VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20260330

[Page version: 20260503 04:13:12]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.24 0.25 0.26 T:tiaoxinv1 0.24 0.25 0.26 T:tiaoxinv2 0.28 0.28 0.29 aegis128l 0.50 0.51 0.52 aegis256 0.51 0.52 0.53 T:aegis128 0.08? 0.65? 1.21? T:aeadaes128ocbtaglen128v1 0.65 0.66 0.67 T:morus1280128v1 0.65 0.66 0.67 T:morus1280128v2 0.65 0.66 0.67 T:morus1280256v1 0.65 0.66 0.67 T:morus1280256v2 0.71 0.71 0.72 T:aes128otrcv3 0.71 0.71 0.72 T:aes128otrsv3 0.71 0.72 0.73 T:aezv4 0.72 0.73 0.74 T:aezv3 0.73 0.74 0.75 T:aes128otrpv3 0.73 0.74 0.75 T:aezv5 0.19? 0.81? 1.90? T:aeadaes192ocbtaglen128v1 0.93 0.93 0.94 T:aes256otrcv3 0.93 0.93 0.94 T:aes256otrsv3 0.95 0.96 0.98 T:aes256otrpv3 0.96 0.97 0.98 T:deoxysi128v141 1.00 1.02 1.04 T:aeadaes256ocbtaglen128v1 1.08 1.10 1.12 T:deoxysi256v141 1.10 1.11 1.11 T:morus640128v1 1.10 1.11 1.11 T:morus640128v2 1.14 1.15 1.17 T:deoxysneq128128v1 1.21 1.23 1.24 T:norx6444v3 1.25 1.28 1.30 T:deoxysneq256128v1 1.42 1.42 1.43 T:aes128gcmv1 1.67 1.68 1.68 aes256gcmv1 1.90 1.92 1.94 T:deoxysii128v141 2.14 2.15 2.16 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.16 2.18 2.19 T:deoxysii256v141 2.17 2.21 2.25 T:lunarkeyakv2 2.32 2.32 2.33 T:colm0v1 2.29 2.32 2.37 T:deoxyseq128128v1 2.50 2.54 2.58 T:deoxyseq256128v1 2.56 2.58 2.60 T:norx6441v1 2.91 2.93 2.95 T:seakeyakv2 3.03 3.07 3.09 T:oceankeyakv2 3.22 3.24 3.25 T:norx6461v3 3.22 3.24 3.26 T:norx6461v2 3.86 3.87 3.90 T:norx3241v2 3.87 3.88 3.90 T:norx3241v3 3.88 3.91 3.93 T:norx6461v1 3.96 3.99 4.01 T:norx6444v2 4.10 4.13 4.15 T:lakekeyakv1 4.44 4.46 4.48 T:norx6444v1 4.44 4.48 4.62 T:lakekeyakv2 4.56 4.56 4.57 T:aes128n8t8silcv2 4.56 4.56 4.57 T:aes128n12t8silcv3 4.56 4.56 4.57 T:aes128n12t8silcv2 4.56 4.57 4.57 T:aes128n12t8clocv2 4.57 4.57 4.57 T:aes128n12t8clocv3 4.56 4.57 4.57 T:aes128n8t8clocv2 4.69 4.71 4.72 T:norx3241v1 5.83 5.85 5.87 T:norx3261v3 5.89 5.91 5.94 T:norx3261v2 5.85 6.04 6.20 T:acorn128v3 7.20 7.22 7.24 T:ascon128av11 7.21 7.22 7.25 T:ascon96v1 7.30 7.32 7.34 ascon128av12 7.33 7.37 7.41 T:ketjemajorv2 7.45 7.47 7.48 T:norx3261v1 7.58 7.62 7.69 T:acorn128v2 9.12 9.13 9.14 T:aesjambuv1 9.43 9.48 9.52 T:ketjeminorv2 9.93 9.96 9.98 T:riverkeyakv2 10.55 10.57 10.60 T:ascon128v11 10.56 10.58 10.60 T:ascon128v1 10.61 10.71 10.73 ascon128v12 14.55 14.56 14.57 T:twine80n6t4clocv3 14.79 14.81 14.84 T:aes128otrpv1 14.82 14.84 14.87 T:aes128otrpv2 15.28 15.34 15.37 T:aes128otrsv1 15.38 15.45 15.49 T:aes128otrsv2 15.63 15.65 15.67 T:twine80n6t4clocv2 19.04 19.09 19.14 T:aes256otrsv1 19.18 19.25 19.31 T:aes256otrsv2 19.31 19.33 19.37 T:aes256otrpv1 19.58 19.60 19.62 T:aes256otrpv2 24.65 24.70 24.76 T:aes128n12clocv1 24.71 24.77 24.82 T:aes128n8clocv1 24.77 24.80 24.83 T:aeadaes128ocbtaglen64v1 24.78 24.82 24.86 T:aeadaes128ocbtaglen96v1 26.11 26.17 26.20 T:proest256otrv1 29.17 29.20 29.24 T:aeadaes192ocbtaglen64v1 29.20 29.22 29.23 T:aeadaes192ocbtaglen96v1 29.75 29.85 30.09 T:ketjesrv1 30.79 30.88 31.07 T:ketjesrv2 33.63 33.66 33.69 T:aeadaes256ocbtaglen64v1 33.65 33.69 33.71 T:aeadaes256ocbtaglen96v1 54.42 54.48 54.56 T:proest128otrv1 54.98 55.02 55.05 T:colm127v1 60.07 60.23 60.36 T:ketjejrv1 68.46 68.49 68.66 T:present80n6t4silcv3 76.68 76.76 77.32 T:deoxysneq128128v13 94.46 94.55 94.71 T:ketjejrv2 121.53 121.64 122.75 T:deoxysneq256128v13 128.34 128.42 128.52 T:led80n6t4silcv3 156.36 157.25 163.98 T:deoxyseq128128v13 177.57 177.93 178.37 T:aezv1 244.47 244.55 244.68 T:deoxyseq256128v13 335.12 335.54 336.13 T:acorn128 4075.54 4076.48 4077.57 T:led80n6silcv1 4084.97 4085.84 4209.63 T:led80n6t4silcv2 4539.74 4540.61 4542.26 T:present80n6silcv1 4540.20 4540.65 4542.38 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.29 0.30 0.30 aegis128l 0.38 0.39 0.40 T:tiaoxinv1 0.39 0.39 0.40 T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.59 0.60 aegis256 0.67 0.67 0.68 T:morus1280128v2 0.67 0.68 0.69 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v2 0.66 0.68 0.69 T:morus1280256v1 0.70 0.70 0.71 T:aezv3 0.69 0.71 0.72 T:aezv4 0.71 0.72 0.73 T:aezv5 0.17? 0.72? 1.26? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrcv3 0.74 0.75 0.76 T:aes128otrsv3 0.74 0.75 0.76 T:aes128otrpv3 -0.21? 0.85? 1.39? