.91 16.95 16.98 T:aes256otrpv2 16.94 17.00 17.15 T:aes256otrpv1 17.06 17.07 17.08 T:aes256otrsv2 17.17 17.22 17.24 T:aes256otrsv1 17.45 17.47 17.48 T:aes128n8clocv1 17.49 17.51 17.64 T:aes128n12clocv1 19.24 19.32 19.34 T:twine80n6t4clocv3 20.20 20.36 20.47 T:twine80n6t4clocv2 21.19 21.20 21.25 T:proest256otrv1 22.82 22.85 22.91 T:ketjesrv2 25.47 25.50 25.54 T:aeadaes128ocbtaglen96v1 25.49 25.50 25.50 T:aeadaes128ocbtaglen64v1 25.81 25.88 25.93 T:ketjesrv1 30.22 30.25 30.37 T:aeadaes192ocbtaglen96v1 30.32 30.36 30.37 T:aeadaes192ocbtaglen64v1 35.21 35.24 35.33 T:aeadaes256ocbtaglen64v1 35.26 35.38 35.49 T:aeadaes256ocbtaglen96v1 42.12 42.15 42.20 T:ketjejrv1 43.35 43.42 43.43 T:colm127v1 44.17 44.19 44.21 T:proest128otrv1 67.58 67.65 67.73 T:ketjejrv2 68.15 68.19 68.28 T:present80n6t4silcv3 75.49 75.53 75.69 T:deoxysneq128128v13 92.30 92.44 92.89 T:aezv1 97.21 97.24 97.26 T:deoxyseq128128v13 98.82 102.25 102.67 T:led80n6t4silcv3 118.93 119.04 119.13 T:deoxysneq256128v13 161.06 161.57 162.26 T:deoxyseq256128v13 568.17 596.08 621.69 T:acorn128 2278.98 2286.38 2295.16 T:led80n6t4silcv2 2301.86 2303.74 2304.36 T:led80n6silcv1 2726.06 2727.50 2731.06 T:present80n6t4silcv2 2727.95 2728.41 2728.90 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.18 0.18 0.18 T:aezv3 0.18 0.18 0.18 T:aezv5 0.18 0.18 0.19 T:aezv4 0.20 0.20 0.21 T:aegis128l 0.22 0.23 0.23 aegis128l 0.24 0.24 0.25 T:tiaoxinv2 0.25 0.26 0.27 T:tiaoxinv1 0.28? 0.28? 0.33? T:aeadaes128ocbtaglen128v1 0.34 0.34 0.34 T:aegis128 0.36 0.36 0.37 aegis256 0.38? 0.38? 0.47? T:aeadaes256ocbtaglen128v1 0.47? 0.48? 0.56? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.53 aes256gcmv1 0.55 0.55 0.56 T:aes128otrcv3 0.60 0.61 0.61 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v1 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.62 T:morus1280256v2 0.67 0.67 0.68 T:aes128gcmv1 0.73 0.74 0.74 T:aes256otrcv3 0.76 0.76 0.77 T:deoxysi128v141 0.80 0.80 0.81 T:deoxysneq128128v1 0.83 0.83 0.84 T:morus640128v1 0.83 0.83 0.85 T:morus640128v2 0.86 0.86 0.87 T:deoxysneq256128v1 0.86 0.86 0.86 T:deoxysi256v141 0.93 0.93 0.93 T:colm0v1 1.01 1.01 1.01 T:deoxysii128v141 1.11 1.12 1.13 T:aes128otrpv3 1.18 1.18 1.18 T:deoxyseq128128v1 1.19 1.19 1.19 T:deoxysii256v141 1.26 1.27 1.28 