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.97 T:aes256otrsv3 0.95 0.96 0.97 T:aes256otrcv3 0.95 0.97 0.99 T:aes256otrpv3 1.09 1.10 1.11 T:morus640128v1 1.10 1.11 1.13 T:aeadaes256ocbtaglen128v1 1.10 1.12 1.13 T:morus640128v2 1.23 1.24 1.26 T:norx6444v3 1.24 1.26 1.27 T:deoxysi128v141 1.38 1.39 1.40 T:deoxysi256v141 1.52 1.54 1.55 T:deoxysneq128128v1 1.62 1.64 1.66 T:deoxysneq256128v1 1.75 1.76 1.77 T:aes128gcmv1 1.91 1.94 1.95 T:deoxysii128v141 2.06 2.09 2.11 T:norx6441v3 2.07 2.09 2.11 T:norx6441v2 2.16 2.18 2.20 T:deoxysii256v141 2.24 2.29 2.35 T:lunarkeyakv2 2.27 2.29 2.32 T:colm0v1 2.39 2.42 2.49 aes256gcmv1 2.52 2.54 2.55 T:norx6441v1 2.95 2.98 3.02 T:seakeyakv2 3.05 3.06 3.07 T:deoxyseq128128v1 3.09 3.13 3.18 T:oceankeyakv2 3.16 3.18 3.19 T:norx6461v2 3.17 3.18 3.20 T:norx6461v3 3.27 3.29 3.31 T:deoxyseq256128v1 3.77 3.79 3.81 T:norx3241v3 3.77 3.79 3.81 T:norx3241v2 3.82 3.84 3.85 T:norx6461v1 3.96 3.99 4.02 T:norx6444v2 4.17 4.20 4.23 T:lakekeyakv1 4.40 4.42 4.44 T:norx6444v1 4.41 4.44 4.56 T:lakekeyakv2 4.49 4.50 4.50 T:aes128n12t8silcv3 4.49 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.56 4.57 4.59 T:norx3241v1 5.81 5.83 5.85 T:norx3261v3 5.83 5.85 5.88 T:norx3261v2 6.61 6.81 6.98 T:acorn128v3 7.28 7.30 7.33 ascon128av12 7.33 7.35 7.37 T:ascon96v1 7.33 7.35 7.39 T:ascon128av11 7.36 7.38 7.39 T:norx3261v1 7.39 7.41 7.45 T:ketjemajorv2 7.78 7.79 7.82 T:acorn128v2 9.43 9.44 9.44 T:aesjambuv1 10.08 10.10 10.13 T:riverkeyakv2 10.27 10.34 10.39 T:ketjeminorv2 10.51 10.54 10.57 T:ascon128v1 10.51 10.55 10.57 T:ascon128v11 10.64 10.68 10.70 ascon128v12 14.74 14.76 14.78 T:twine80n6t4clocv3 15.07 15.10 15.12 T:aes128otrpv1 15.23 15.35 15.40 T:aes128otrpv2 15.60 15.62 15.65 T:twine80n6t4clocv2 15.67 15.73 15.77 T:aes128otrsv2 15.68 15.74 15.79 T:aes128otrsv1 19.60 19.65 19.68 T:aes256otrsv2 19.67 19.70 19.73 T:aes256otrpv1 19.72 19.75 19.78 T:aes256otrpv2 19.73 19.78 19.83 T:aes256otrsv1 23.63 23.67 23.73 T:aes128n12clocv1 24.23 24.27 24.31 T:aes128n8clocv1 25.99 26.03 26.08 T:proest256otrv1 31.01 31.08 31.38 T:ketjesrv1 31.56 31.60 31.64 T:ketjesrv2 33.36 33.43 33.54 T:aeadaes128ocbtaglen64v1 33.39 33.51 33.61 T:aeadaes128ocbtaglen96v1 39.85 39.90 39.96 T:aeadaes192ocbtaglen96v1 39.86 39.96 40.27 T:aeadaes192ocbtaglen64v1 46.22 46.32 46.43 T:aeadaes256ocbtaglen64v1 46.31 46.40 46.48 T:aeadaes256ocbtaglen96v1 54.72 54.76 54.80 T:proest128otrv1 61.43 61.54 61.63 T:ketjejrv1 68.57 68.60 68.66 T:present80n6t4silcv3 72.39 72.58 73.05 T:colm127v1 93.40 94.17 95.60 T:ketjejrv2 108.84 108.96 109.02 T:deoxysneq128128v13 129.34 129.82 131.70 T:led80n6t4silcv3 156.26 157.02 163.28 T:deoxyseq128128v13 157.37 157.62 158.71 T:deoxysneq256128v13 177.33 177.65 177.97 T:aezv1 244.13 244.23 244.36 T:deoxyseq256128v13 378.97 379.05 379.25 T:acorn128 4075.79 4076.43 4077.56 T:led80n6silcv1 4084.13 4084.75 4085.78 T:led80n6t4silcv2 4539.45 4540.50 4542.37 T:present80n6silcv1 4540.11 4541.54 4543.15 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.26? 0.27? 0.29? T:aezv4 0.27 0.28 0.29 T:aezv3 0.28 0.29 0.29 T:aezv5 0.29 0.30 0.30 aegis128l 0.38 0.39 0.39 T:tiaoxinv1 0.38 0.39 0.40 T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.59 0.60 aegis256 0.67 0.67 0.68 T:morus1280128v2 0.67 0.68 0.68 T:morus1280256v2 0.67 0.68 0.68 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v1 0.20? 0.72? 1.26? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrcv3 0.74 0.75 0.75 T:aes128otrsv3 0.74 0.75 0.76 T:aes128otrpv3 0.31? 0.84? 1.92? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.97 T:aes256otrsv3 0.95 0.96 0.97 T:aes256otrcv3 0.96 0.97 0.98 T:aes256otrpv3 1.09 1.10 1.11 T:morus640128v1 1.10 1.11 1.12 T:aeadaes256ocbtaglen128v1 1.10 1.12 1.13 T:morus640128v2 1.23 1.24 1.25 T:norx6444v3 1.24 1.25 1.28 T:deoxysi128v141 1.38 1.39 1.39 T:deoxysi256v141 1.52 1.54 1.56 T:deoxysneq128128v1 1.61 1.64 1.66 T:deoxysneq256128v1 1.75 1.76 1.77 T:aes128gcmv1 1.92 1.93 1.95 T:deoxysii128v141 2.07 2.09 2.10 T:norx6441v3 2.07 2.09 2.10 T:norx6441v2 2.16 2.18 2.20 T:deoxysii256v141 2.24 2.29 2.33 T:colm0v1 2.27 2.31 2.36 T:lunarkeyakv2 2.39 2.41 2.49 aes256gcmv1 2.52 2.54 2.55 T:norx6441v1 2.99 3.02 3.04 T:seakeyakv2 3.05 3.07 3.08 T:deoxyseq128128v1 3.11 3.14 3.17 T:oceankeyakv2 3.16 3.17 3.19 T:norx6461v3 3.16 3.18 3.19 T:norx6461v2 3.28 3.29 3.31 T:deoxyseq256128v1 3.78 3.80 3.81 T:norx3241v3 3.77 3.80 3.81 T:norx3241v2 3.82 3.84 3.86 T:norx6461v1 4.00 4.02 4.04 T:norx6444v2 4.19 4.22 4.24 T:lakekeyakv1 4.41 4.45 4.58 T:lakekeyakv2 4.43 4.46 4.48 T:norx6444v1 4.49 4.50 4.51 T:aes128n12t8silcv3 4.47 4.50 4.51 T:aes128n12t8silcv2 4.49 4.50 4.51 T:aes128n8t8silcv2 4.48 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.49 4.51 4.51 T:aes128n12t8clocv3 4.55 4.57 4.59 T:norx3241v1 5.80 5.82 5.85 T:norx3261v3 5.84 5.86 5.88 T:norx3261v2 6.61 6.80 6.98 T:acorn128v3 7.27 7.30 7.32 ascon128av12 7.31 7.34 7.37 T:ascon128av11 7.32 7.34 7.36 T:ascon96v1 7.36 7.38 7.39 T:norx3261v1 7.37 7.41 7.46 T:ketjemajorv2 7.77 7.79 7.81 T:acorn128v2 9.43 9.43 9.44 T:aesjambuv1 10.10 10.12 10.14 T:riverkeyakv2 10.29 10.35 10.39 T:ketjeminorv2 10.51 10.53 10.55 T:ascon128v1 10.50 10.53 10.56 T:ascon128v11 10.65 10.67 10.70 ascon128v12 14.74 14.76 14.78 T:twine80n6t4clocv3 15.11 15.14 15.17 T:aes128otrpv1 15.19 15.33 15.43 T:aes128otrpv2 15.61 15.63 15.66 T:twine80n6t4clocv2 15.70 15.75 15.80 T:aes128otrsv2 15.69 15.78 15.83 T:aes128otrsv1 19.64 19.69 19.73 T:aes256otrsv2 19.70 19.75 19.78 T:aes256otrpv1 19.73 19.77 19.80 T:aes256otrpv2 