T:deoxyseq256128v1 1.35 1.35 1.35 T:oceankeyakv2 1.41 1.43 1.44 T:aes256otrpv3 1.54 1.55 1.55 T:aes128otrsv3 1.77 1.77 1.78 T:seakeyakv2 2.09 2.10 2.11 T:norx6444v3 2.14 2.14 2.14 T:aes256otrsv3 2.46 2.47 2.49 T:norx6441v2 2.47 2.48 2.49 T:norx6441v3 2.52 2.53 2.55 T:lunarkeyakv2 2.58 2.58 2.60 T:aes128n12t8silcv2 2.58 2.58 2.60 T:aes128n12t8silcv3 2.58 2.58 2.59 T:aes128n8t8silcv2 2.58 2.58 2.58 T:aes128n12t8clocv3 2.58 2.58 2.58 T:aes128n8t8clocv2 2.58 2.58 2.58 T:aes128n12t8clocv2 2.87 2.88 2.88 T:norx6441v1 3.14 3.15 3.16 T:lakekeyakv2 3.68 3.68 3.68 T:norx6461v2 3.67 3.68 3.71 T:norx6461v3 3.74 3.74 3.76 T:lakekeyakv1 3.84 3.84 3.84 T:norx3241v2 3.84 3.84 3.85 T:norx3241v3 4.27 4.29 4.30 T:norx6444v2 4.29 4.30 4.31 T:norx6461v1 4.53 4.54 4.55 T:norx3241v1 5.12 5.13 5.14 T:norx6444v1 5.39 5.39 5.39 T:ascon128av11 5.41 5.41 5.41 ascon128av12 5.47 5.47 5.47 T:ascon96v1 5.53 5.57 5.60 T:aesjambuv1 5.70 5.71 5.73 T:ketjemajorv2 5.71 5.72 5.74 T:norx3261v3 5.72 5.72 5.72 T:norx3261v2 5.87 5.88 5.89 T:riverkeyakv2 5.94 5.94 5.94 T:acorn128v3 5.97 5.97 5.97 T:acorn128v2 7.40 7.41 7.42 T:ketjeminorv2 7.74 7.74 7.74 ascon128v12 7.85 7.85 7.85 T:norx3261v1 7.93 7.93 7.93 T:ascon128v11 7.99 7.99 7.99 T:ascon128v1 12.88 12.90 12.92 T:aes128otrpv2 12.89 12.92 12.93 T:aes128otrpv1 13.04 13.06 13.07 T:aes128otrsv2 13.05 13.08 13.10 T:aes128otrsv1 16.91 16.94 16.98 T:aes256otrpv2 16.94 17.01 17.19 T:aes256otrpv1 17.06 17.07 17.09 T:aes256otrsv2 17.17 17.22 17.25 T:aes256otrsv1 17.45 17.47 17.49 T:aes128n8clocv1 17.49 17.52 17.64 T:aes128n12clocv1 19.24 19.30 19.34 T:twine80n6t4clocv3 20.04 20.08 20.44 T:twine80n6t4clocv2 21.18 21.19 21.20 T:proest256otrv1 22.84 22.88 22.94 T:ketjesrv2 25.46 25.49 25.58 T:aeadaes128ocbtaglen96v1 25.48 25.53 25.56 T:aeadaes128ocbtaglen64v1 25.79 25.86 25.96 T:ketjesrv1 30.25 30.27 30.42 T:aeadaes192ocbtaglen64v1 30.29 30.34 30.43 T:aeadaes192ocbtaglen96v1 35.25 35.30 35.53 T:aeadaes256ocbtaglen96v1 35.18 35.37 35.42 T:aeadaes256ocbtaglen64v1 42.16 42.17 42.18 T:ketjejrv1 43.36 43.48 43.54 T:colm127v1 44.18 44.21 44.22 T:proest128otrv1 67.61 67.69 67.77 T:ketjejrv2 68.20 68.24 68.29 T:present80n6t4silcv3 75.43 75.48 75.55 T:deoxysneq128128v13 92.34 92.47 92.61 T:aezv1 97.30 97.57 97.62 T:deoxyseq128128v13 100.00 102.26 104.73 T:led80n6t4silcv3 118.80 118.96 119.04 T:deoxysneq256128v13 161.26 161.48 161.58 T:deoxyseq256128v13 550.16? 