19.77 19.82 19.86 T:aes256otrsv1 23.62 23.67 23.72 T:aes128n12clocv1 24.19 24.24 24.31 T:aes128n8clocv1 26.00 26.04 26.09 T:proest256otrv1 31.08 31.12 31.42 T:ketjesrv1 31.58 31.64 31.69 T:ketjesrv2 33.36 33.42 33.53 T:aeadaes128ocbtaglen64v1 33.36 33.49 33.62 T:aeadaes128ocbtaglen96v1 39.85 39.90 39.95 T:aeadaes192ocbtaglen96v1 39.86 39.92 40.23 T:aeadaes192ocbtaglen64v1 46.24 46.34 46.42 T:aeadaes256ocbtaglen64v1 46.32 46.43 46.49 T:aeadaes256ocbtaglen96v1 54.72 54.76 54.80 T:proest128otrv1 61.33 61.47 61.61 T:ketjejrv1 68.60 68.62 68.64 T:present80n6t4silcv3 71.23 71.42 71.86 T:colm127v1 93.48 94.19 95.65 T:ketjejrv2 108.92 109.06 109.14 T:deoxysneq128128v13 129.56 129.67 130.93 T:led80n6t4silcv3 156.28 157.07 163.63 T:deoxyseq128128v13 157.31 157.74 158.48 T:deoxysneq256128v13 177.26 177.46 177.76 T:aezv1 244.13 244.23 244.35 T:deoxyseq256128v13 378.97 379.03 379.16 T:acorn128 4075.70 4076.29 4077.35 T:led80n6silcv1 4084.33 4084.81 4085.70 T:led80n6t4silcv2 4539.03 4540.24 4541.58 T:present80n6silcv1 4539.88 4540.52 4541.97 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.21 0.22 0.22 T:tiaoxinv1 0.21 0.22 0.22 T:tiaoxinv2 0.27 0.27 0.28 aegis128l 0.50 0.51 0.51 aegis256 0.50 0.51 0.51 T:aezv4 0.51 0.51 0.52 T:aezv3 0.53 0.53 0.54 T:aezv5 0.54 0.54 0.55 T:aegis128 0.63 0.64 0.64 T:morus1280128v1 0.63 0.64 0.64 T:morus1280256v2 0.63 0.64 0.65 T:morus1280256v1 0.63 0.64 0.64 T:morus1280128v2 0.36? 0.64? 0.94? T:aeadaes128ocbtaglen128v1 0.73 0.73 0.73 T:aes128otrcv3 0.46? 0.78? 1.09? T:aeadaes192ocbtaglen128v1 0.81 0.81 0.82 T:aes128otrpv3 0.95 0.95 0.96 T:aes256otrcv3 0.93 0.96 0.96 T:deoxysi128v141 1.04 1.05 1.06 T:aes128gcmv1 1.06 1.06 1.06 T:aes256otrpv3 1.06 1.07 1.09 T:aeadaes256ocbtaglen128v1 1.07 1.08 1.08 T:morus640128v1 1.07 1.08 1.08 T:morus640128v2 1.07 1.09 1.10 T:deoxysi256v141 1.14 1.15 1.16 T:deoxysneq128128v1 1.16 1.17 1.18 aes256gcmv1 1.25 1.26 1.27 T:deoxysneq256128v1 1.42 1.44 1.45 T:deoxysii128v141 1.60 1.61 1.62 T:deoxysii256v141 1.62 1.62 1.63 T:colm0v1 1.68 1.69 1.70 T:norx6444v3 1.74 1.75 1.77 T:deoxyseq128128v1 1.88 1.91 1.93 T:deoxyseq256128v1 2.14 2.15 2.16 T:norx6441v2 2.14 2.16 2.17 T:norx6441v3 2.46 2.47 2.49 T:seakeyakv2 2.55 2.57 2.59 T:oceankeyakv2 2.57 2.59 2.60 T:norx6441v1 2.60 2.61 2.61 T:aes128otrsv3 3.05 3.07 3.09 T:lunarkeyakv2 3.24 3.25 3.27 T:norx6461v3 3.26 3.27 3.28 T:norx6461v2 3.58 3.59 3.59 T:aes256otrsv3 3.68 3.70 3.72 T:norx6444v2 3.87 3.88 3.90 T:norx3241v3 3.87 3.88 3.90 T:norx3241v2 3.88 3.90 3.92 T:norx6461v1 3.90 3.92 3.94 T:lakekeyakv1 3.93 3.96 4.02 T:lakekeyakv2 4.38 4.40 4.41 T:norx6444v1 4.53 4.53 4.53 T:aes128n8t8silcv2 4.53 4.53 4.53 T:aes128n12t8silcv2 4.53 4.53 4.53 T:aes128n12t8silcv3 4.53 4.53 4.54 T:aes128n8t8clocv2 4.53 4.54 4.54 T:aes128n12t8clocv2 4.53 4.54 4.54 T:aes128n12t8clocv3 4.68 4.70 4.71 T:norx3241v1 5.84 5.85 5.87 T:norx3261v3 5.86 5.87 5.89 T:norx3261v2 6.40 6.51 6.59 T:acorn128v3 6.54 6.56 6.58 T:ketjemajorv2 7.11 7.12 7.14 T:ascon128av11 7.10 7.13 7.16 T:ascon96v1 7.19 7.21 7.22 T:riverkeyakv2 7.23 7.26 7.28 T:acorn128v2 7.27 7.29 7.31 ascon128av12 7.46 7.47 7.49 T:norx3261v1 8.59 8.62 8.65 T:ketjeminorv2 9.06 9.07 9.07 T:aesjambuv1 10.53 10.54 10.57 T:ascon128v11 10.53 10.55 10.56 T:ascon128v1 10.64 10.67 10.70 ascon128v12 13.91 13.94 14.04 T:aes128otrsv1 13.93 13.98 14.04 T:aes128otrsv2 14.13 14.18 14.21 T:aes128otrpv1 14.27 14.29 14.31 T:aes128otrpv2 14.35 14.37 14.38 T:twine80n6t4clocv3 15.39 15.39 15.41 T:twine80n6t4clocv2 17.73 17.77 17.80 T:aes256otrsv1 17.80 17.84 17.87 T:aes256otrsv2 18.68 18.70 18.72 T:aes256otrpv1 18.83 18.84 18.86 T:aes256otrpv2 18.89 18.92 18.95 T:aes128n12clocv1 18.90 18.93 18.95 T:aes128n8clocv1 24.49 24.51 24.53 T:aeadaes128ocbtaglen64v1 24.51 24.53 24.54 T:aeadaes128ocbtaglen96v1 26.34 26.36 26.39 T:proest256otrv1 26.54 26.58 26.82 T:ketjesrv1 28.56 28.59 28.67 T:ketjesrv2 28.89 28.91 28.93 T:aeadaes192ocbtaglen96v1 28.89 28.91 28.93 T:aeadaes192ocbtaglen64v1 33.34 33.36 33.38 T:aeadaes256ocbtaglen64v1 33.35 33.38 33.40 T:aeadaes256ocbtaglen96v1 40.45 40.47 40.50 T:colm127v1 54.96 54.99 55.02 T:proest128otrv1 55.32 55.38 55.46 T:ketjejrv1 67.88 67.90 68.23 T:present80n6t4silcv3 77.07 77.10 77.14 T:deoxysneq128128v13 91.56 91.90 91.99 T:ketjejrv2 116.74 116.87 117.24 T:aezv1 116.90 117.41 123.44 T:deoxyseq128128v13 121.37 121.55 122.60 T:deoxysneq256128v13 127.85 127.91 127.95 T:led80n6t4silcv3 182.62 182.72 182.90 T:deoxyseq256128v13 331.07 331.29 331.87 T:acorn128 3057.35 3058.15 3058.91 T:led80n6silcv1 3063.73 3064.64 3065.37 T:led80n6t4silcv2 3404.91 3405.58 3405.95 T:present80n6silcv1 3404.77 3405.74 3406.47 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.27 0.28 0.28 aegis128l 0.28 0.29 0.29 T:tiaoxinv1 0.29 0.29 0.29 T:tiaoxinv2 0.49 0.50 0.50 T:aezv4 0.49 0.50 0.50 T:aezv3 0.52 0.52 0.53 T:aezv5 0.54 0.54 0.55 T:aegis128 0.55 0.55 0.55 aegis256 0.64 0.65 0.65 T:morus1280128v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v1 0.65 0.65 0.66 T:morus1280256v2 0.38? 0.67? 0.96? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.74 T:aes128otrcv3 0.50? 0.80? 1.32? T:aeadaes192ocbtaglen128v1 0.82 0.83 0.83 T:aes128otrpv3 0.96 0.97 0.97 T:aes256otrcv3 1.06 1.07 1.07 T:aes256otrpv3 1.06 1.07 1.08 T:morus640128v2 1.07 1.08 1.09 T:morus640128v1 1.08 1.09 1.11 T:deoxysi128v141 1.11 1.11 1.13 T:aeadaes256ocbtaglen128v1 1.21 1.22 1.23 T:deoxysi256v141 1.21 1.23 1.24 T:aes128gcmv1 1.33 1.33 1.34 T:deoxysneq128128v1 1.42 1.43 1.44 T:deoxysneq256128v1 1.43 1.44 1.46 T:deoxysii128v141 1.54 1.55 1.59 aes256gcmv1 1.60 1.61 1.62 T:colm0v1 1.61 1.61 1.63 T:deoxysii256v141 1.68 1.70 1.71 T:norx6444v3 2.11 2.12 2.13 T:norx6441v2 2.11 2.12 2.13 T:norx6441v3 2.12 2.13 2.13 T:deoxyseq128128v1 2.28 2.29 2.30 T:deoxyseq256128v1 2.49 2.51 2.53 T:seakeyakv2 2.55 2.56 2.57 T:norx6441v1 2.58 2.60 2.61 T:oceankeyakv2 2.62 2.62 2.63 T:aes128otrsv3 3.09 3.12 3.14 T:lunarkeyakv2 3.21 3.22 3.23 T:norx6461v3 3.21 3.22 3.24 T:norx6461v2 3.60 3.61 3.61 T:aes256otrsv3 3.70 3.71 3.73 T:norx6444v2 3.84 3.85 3.86 T:norx3241v3 3.84 3.85 3.87 T:norx6461v1 3.84 3.86 3.87 T:norx3241v2 3.92 3.95 4.01 T:lakekeyakv2 3.95 3.97 3.98 T:lakekeyakv1 4.36 4.37 4.39 T:norx6444v1 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv3 4.62 4.64 4.65 T:norx3241v1 5.82 5.84 5.85 T:norx3261v3 5.83 5.85 5.86 T:norx3261v2 6.58 6.59 6.61 T:ketjemajorv2 6.78 6.88 6.97 T:acorn128v3 7.22 7.24 7.26 T:ascon96v1 7.18 7.25 7.27 T:ascon128av11 7.25 7.26 7.28 ascon128av12 7.27 7.29 7.29 T:riverkeyakv2 7.39 7.41 7.42 T:acorn128v2 7.42 7.44 7.45 T:norx3261v1 9.00 9.03 9.07 T:ketjeminorv2 9.21 9.22 9.22 T:aesjambuv1 10.41 10.45 10.49 T:ascon128v1 10.44 10.49 10.53 T:ascon128v11 10.61 10.63 10.64 ascon128v12 14.08 14.12 14.17 T:aes128otrsv2 14.09 14.13 14.24 T:aes128otrsv1 14.29 14.34 14.37 T:aes128otrpv1 14.46 14.46 14.48 T:twine80n6t4clocv3 14.44 14.47 14.54 T:aes128otrpv2 15.35 15.37 15.38 T:twine80n6t4clocv2 18.03 18.06 18.08 T:aes256otrsv2 18.11 18.13 18.15 T:aes256otrsv1 18.38 18.41 18.45 T:aes128n12clocv1 18.66 18.69 18.70 T:aes128n8clocv1 18.88 18.91 18.93 T:aes256otrpv1 18.92 18.94 18.96 T:aes256otrpv2 26.27 26.29 26.31 T:proest256otrv1 27.19 27.22 27.49 T:ketjesrv1 28.79 28.82 28.89 T:aeadaes128ocbtaglen64v1 28.82 28.88 28.92 T:aeadaes128ocbtaglen96v1 28.92 28.95 28.98 T:ketjesrv2 34.24 34.27 34.30 T:aeadaes192ocbtaglen96v1 34.23 34.27 34.42 T:aeadaes192ocbtaglen64v1 39.66 39.70 39.75 T:aeadaes256ocbtaglen64v1 39.71 39.76 39.79 T:aeadaes256ocbtaglen96v1 49.14 49.26 49.49 T:colm127v1 55.09 55.12 55.15 T:proest128otrv1 55.95 56.03 56.12 T:ketjejrv1 67.92 68.01 68.42 T:present80n6t4silcv3 91.41 91.67 91.94 T:ketjejrv2 93.22 93.34 94.34 T:deoxysneq128128v13 116.65 116.95 117.29 T:aezv1 116.86 117.34 123.39 T:deoxyseq128128v13 127.43 127.81 128.51 T:led80n6t4silcv3 139.14 139.43 140.45 T:deoxysneq256128v13 182.52 182.64 182.78 T:deoxyseq256128v13 357.47 357.56 358.14 T:acorn128 3056.59 3057.97 3058.68 T:led80n6silcv1 3062.92 3063.96 3065.48 T:led80n6t4silcv2 3404.10 3405.23 3406.13 T:present80n6silcv1 3404.92 3405.62 3406.34 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.28 0.28 0.28 aegis128l 0.28 0.29 0.29 T:aezv4 0.28 0.29 0.29 T:aezv3 0.28 0.29 0.29 T:tiaoxinv2 0.29 0.29 0.29 T:tiaoxinv1 0.30 0.31 0.31 T:aezv5 0.54 0.54 0.55 T:aegis128 0.55 0.55 0.55 aegis256 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.65 T:morus1280128v2 0.65 0.65 0.65 T:morus1280256v2 0.65 0.65 0.66 T:morus1280128v1 0.41? 0.67? 0.94? T:aeadaes128ocbtaglen128v1 0.74 0.74 0.74 T:aes128otrcv3 0.26? 0.80? 1.07? T:aeadaes192ocbtaglen128v1 0.82 0.82 0.83 T:aes128otrpv3 0.96 0.97 0.97 T:aes256otrcv3 1.06 1.07 1.07 T:aes256otrpv3 1.06 1.07 1.08 T:morus640128v2 1.08 1.08 1.09 T:morus640128v1 1.09 1.10 1.11 T:deoxysi128v141 1.10 1.11 1.13 T:aeadaes256ocbtaglen128v1 1.21 1.22 1.23 T:deoxysi256v141 1.21 1.23 1.24 T:aes128gcmv1 1.33 1.34 1.34 T:deoxysneq128128v1 1.42 1.43 1.44 T:deoxysneq256128v1 1.42 1.44 1.46 T:deoxysii128v141 1.54 1.55 1.59 aes256gcmv1 1.59 1.60 1.61 T:colm0v1 1.60 1.62 1.63 T:deoxysii256v141 1.69 1.69 1.70 T:norx6444v3 2.11 2.12 2.13 T:norx6441v2 2.11 2.12 2.13 T:norx6441v3 2.11 2.13 2.13 T:deoxyseq128128v1 2.28 2.29 2.30 T:deoxyseq256128v1 2.52 2.54 2.56 T:seakeyakv2 2.55 2.56 2.57 T:norx6441v1 2.59 2.61 2.62 T:oceankeyakv2 2.62 2.62 2.62 T:aes128otrsv3 3.11 3.13 3.15 T:lunarkeyakv2 3.20 3.21 3.23 T:norx6461v3 3.21 3.22 3.23 T:norx6461v2 3.60 3.60 3.61 T:aes256otrsv3 3.72 3.73 3.74 T:norx6444v2 3.84 3.85 3.86 T:norx3241v3 3.84 3.86 3.86 T:norx6461v1 3.84 3.86 3.87 T:norx3241v2 3.94 3.96 4.04 T:lakekeyakv2 3.96 3.97 3.98 T:lakekeyakv1 4.39 4.40 4.41 T:norx6444v1 4.49 4.50 4.51 T:aes128n12t8silcv3 4.49 4.50 4.51 T:aes128n8t8silcv2 4.49 4.50 4.50 T:aes128n12t8silcv2 4.49 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.52 