597.81? 630.52? T:acorn128 2280.85 2294.90 2295.73 T:led80n6t4silcv2 2303.49 2305.85 2306.72 T:led80n6silcv1 2727.51 2728.29 2729.19 T:present80n6silcv1 2725.41 2728.36 2731.02 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 0.84 0.88 0.91 T:aegis128 0.88 0.88 0.90 T:aegis128l 0.89 0.90 0.96 aegis128l 1.17 1.17 1.18 aegis256 1.18 1.21 1.22 T:tiaoxinv1 1.19 1.21 1.22 T:tiaoxinv2 1.37 1.37 1.37 T:aezv5 1.39 1.42 1.45 T:aezv3 1.43 1.46 1.50 T:aezv4 2.36 2.38 2.42 T:colm0v1 2.46 2.46 2.48 T:aes128otrsv3 2.62 2.66 2.70 T:morus640128v1 2.75 2.78 2.83 T:morus640128v2 2.81? 2.87? 4.29? T:aeadaes128ocbtaglen128v1 2.99 3.01 3.02 T:aes128n8t8silcv2 3.00 3.01 3.03 T:aes128n12t8clocv3 3.03 3.04 3.04 T:aes128n12t8silcv2 3.03 3.04 3.04 T:aes128n12t8silcv3 3.02 3.04 3.07 T:aes128n8t8clocv2 3.02 3.06 3.08 T:aes128n12t8clocv2 3.07 3.13 3.17 T:morus1280128v1 3.08 3.16 3.17 T:aes128otrcv3 3.13 3.18 3.24 T:morus1280256v1 3.22 3.25 3.30 T:deoxysneq128128v1 3.28 3.33 3.39 T:morus1280256v2 3.35 3.38 3.41 T:aes128otrpv3 3.40 3.43 3.49 T:morus1280128v2 3.44 3.47 3.49 T:aes256otrsv3 3.46? 3.52? 4.83? T:aeadaes256ocbtaglen128v1 3.64 3.67 3.72 T:deoxysneq256128v1 3.63? 3.72? 5.58? T:aeadaes192ocbtaglen128v1 3.97 4.03 4.07 T:aes256otrcv3 4.10 4.13 4.15 T:aes256otrpv3 4.36 4.39 4.46 T:deoxysi128v141 4.59 4.66 4.72 T:deoxysi256v141 4.64 4.68 4.72 aes256gcmv1 4.77 4.84 4.90 T:aes128gcmv1 4.85 4.93 4.99 T:deoxyseq128128v1 5.08 5.13 5.25 T:deoxysii128v141 6.12 6.13 6.13 T:deoxyseq256128v1 6.22 6.25 6.31 T:aesjambuv1 6.53 6.59 6.60 T:deoxysii256v141 7.92 8.00 8.06 T:norx6441v2 8.01 8.09 8.18 T:norx6441v1 8.20 8.28 8.35 T:norx6441v3 8.32 8.32 8.33 T:ascon128av11 8.37 8.38 8.60 ascon128av12 8.38 8.38 8.39 T:ascon96v1 9.14 9.18 9.22 T:norx3241v1 9.35 9.36 9.39 T:norx3241v2 9.38 9.40 9.42 T:norx3241v3 10.48 10.49 10.49 ascon128v12 10.90 10.90 10.90 T:ascon128v11 10.90 10.90 10.91 T:ascon128v1 11.43 11.50 11.59 T:lakekeyakv1 11.94 12.02 12.11 T:norx6461v2 11.95 12.03 12.15 T:norx6461v3 11.90 12.05 12.15 T:norx6461v1 13.47 13.48 13.50 T:lakekeyakv2 13.53 13.56 13.64 T:riverkeyakv2 13.89 13.97 14.07 T:norx6444v3 13.94 13.99 14.14 T:norx3261v2 13.97 