T:aes128n12t8clocv2 4.50 4.50 4.52 T:aes128n12t8clocv3 4.62 4.63 4.64 T:norx3241v1 5.82 5.84 5.85 T:norx3261v3 5.83 5.84 5.86 T:norx3261v2 6.58 6.60 6.63 T:ketjemajorv2 6.79 6.89 6.97 T:acorn128v3 7.20 7.21 7.24 T:ascon96v1 7.17 7.25 7.27 T:ascon128av11 7.24 7.27 7.30 ascon128av12 7.28 7.30 7.31 T:riverkeyakv2 7.31 7.39 7.41 T:acorn128v2 7.42 7.43 7.44 T:norx3261v1 9.02 9.05 9.08 T:ketjeminorv2 9.22 9.22 9.22 T:aesjambuv1 10.42 10.44 10.47 T:ascon128v11 10.41 10.45 10.49 T:ascon128v1 10.61 10.63 10.65 ascon128v12 14.09 14.13 14.18 T:aes128otrsv2 14.11 14.15 14.26 T:aes128otrsv1 14.34 14.38 14.40 T:aes128otrpv1 14.45 14.47 14.48 T:twine80n6t4clocv3 14.48 14.50 14.56 T:aes128otrpv2 15.36 15.37 15.39 T:twine80n6t4clocv2 18.05 18.08 18.10 T:aes256otrsv2 18.12 18.14 18.16 T:aes256otrsv1 18.37 18.40 18.43 T:aes128n12clocv1 18.66 18.68 18.70 T:aes128n8clocv1 18.89 18.92 18.94 T:aes256otrpv1 18.91 18.93 18.96 T:aes256otrpv2 26.26 26.28 26.31 T:proest256otrv1 27.21 27.26 27.54 T:ketjesrv1 28.80 28.82 28.88 T:aeadaes128ocbtaglen64v1 28.82 28.88 28.92 T:aeadaes128ocbtaglen96v1 28.96 28.98 29.00 T:ketjesrv2 34.24 34.26 34.30 T:aeadaes192ocbtaglen96v1 34.24 34.28 34.41 T:aeadaes192ocbtaglen64v1 39.68 39.73 39.77 T:aeadaes256ocbtaglen64v1 39.70 39.77 39.81 T:aeadaes256ocbtaglen96v1 48.58 48.68 48.86 T:colm127v1 55.09 55.12 55.15 T:proest128otrv1 55.96 56.05 56.14 T:ketjejrv1 67.93 67.98 68.38 T:present80n6t4silcv3 91.39 91.67 91.88 T:ketjejrv2 93.24 93.29 93.37 T:deoxysneq128128v13 116.55 116.70 117.14 T:aezv1 116.88 117.34 123.48 T:deoxyseq128128v13 127.41 127.52 128.44 T:led80n6t4silcv3 139.15 139.43 140.50 T:deoxysneq256128v13 182.54 182.65 182.80 T:deoxyseq256128v13 357.47 357.56 358.08 T:acorn128 3056.99 3058.19 3059.16 T:led80n6silcv1 3062.82 3063.64 3064.62 T:led80n6t4silcv2 3404.21 3405.13 3405.63 T:present80n6silcv1 3404.91 3405.64 3406.21 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18 0.19 0.19 T:tiaoxinv1 0.19 0.19 0.20 T:tiaoxinv2 0.25 0.25 0.26 aegis128l 0.29 0.29 0.30 T:aezv3 0.29 0.30 0.30 T:aezv4 0.32 0.33 0.33 T:aezv5 0.50 0.50 0.50 aegis256 0.56 0.56 0.57 T:aegis128 0.61 0.62 0.63 T:morus1280256v1 0.61 0.62 0.63 T:morus1280128v1 0.05? 0.62? 1.21? T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:morus1280128v2 0.61 0.63 0.63 T:morus1280256v2 0.65 0.67 0.69 aes256gcmv1 0.66 0.69 0.71 T:aes128gcmv1 0.74 0.74 0.75 T:aes128otrcv3 0.17? 0.75? 1.30? T:aeadaes192ocbtaglen128v1 0.89 0.89 0.91 T:aes128otrpv3 0.93 0.94 0.95 T:deoxysii128v141 0.94 0.94 0.94 T:colm0v1 0.93 0.95 0.95 T:deoxysi128v141 0.95 0.96 0.97 T:aes256otrcv3 1.03 1.04 1.05 T:morus640128v1 1.04 1.05 1.06 T:morus640128v2 1.03 1.05 1.07 T:deoxysii256v141 1.06 1.08 1.09 T:deoxysi256v141 1.13 1.14 1.15 T:deoxysneq128128v1 1.10 1.14 1.19 T:aeadaes256ocbtaglen128v1 1.15 1.16 1.17 T:aes256otrpv3 1.16 1.17 1.18 T:deoxyseq128128v1 1.23 1.24 1.25 T:deoxysneq256128v1 1.24 1.26 1.26 T:deoxyseq256128v1 1.95 1.98 2.02 T:lunarkeyakv2 1.98 2.01 2.05 T:oceankeyakv2 2.13 2.15 2.16 T:norx6441v3 2.14 2.15 2.16 T:norx6444v3 2.14 2.15 2.17 T:norx6441v2 2.35 2.37 2.40 T:seakeyakv2 2.58 2.59 2.61 T:norx6441v1 3.24 3.26 3.28 T:norx6461v3 3.27 3.29 3.31 T:norx6461v2 3.39 3.40 3.42 T:norx6444v2 3.55 3.57 3.59 T:lakekeyakv2 3.65 3.67 3.71 T:lakekeyakv1 3.86 3.88 3.90 T:norx6461v1 3.87 3.89 3.92 T:norx3241v2 3.87 3.89 3.91 T:norx3241v3 4.31 4.32 4.34 T:norx6444v1 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.51 T:aes128n12t8silcv2 4.50 4.50 4.51 T:aes128n12t8clocv3 4.50 4.50 4.51 T:aes128n12t8silcv3 4.50 4.50 4.51 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.67 4.69 4.71 T:norx3241v1 5.67 5.71 5.75 T:ketjemajorv2 5.81 5.83 5.85 T:norx3261v2 5.84 5.86 5.88 T:norx3261v3 6.24 6.25 6.25 T:aes256otrsv3 6.83 6.86 6.88 T:riverkeyakv2 6.84 6.87 6.89 T:acorn128v2 6.79 6.98 7.14 T:acorn128v3 7.00 7.02 7.04 T:ascon128av11 7.00 7.04 7.08 T:ascon96v1 7.22 7.24 7.27 ascon128av12 7.46 7.48 7.50 T:norx3261v1 7.66 7.71 7.74 T:ketjeminorv2 9.00 9.00 9.01 T:aesjambuv1 10.49 10.52 10.54 T:ascon128v1 10.49 10.53 10.56 T:ascon128v11 10.59 10.63 10.65 ascon128v12 12.46 12.49 12.56 T:aes128otrsv2 12.46 12.53 12.64 T:aes128otrsv1 13.04 13.06 13.09 T:aes128n12clocv1 13.05 13.07 13.09 T:aes128n8clocv1 13.48 13.55 13.59 T:aes128otrpv1 13.68 13.71 13.73 T:aes128otrpv2 14.16 14.18 14.20 T:twine80n6t4clocv3 15.16 15.17 15.20 T:twine80n6t4clocv2 16.38 16.41 16.45 T:aes256otrsv1 16.37 16.45 16.48 T:aes256otrsv2 18.03 18.05 18.09 T:aes256otrpv1 18.03 18.06 18.09 T:aes256otrpv2 23.35 23.39 23.65 T:ketjesrv1 24.19 24.22 24.24 T:aeadaes128ocbtaglen96v1 24.19 24.22 24.25 T:aeadaes128ocbtaglen64v1 25.89 25.92 25.94 T:colm127v1 26.35 26.38 26.41 T:ketjesrv2 26.50 26.54 26.60 T:proest256otrv1 28.60 28.62 28.66 T:aeadaes192ocbtaglen64v1 28.62 28.64 28.67 T:aeadaes192ocbtaglen96v1 33.07 33.08 33.10 T:aeadaes256ocbtaglen96v1 33.06 33.08 33.10 T:aeadaes256ocbtaglen64v1 50.52 50.64 50.75 T:ketjejrv1 55.47 55.51 55.55 T:proest128otrv1 56.05 56.23 56.47 T:aezv1 67.34 67.40 68.08 T:present80n6t4silcv3 77.27 77.42 77.48 T:deoxysneq128128v13 77.48 77.89 80.11 T:deoxyseq128128v13 87.93 89.29 89.39 T:ketjejrv2 120.73 120.77 120.91 T:deoxyseq256128v13 121.19 121.56 122.53 T:deoxysneq256128v13 127.34 127.38 127.50 T:led80n6t4silcv3 326.36 327.00 327.29 T:acorn128 2038.52 2039.60 2041.64 T:led80n6silcv1 2040.68 2042.65 2043.66 T:led80n6t4silcv2 2267.61 2270.43 2271.23 T:present80n6t4silcv2 2268.23 2270.57 2271.32 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv1 0.18? 