13.99 14.00 T:norx3261v3 16.09 16.12 16.13 T:norx3261v1 16.02 16.28 16.37 T:oceankeyakv2 16.51 16.71 18.29 T:seakeyakv2 19.89 20.02 20.16 T:aes128otrsv1 19.87 20.03 20.23 T:aes128otrsv2 20.42 20.54 20.71 T:aes128otrpv2 20.40 20.54 20.74 T:aes128otrpv1 20.96 21.01 21.31 T:aes128n8clocv1 21.39 21.46 21.68 T:aes128n12clocv1 24.36 24.36 24.39 T:acorn128v3 25.42 25.42 25.47 T:acorn128v2 25.66 25.75 25.98 T:twine80n6t4clocv3 25.83 25.89 25.98 T:aes256otrsv2 26.39 26.48 26.68 T:aes256otrpv1 26.47 26.61 26.78 T:aes256otrpv2 26.40 26.68 26.85 T:aes256otrsv1 27.34 27.56 27.85 T:twine80n6t4clocv2 27.90 28.39 28.71 T:ketjeminorv2 31.77 31.89 32.12 T:norx6444v2 34.66 34.75 34.90 T:aeadaes128ocbtaglen64v1 34.70 34.80 35.00 T:aeadaes128ocbtaglen96v1 35.09 35.12 35.19 T:ketjemajorv2 36.38 36.45 36.56 T:norx6444v1 38.23 38.42 38.58 T:lunarkeyakv2 40.05 40.20 40.29 T:aeadaes192ocbtaglen64v1 40.20 40.26 40.38 T:aeadaes192ocbtaglen96v1 41.71 41.88 42.26 T:ketjesrv1 45.95 46.20 46.54 T:ketjesrv2 46.86 46.96 47.13 T:aeadaes256ocbtaglen96v1 46.82 47.00 47.11 T:aeadaes256ocbtaglen64v1 51.71 51.96 52.45 T:colm127v1 53.70 53.91 54.21 T:ketjejrv1 57.53 57.68 58.06 T:proest256otrv1 72.69 72.90 73.20 T:deoxysneq128128v13 83.58 83.68 83.71 T:present80n6t4silcv3 86.86 86.98 87.19 T:proest128otrv1 90.32 90.81 91.33 T:ketjejrv2 108.49 109.10 109.72 T:aezv1 116.63 118.21 124.20 T:led80n6t4silcv3 120.12 120.52 120.75 T:deoxysneq256128v13 120.72 120.99 121.36 T:deoxyseq128128v13 199.35 199.65 199.97 T:deoxyseq256128v13 1938.09? 2053.58? 2292.75? T:acorn128 2552.80 2554.76 2564.29 T:led80n6t4silcv2 2578.20 2580.78 2583.06 T:led80n6silcv1 3050.78 3052.91 3054.75 T:present80n6t4silcv2 3055.08 3056.51 3058.08 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 0.91 0.92 0.96 T:aegis128l 0.87? 0.93? 1.03? T:aegis128 0.97 0.98 1.03 aegis128l 1.20 1.22 1.24 T:tiaoxinv1 1.22 1.24 1.26 T:tiaoxinv2 1.26 1.27 1.28 aegis256 1.39 1.40 1.41 T:aezv5 1.39 1.42 1.44 T:aezv3 1.44 1.46 1.51 T:aezv4 2.64 2.65 2.68 T:aes128otrsv3 2.66 2.71 2.75 T:morus640128v1 2.76? 2.82? 