0.19? 0.20? T:tiaoxinv2 0.25 0.25 0.26 aegis128l 0.29 0.29 0.30 T:aezv4 0.29 0.29 0.30 T:aezv3 0.32 0.33 0.33 T:aezv5 0.49 0.50 0.50 aegis256 0.52 0.52 0.52 T:aegis128 0.61 0.62 0.63 T:morus1280128v2 0.09? 0.62? 1.17? T:aeadaes128ocbtaglen128v1 0.62 0.62 0.63 T:morus1280256v2 0.61 0.63 0.64 T:morus1280256v1 0.61 0.63 0.64 T:morus1280128v1 0.67 0.69 0.71 aes256gcmv1 0.68 0.71 0.72 T:aes128gcmv1 0.74 0.74 0.75 T:aes128otrcv3 0.20? 0.75? 1.28? T:aeadaes192ocbtaglen128v1 0.89 0.89 0.90 T:aes128otrpv3 0.92 0.93 0.94 T:deoxysi128v141 0.93 0.94 0.94 T:colm0v1 0.93 0.94 0.95 T:deoxysii128v141 0.96 0.96 0.96 T:aes256otrcv3 1.01 1.02 1.03 T:morus640128v2 1.04 1.04 1.05 T:morus640128v1 1.04 1.05 1.06 T:deoxysi256v141 1.04 1.05 1.06 T:deoxysii256v141 1.13 1.14 1.15 T:deoxysneq128128v1 1.10 1.15 1.19 T:aeadaes256ocbtaglen128v1 1.15 1.16 1.17 T:aes256otrpv3 1.17 1.18 1.19 T:deoxyseq128128v1 1.21 1.23 1.24 T:deoxysneq256128v1 1.27 1.29 1.30 T:deoxyseq256128v1 1.96 2.00 2.03 T:lunarkeyakv2 1.98 2.02 2.03 T:oceankeyakv2 2.13 2.15 2.17 T:norx6441v3 2.13 2.15 2.17 T:norx6444v3 2.13 2.15 2.17 T:norx6441v2 2.35 2.37 2.40 T:seakeyakv2 2.58 2.59 2.61 T:norx6441v1 3.22 3.24 3.26 T:norx6461v3 3.25 3.26 3.28 T:norx6461v2 3.40 3.42 3.44 T:norx6444v2 3.55 3.57 3.58 T:lakekeyakv2 3.65 3.67 3.69 T:lakekeyakv1 3.84 3.86 3.88 T:norx6461v1 3.88 3.90 3.92 T:norx3241v3 3.88 3.91 3.93 T:norx3241v2 4.31 4.33 4.34 T:norx6444v1 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.68 4.70 4.72 T:norx3241v1 5.69 5.74 5.77 T:ketjemajorv2 5.80 5.83 5.85 T:norx3261v2 5.83 5.86 5.88 T:norx3261v3 6.24 6.25 6.25 T:aes256otrsv3 6.84 6.87 6.89 T:riverkeyakv2 6.79 7.00 7.17 T:acorn128v3 6.97 7.00 7.17 T:ascon128av11 6.92 7.01 7.04 T:acorn128v2 7.09 7.12 7.15 T:ascon96v1 7.22 7.23 7.25 ascon128av12 7.47 7.48 7.51 T:norx3261v1 7.68 7.73 7.77 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.32 10.36 10.42 T:ascon128v11 10.32 10.37 10.43 T:ascon128v1 10.60 10.63 10.65 ascon128v12 12.44 12.49 12.64 T:aes128otrsv1 12.45 12.51 12.56 T:aes128otrsv2 13.05 13.07 13.10 T:aes128n12clocv1 13.05 13.07 13.11 T:aes128n8clocv1 13.52 13.56 13.57 T:aes128otrpv1 13.68 13.73 13.76 T:aes128otrpv2 14.18 14.20 14.21 T:twine80n6t4clocv3 15.16 15.18 15.20 T:twine80n6t4clocv2 16.37 16.42 16.46 T:aes256otrsv1 16.38 16.44 16.47 T:aes256otrsv2 18.04 18.06 18.09 T:aes256otrpv2 18.02 18.08 18.10 T:aes256otrpv1 23.34 23.39 23.66 T:ketjesrv1 24.18 24.21 24.24 T:aeadaes128ocbtaglen64v1 24.18 24.23 24.28 T:aeadaes128ocbtaglen96v1 25.94 25.98 26.02 T:colm127v1 26.34 26.38 26.41 T:ketjesrv2 26.49 26.54 26.57 T:proest256otrv1 28.60 28.62 28.66 T:aeadaes192ocbtaglen64v1 28.63 28.65 28.67 T:aeadaes192ocbtaglen96v1 33.04 33.10 33.14 T:aeadaes256ocbtaglen96v1 33.05 33.11 33.16 T:aeadaes256ocbtaglen64v1 50.50 50.61 50.73 T:ketjejrv1 55.46 55.50 55.55 T:proest128otrv1 56.07 56.24 56.50 T:aezv1 67.35 67.40 68.02 T:present80n6t4silcv3 77.21 77.42 77.48 T:deoxysneq128128v13 77.60 78.07 80.63 T:deoxyseq128128v13 88.28 89.27 89.40 T:ketjejrv2 120.81 120.96 121.12 T:deoxyseq256128v13 121.11 121.42 122.35 T:deoxysneq256128v13 127.30 127.37 127.51 T:led80n6t4silcv3 335.95 336.14 336.30 T:acorn128 2037.61 2039.71 2041.46 T:led80n6silcv1 2039.36 2041.92 2043.41 T:led80n6t4silcv2 2267.50 2270.29 2271.12 T:present80n6t4silcv2 2267.70 2270.43 2271.15 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv2 0.19 0.19 0.20 T:tiaoxinv1 0.25 0.26 0.26 aegis128l 0.29 0.29 0.30 T:aezv3 0.29 0.30 0.30 T:aezv4 0.32 0.33 0.33 T:aezv5 0.49 0.50 0.51 aegis256 0.52 0.52 0.52 T:aegis128 0.61 0.62 0.64 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v2 0.09? 0.62? 1.15? T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:morus1280256v2 0.62 0.63 0.64 T:morus1280128v1 0.67 0.69 0.71 aes256gcmv1 0.65 0.70 0.72 T:aes128gcmv1 0.74 0.74 0.74 T:aes128otrcv3 0.22? 0.75? 