4.23? T:aeadaes128ocbtaglen128v1 2.88 2.91 2.92 T:colm0v1 2.93 2.97 3.01 T:morus640128v2 3.07 3.11 3.13 T:aes128n8t8clocv2 3.10 3.13 3.15 T:aes128n12t8clocv3 3.12 3.14 3.15 T:aes128n12t8clocv2 3.14 3.20 3.28 T:aes128n8t8silcv2 3.14 3.21 3.35 T:aes128n12t8silcv2 3.14 3.22 3.35 T:aes128n12t8silcv3 3.24 3.28 3.33 T:morus1280256v1 3.26 3.28 3.30 T:aes128otrcv3 3.26 3.30 3.35 T:morus1280128v1 3.48 3.52 3.57 T:morus1280128v2 3.47 3.53 3.59 T:morus1280256v2 3.47? 3.54? 5.74? T:aeadaes256ocbtaglen128v1 3.63 3.64 3.67 T:aes256otrsv3 3.90 3.97 4.01 T:aes128otrpv3 3.93? 3.99? 5.70? T:aeadaes192ocbtaglen128v1 4.23 4.24 4.24 T:aes256otrcv3 4.68 4.73 4.76 T:deoxysneq256128v1 4.70 4.74 4.76 T:deoxysneq128128v1 4.94 4.97 5.00 T:aes256otrpv3 4.98 5.00 5.03 aes256gcmv1 5.10 5.10 5.10 T:aes128gcmv1 5.66 5.71 5.75 T:deoxysii128v141 6.26 6.42 6.68 T:aesjambuv1 6.44 6.54 6.62 T:deoxysi256v141 6.72 6.77 6.90 T:deoxysi128v141 6.98 7.03 7.09 T:deoxyseq128128v1 7.09 7.14 7.19 T:deoxyseq256128v1 7.38 7.39 7.42 T:deoxysii256v141 8.10 8.16 8.25 T:norx6441v2 8.12 8.20 8.27 T:norx6441v1 8.20 8.20 8.20 T:ascon128av11 8.25 8.26 8.34 T:norx6441v3 8.29 8.31 8.32 T:ascon96v1 8.31 8.31 8.50 ascon128av12 9.64 9.66 9.66 T:norx3241v1 9.73 9.74 9.75 T:norx3241v2 9.74 9.75 9.78 T:norx3241v3 10.42 10.42 10.45 ascon128v12 10.57 10.58 10.62 T:ascon128v11 10.65 10.65 10.67 T:ascon128v1 11.74 12.15 12.18 T:lakekeyakv1 12.08 12.15 12.24 T:norx6461v2 12.17 12.24 12.32 T:norx6461v3 12.21 12.25 12.32 T:norx6461v1 13.49 13.51 13.53 T:lakekeyakv2 13.52 13.55 13.65 T:riverkeyakv2 13.94 14.03 14.11 T:norx6444v3 14.30 14.31 14.34 T:norx3261v3 14.34 14.35 14.36 T:norx3261v2 16.29 16.32 16.33 T:norx3261v1 16.57 16.83 18.39 T:seakeyakv2 16.99 17.11 17.21 T:oceankeyakv2 20.19 20.28 20.38 T:aes128otrsv1 20.22 20.30 20.58 T:aes128otrsv2 20.69 20.79 20.93 T:aes128otrpv1 20.80 20.92 21.13 T:aes128otrpv2 21.50 21.60 21.79 T:aes128n8clocv1 21.85 21.98 22.10 T:aes128n12clocv1 24.64 24.64 24.71 T:acorn128v3 25.42 25.43 25.51 T:acorn128v2 25.71 25.75 25.99 T:twine80n6t4clocv3 26.27 26.42 26.69 T:aes256otrsv2 26.40 26.53 26.71 T:aes256otrsv1 26.78 26.86 27.05 T:aes256otrpv1 26.77 27.04 27.19 T:aes256otrpv2 27.79 27.90 28.09 T:twine80n6t4clocv2 28.83 28.90 29.05 T:ketjeminorv2 32.02 32.11 32.18 T:norx6444v2 35.26 35.27 35.40 T:ketjemajorv2 36.72 36.87 36.99 T:norx6444v1 38.22 38.32 38.62 T:lunarkeyakv2 42.02 42.06 42.19 T:aeadaes128ocbtaglen64v1 42.07 42.12 42.19 T:aeadaes128ocbtaglen96v1 42.25 42.45 42.70 T:ketjesrv1 43.10 43.49 43.73 T:ketjesrv2 48.79 48.83 48.99 T:aeadaes192ocbtaglen96v1 48.81 48.85 48.98 T:aeadaes192ocbtaglen64v1 54.47 54.75 54.92 T:ketjejrv1 57.31 57.52 57.67 T:aeadaes256ocbtaglen96v1 57.29 57.53 57.77 T:aeadaes256ocbtaglen64v1 59.34 59.64 60.24 T:proest256otrv1 59.85 60.08 60.42 T:colm127v1 83.52 83.62 83.65 T:present80n6t4silcv3 83.53 83.68 83.93 T:deoxysneq128128v13 86.03 86.18 86.34 T:proest128otrv1 90.55 91.18 92.37 T:ketjejrv2 113.38 113.80 114.20 T:aezv1 120.58 120.73 121.01 T:deoxyseq128128v13 121.84 124.29 124.31 T:led80n6t4silcv3 132.07 132.46 132.86 T:deoxysneq256128v13 199.07 199.56 200.62 T:deoxyseq256128v13 1926.41 1996.03 2092.01 T:acorn128 2553.92 2555.19 2556.16 T:led80n6t4silcv2 2578.65 2580.39 2581.82 T:led80n6silcv1 3051.88 3055.19 3057.64 T:present80n6t4silcv2 3055.44 3057.08 3060.46 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 0.81? 0.91? 1.01? T:aegis128 0.91 0.91 0.92 T:aegis128l 1.00 1.00 1.01 T:aezv5 1.01 1.02 1.04 aegis128l 1.04 1.07 1.13 T:aezv3 1.07? 1.08? 1.22? T:aezv4 1.20 1.21 1.25 T:tiaoxinv1 1.23? 1.24? 1.40? T:tiaoxinv2 1.27 1.29 1.31 aegis256 2.64 2.65 2.68 T:aes128otrsv3 2.64 2.69 2.74 T:morus640128v1 2.77? 2.82? 3.99? T:aeadaes128ocbtaglen128v1 2.90 2.91 2.94 T:aes128n12t8silcv2 2.90 2.91 2.93 T:aes128n12t8silcv3 2.88 2.91 3.11 T:aes128n8t8silcv2 2.92 2.95 3.00 T:morus640128v2 2.93 2.97 3.11 T:colm0v1 3.04 3.06 3.06 T:aes128n8t8clocv2 3.06 3.07 3.09 T:aes128n12t8clocv3 3.07 3.08 3.09 T:aes128n12t8clocv2 3.21 3.28 3.35 T:morus1280128v1 3.25 3.28 3.35 T:morus1280256v1 3.28 3.29 3.34 T:aes128otrcv3 3.47 3.52 3.57 T:morus1280256v2 3.48 3.53 3.58 T:morus1280128v2 3.48? 3.54? 5.68? T:aeadaes256ocbtaglen128v1 3.64 3.65 3.68 T:aes256otrsv3 3.87? 3.98? 5.09? T:aeadaes192ocbtaglen128v1 4.01 4.03 4.08 T:aes128otrpv3 4.23 4.24 4.25 T:aes256otrcv3 4.56 4.59 4.61 T:deoxysneq128128v1 4.58 4.63 4.69 T:deoxysneq256128v1 4.96 4.98 5.02 T:aes256otrpv3 4.95 4.99 5.01 aes256gcmv1 5.10 5.10 5.10 T:aes128gcmv1 5.65 5.69 5.75 T:deoxysii128v141 6.41 6.46 6.50 T:deoxysi256v141 6.25 6.48 6.68 T:aesjambuv1 6.74 6.79 6.83 T:deoxysi128v141 6.98 7.03 7.06 T:deoxyseq128128v1 7.14 7.18 7.25 T:deoxyseq256128v1 7.26 7.39 7.42 T:deoxysii256v141 8.10 8.16 8.24 T:norx6441v2 8.17 8.17 8.17 T:ascon128av11 