1.28? T:aeadaes192ocbtaglen128v1 0.89 0.89 0.90 T:aes128otrpv3 0.93 0.94 0.95 T:deoxysi128v141 0.92 0.94 0.97 T:colm0v1 0.94 0.94 0.96 T:deoxysii128v141 0.96 0.96 0.97 T:aes256otrcv3 1.02 1.03 1.04 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.03 1.05 1.06 T:deoxysi256v141 1.05 1.05 1.06 T:deoxysii256v141 1.13 1.14 1.15 T:deoxysneq128128v1 1.11 1.15 1.19 T:aeadaes256ocbtaglen128v1 1.16 1.16 1.17 T:aes256otrpv3 1.17 1.18 1.19 T:deoxyseq128128v1 1.21 1.23 1.26 T:deoxysneq256128v1 1.27 1.29 1.30 T:deoxyseq256128v1 1.97 2.00 2.03 T:lunarkeyakv2 1.99 2.02 2.04 T:oceankeyakv2 2.13 2.15 2.17 T:norx6441v3 2.14 2.15 2.17 T:norx6444v3 2.14 2.16 2.17 T:norx6441v2 2.36 2.38 2.39 T:seakeyakv2 2.58 2.60 2.61 T:norx6441v1 3.23 3.24 3.25 T:norx6461v3 3.25 3.26 3.28 T:norx6461v2 3.40 3.42 3.45 T:norx6444v2 3.55 3.57 3.59 T:lakekeyakv2 3.65 3.68 3.71 T:lakekeyakv1 3.85 3.86 3.88 T:norx6461v1 3.88 3.89 3.91 T:norx3241v3 3.89 3.92 3.93 T:norx3241v2 4.31 4.33 4.35 T:norx6444v1 4.44 4.48 4.51 T:aes128n12t8clocv3 4.48 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n8t8silcv2 4.49 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.49 4.50 4.51 T:aes128n8t8clocv2 4.68 4.69 4.71 T:norx3241v1 5.70 5.75 5.78 T:ketjemajorv2 5.81 5.82 5.84 T:norx3261v2 5.84 5.86 5.87 T:norx3261v3 6.24 6.25 6.25 T:aes256otrsv3 6.84 6.87 6.89 T:riverkeyakv2 6.94 6.97 7.11 T:ascon128av11 6.80 7.00 7.16 T:acorn128v3 6.87 7.01 7.04 T:acorn128v2 7.07 7.09 7.13 T:ascon96v1 7.20 7.23 7.26 ascon128av12 7.47 7.48 7.50 T:norx3261v1 7.68 7.72 7.75 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.33 10.37 10.43 T:ascon128v11 10.33 10.38 10.45 T:ascon128v1 10.60 10.63 10.65 ascon128v12 12.44 12.50 12.65 T:aes128otrsv1 12.44 12.51 12.56 T:aes128otrsv2 13.03 13.06 13.09 T:aes128n12clocv1 13.05 13.07 13.10 T:aes128n8clocv1 13.53 13.58 13.60 T:aes128otrpv1 13.69 13.74 13.77 T:aes128otrpv2 14.18 14.20 14.21 T:twine80n6t4clocv3 15.17 15.19 15.20 T:twine80n6t4clocv2 16.37 16.41 16.44 T:aes256otrsv1 16.38 16.44 16.49 T:aes256otrsv2 18.02 18.06 18.09 T:aes256otrpv1 18.04 18.07 18.10 T:aes256otrpv2 23.35 23.42 23.67 T:ketjesrv1 24.20 24.23 24.27 T:aeadaes128ocbtaglen64v1 24.18 24.25 24.29 T:aeadaes128ocbtaglen96v1 25.90 25.94 25.99 T:colm127v1 26.34 26.39 26.42 T:ketjesrv2 26.49 26.53 26.58 T:proest256otrv1 28.62 28.65 28.69 T:aeadaes192ocbtaglen64v1 28.65 28.67 28.69 T:aeadaes192ocbtaglen96v1 33.06 33.12 33.15 T:aeadaes256ocbtaglen64v1 33.04 33.12 33.16 T:aeadaes256ocbtaglen96v1 50.50 50.61 50.69 T:ketjejrv1 55.47 55.50 55.53 T:proest128otrv1 56.09 56.26 56.54 T:aezv1 67.37 67.44 68.01 T:present80n6t4silcv3 77.29 77.49 77.55 T:deoxysneq128128v13 77.61 78.02 80.24 T:deoxyseq128128v13 88.08 89.25 89.39 T:ketjejrv2 120.88 120.99 121.17 T:deoxyseq256128v13 121.02 121.19 122.34 T:deoxysneq256128v13 127.32 127.40 127.48 T:led80n6t4silcv3 335.95 336.15 336.28 T:acorn128 2038.32 2039.81 2041.75 T:led80n6silcv1 2039.35 2042.11 2043.28 T:led80n6t4silcv2 2267.98 2270.37 2271.27 T:present80n6silcv1 2267.47 2270.53 2271.20 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.30 0.30 T:tiaoxinv2 0.29 0.30 0.30 T:tiaoxinv1 0.33 0.33 0.34 aegis128l 0.58 0.58 0.58 aegis256 0.59 0.59 0.59 T:aegis128 0.59 0.60 0.60 T:aezv4 0.61 0.61 0.62 T:aezv3 0.62 0.62 0.63 T:aezv5 0.79 0.79 0.80 T:morus1280256v1 0.79 0.79 0.80 T:morus1280128v1 0.79? 0.79? 1.17? T:aeadaes128ocbtaglen128v1 0.80 0.80 0.81 T:morus1280256v2 0.80 0.81 0.81 T:morus1280128v2 0.94? 0.94? 1.61? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.96 T:aes128otrpv3 1.00 1.01 1.01 T:aes128otrcv3 1.12 1.13 1.14 T:deoxysi128v141 1.18 1.19 1.20 T:aes128gcmv1 1.20 1.20 1.21 T:morus640128v1 1.20 1.21 1.21 T:aeadaes256ocbtaglen128v1 1.21 1.22 1.22 T:morus640128v2 1.27 1.27 1.27 T:aes256otrpv3 1.30 1.32 1.32 T:deoxysi256v141 1.31 1.32 1.33 T:deoxysneq128128v1 1.33 1.33 1.34 aes256gcmv1 1.34 1.34 1.35 T:aes256otrcv3 1.42 1.43 1.44 T:deoxysneq256128v1 1.66 1.67 1.69 T:deoxysii128v141 1.82 1.82 1.83 T:colm0v1 1.84 1.85 1.86 T:deoxysii256v141 1.93 1.96 1.97 T:deoxyseq128128v1 2.14 2.15 2.17 T:deoxyseq256128v1 2.30 2.31 2.32 T:norx6444v3 2.49 2.49 2.50 T:norx6441v2 2.49 2.50 2.51 T:norx6441v3 2.74 2.74 2.74 T:aes128otrsv3 2.91 2.92 2.93 T:norx6441v1 3.60 3.60 3.61 T:seakeyakv2 3.75 3.75 3.76 T:norx6461v3 3.77 3.77 3.78 T:norx6461v2 3.78 3.78 3.78 T:aes256otrsv3 4.18 4.19 4.20 T:norx3241v2 4.19 4.20 4.21 T:norx3241v3 4.32 4.35 4.38 T:lakekeyakv2 4.37 4.38 4.40 T:norx6461v1 4.57 4.58 4.59 T:lakekeyakv1 4.59 4.59 4.59 T:aes128n12t8clocv3 4.59 4.59 4.60 T:aes128n12t8clocv2 4.59 4.59 4.60 T:aes128n8t8clocv2 4.63 4.63 4.63 T:aes128n8t8silcv2 4.63 4.63 4.63 T:aes128n12t8silcv3 4.63 4.63 4.63 T:aes128n12t8silcv2 4.88 4.88 4.90 T:oceankeyakv2 4.94 4.95 4.96 T:norx3241v1 5.25 5.26 5.27 T:norx6444v2 6.18 6.18 6.20 T:norx6444v1 6.31 6.32 6.33 T:norx3261v3 6.31 6.33 6.34 T:norx3261v2 7.27 7.28 7.30 T:ascon128av11 7.29 7.31 7.32 T:ascon96v1 7.44 7.45 7.47 ascon128av12 7.50 7.52 7.62 T:acorn128v3 7.57 7.58 7.59 T:riverkeyakv2 7.87 7.88 7.90 T:norx3261v1 8.29 8.31 8.34 T:acorn128v2 8.38 8.39 8.40 T:ketjemajorv2 8.39 8.40 8.42 T:lunarkeyakv2 9.20 9.20 9.21 T:aesjambuv1 9.62 9.64 9.66 T:ketjeminorv2 10.70 10.71 10.73 T:ascon128v11 10.70 10.71 10.72 T:ascon128v1 10.77 10.81 10.83 ascon128v12 14.37 14.41 14.44 