8.14 8.25 8.30 T:norx6441v1 8.27 8.27 8.27 T:ascon96v1 8.29 8.30 8.31 T:norx6441v3 8.31 8.31 8.31 ascon128av12 9.61 9.65 9.67 T:norx3241v1 9.74 9.74 9.77 T:norx3241v3 9.72 9.75 9.77 T:norx3241v2 10.42 10.42 10.43 ascon128v12 10.54 10.54 10.55 T:ascon128v11 10.62 10.62 10.65 T:ascon128v1 11.55 11.74 12.22 T:lakekeyakv1 12.10 12.17 12.25 T:norx6461v2 12.29 12.35 12.42 T:norx6461v1 12.22 12.37 12.46 T:norx6461v3 13.53 13.56 13.62 T:lakekeyakv2 13.92 14.03 14.08 T:norx6444v3 14.30 14.31 14.34 T:norx3261v3 14.34 14.35 14.36 T:norx3261v2 14.36 14.44 15.13 T:riverkeyakv2 16.33 16.34 16.34 T:norx3261v1 16.52 16.58 16.67 T:seakeyakv2 17.07 17.12 17.26 T:oceankeyakv2 20.25 20.34 20.50 T:aes128otrsv1 20.29 20.41 20.61 T:aes128otrsv2 20.75 20.85 21.08 T:aes128otrpv1 20.81 20.93 21.07 T:aes128otrpv2 21.39 21.56 21.80 T:aes128n8clocv1 21.77 21.93 22.21 T:aes128n12clocv1 24.64 24.64 24.65 T:acorn128v3 25.42 25.43 25.43 T:acorn128v2 25.66 25.72 26.01 T:twine80n6t4clocv3 26.25 26.38 26.68 T:aes256otrsv2 26.53 26.74 26.99 T:aes256otrsv1 26.82 26.90 27.11 T:aes256otrpv1 26.87 27.04 27.37 T:aes256otrpv2 27.95 28.22 28.30 T:twine80n6t4clocv2 28.73 28.99 29.26 T:ketjeminorv2 32.02 32.36 32.63 T:norx6444v2 35.29 35.35 35.42 T:ketjemajorv2 36.79 36.86 37.07 T:norx6444v1 38.20 38.47 38.77 T:lunarkeyakv2 42.07 42.11 42.16 T:aeadaes128ocbtaglen64v1 42.01 42.17 42.28 T:aeadaes128ocbtaglen96v1 42.48 42.66 42.93 T:ketjesrv1 43.10 43.39 43.90 T:ketjesrv2 48.77 48.85 49.19 T:aeadaes192ocbtaglen64v1 48.77 48.97 49.58 T:aeadaes192ocbtaglen96v1 54.43 54.70 55.14 T:ketjejrv1 57.25 57.45 57.61 T:aeadaes256ocbtaglen64v1 57.39 57.52 57.72 T:aeadaes256ocbtaglen96v1 58.05 58.51 58.74 T:proest256otrv1 59.72 59.89 60.19 T:colm127v1 83.46 83.53 83.60 T:present80n6t4silcv3 83.66 83.76 84.06 T:deoxysneq128128v13 86.06 86.15 86.27 T:proest128otrv1 90.20 90.72 91.46 T:ketjejrv2 113.14 113.57 114.12 T:aezv1 120.55 120.76 121.02 T:deoxyseq128128v13 120.92 124.24 124.30 T:led80n6t4silcv3 132.09 132.34 132.57 T:deoxysneq256128v13 199.76 201.17 202.05 T:deoxyseq256128v13 2034.19 2159.93 2164.71 T:acorn128 2549.76 2551.14 2566.94 T:led80n6t4silcv2 2577.43 2580.65 2582.24 T:led80n6silcv1 3053.70 3055.31 3056.95 T:present80n6silcv1 3054.53 3055.55 3057.79 T:present80n6t4silcv2