T:aes128otrsv1 14.39 14.43 14.48 T:aes128otrsv2 14.60 14.62 14.65 T:aes128otrpv1 14.62 14.63 14.64 T:twine80n6t4clocv3 14.72 14.73 14.75 T:aes128otrpv2 15.65 15.66 15.68 T:twine80n6t4clocv2 18.31 18.35 18.38 T:aes256otrsv1 18.39 18.41 18.43 T:aes256otrsv2 19.07 19.09 19.12 T:aes128n12clocv1 19.09 19.11 19.14 T:aes128n8clocv1 19.29 19.30 19.31 T:aes256otrpv1 19.42 19.43 19.44 T:aes256otrpv2 25.12 25.13 25.15 T:aeadaes128ocbtaglen64v1 25.14 25.15 25.17 T:aeadaes128ocbtaglen96v1 27.26 27.31 27.53 T:ketjesrv1 28.67 28.68 28.69 T:proest256otrv1 29.54 29.55 29.62 T:ketjesrv2 29.61 29.62 29.63 T:aeadaes192ocbtaglen96v1 29.61 29.62 29.64 T:aeadaes192ocbtaglen64v1 34.18 34.20 34.22 T:aeadaes256ocbtaglen64v1 34.20 34.22 34.23 T:aeadaes256ocbtaglen96v1 41.20 41.21 41.23 T:colm127v1 56.22 56.26 56.32 T:ketjejrv1 57.30 57.32 57.36 T:proest128otrv1 68.60 68.64 68.99 T:present80n6t4silcv3 77.53 77.61 77.73 T:deoxysneq128128v13 92.95 93.28 93.33 T:ketjejrv2 114.32 114.43 114.59 T:aezv1 118.50 118.70 124.40 T:deoxyseq128128v13 122.15 122.25 123.22 T:deoxysneq256128v13 128.90 128.94 128.98 T:led80n6t4silcv3 184.55 184.67 184.76 T:deoxyseq256128v13 371.55 371.78 371.93 T:acorn128 3073.09 3073.86 3074.92 T:led80n6silcv1 3079.42 3079.82 3080.53 T:led80n6t4silcv2 3422.08 3422.45 3424.06 T:present80n6t4silcv2 3422.20 3422.66 3424.20 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.34 0.35 0.35 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.37 T:tiaoxinv2 0.59 0.59 0.59 T:aezv4 0.59 0.59 0.60 T:aegis128 0.60 0.60 0.60 T:aezv3 0.61 0.62 0.62 T:aezv5 0.62 0.62 0.62 aegis256 0.81 0.81 0.82 T:morus1280256v1 0.81 0.81 0.82 T:morus1280128v1 0.81 0.82 0.83 T:morus1280128v2 0.82 0.82 0.82 T:morus1280256v2 0.83? 0.83? 1.19? T:aeadaes128ocbtaglen128v1 0.96? 0.96? 1.30? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.02 1.02 1.03 T:aes128otrcv3 1.20 1.21 1.21 T:morus640128v1 1.21 1.22 1.22 T:morus640128v2 1.26 1.27 1.27 T:aeadaes256ocbtaglen128v1 1.28 1.28 1.28 T:aes256otrpv3 1.36 1.36 1.38 T:deoxysi128v141 1.35 1.37 1.38 T:aes128gcmv1 1.37 1.37 1.37 T:aes256otrcv3 1.54 1.54 1.55 T:deoxysi256v141 1.61 1.61 1.62 T:deoxysneq128128v1 1.69 1.69 1.70 T:deoxysneq256128v1 1.68 1.70 1.72 T:deoxysii128v141 1.71 1.73 1.76 aes256gcmv1 1.84 1.84 1.85 T:colm0v1 1.92 1.92 1.94 T:deoxysii256v141 2.31 2.32 2.33 T:norx6444v3 2.44 2.44 2.45 T:deoxyseq128128v1 2.46 2.47 2.47 T:norx6441v2 2.46 2.47 2.48 T:norx6441v3 2.60 2.60 2.61 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.88 2.89 2.90 T:norx6441v1 3.64 3.65 3.67 T:seakeyakv2 3.71 3.73 3.74 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.80 3.81 3.81 T:aes256otrsv3 4.15 4.16 4.17 T:norx3241v3 4.17 4.18 4.19 T:norx3241v2 4.32 4.34 4.39 T:lakekeyakv2 4.34 4.35 4.37 T:norx6461v1 4.57 4.57 4.57 T:aes128n12t8clocv2 4.56 4.57 4.57 T:aes128n12t8clocv3 4.57 4.57 4.57 T:aes128n8t8clocv2 4.61 4.61 4.61 T:aes128n8t8silcv2 4.61 4.61 4.61 T:aes128n12t8silcv2 4.61 4.61 4.61 T:aes128n12t8silcv3 4.61 4.61 4.63 T:lakekeyakv1 4.89 4.90 4.91 T:norx3241v1 4.90 4.91 4.93 T:oceankeyakv2 5.27 5.28 5.29 T:norx6444v2 6.15 6.16 6.17 T:norx6444v1 6.30 6.31 6.32 T:norx3261v3 6.30 6.31 6.32 T:norx3261v2 7.37 7.38 7.40 T:ascon96v1 7.33 7.40 7.41 T:ascon128av11 7.43 7.43 7.44 ascon128av12 7.66 7.68 7.69 T:riverkeyakv2 7.85 7.86 7.87 T:norx3261v1 7.86 7.87 7.98 T:acorn128v3 8.43 8.45 8.48 T:lunarkeyakv2 8.44 8.45 8.47 T:ketjemajorv2 8.40 8.46 8.47 T:acorn128v2 9.35 9.36 9.36 T:aesjambuv1 10.02 10.05 10.08 T:ketjeminorv2 10.59 10.62 10.66 T:ascon128v1 10.59 10.63 10.67 T:ascon128v11 10.78 10.79 10.81 ascon128v12 14.55 14.58 14.64 T:aes128otrsv1 14.55 14.59 14.62 T:aes128otrsv2 14.74 14.74 14.75 T:twine80n6t4clocv3 14.79 14.81 14.83 T:aes128otrpv1 14.97 15.01 15.05 T:aes128otrpv2 15.63 15.65 15.66 T:twine80n6t4clocv2 18.58 18.60 18.63 T:aes128n12clocv1 18.60 18.64 18.67 T:aes256otrsv2 18.69 18.70 18.71 T:aes256otrsv1 18.86 18.87 18.89 T:aes128n8clocv1 19.49 19.51 19.52 T:aes256otrpv1 19.51 19.53 19.55 T:aes256otrpv2 27.94 27.99 28.20 T:ketjesrv1 28.66 28.67 28.69 T:proest256otrv1 29.61 29.65 29.69 T:aeadaes128ocbtaglen64v1 29.65 29.70 29.73 T:aeadaes128ocbtaglen96v1 29.91 29.93 29.96 T:ketjesrv2 35.14 35.16 35.20 T:aeadaes192ocbtaglen96v1 35.13 35.17 35.31 T:aeadaes192ocbtaglen64v1 40.74 40.79 40.84 T:aeadaes256ocbtaglen64v1 40.79 40.82 40.86 T:aeadaes256ocbtaglen96v1 49.91 49.99 50.22 T:colm127v1 56.89 56.94 57.03 T:ketjejrv1 57.46 57.49 57.51 T:proest128otrv1 68.68 68.70 69.07 T:present80n6t4silcv3 92.89 93.15 93.32 T:ketjejrv2 93.64 93.69 93.72 T:deoxysneq128128v13 114.28 114.50 114.68 T:aezv1 118.51 118.62 124.30 T:deoxyseq128128v13 128.61 128.79 129.50 T:led80n6t4silcv3 139.90 140.03 141.06 T:deoxysneq256128v13 184.49 184.56 184.65 T:deoxyseq256128v13 398.71 398.81 399.11 T:acorn128 3073.45 3073.85 3074.61 T:led80n6silcv1 3078.92 3079.59 3080.43 T:led80n6t4silcv2 3421.84 3422.35 3423.84 T:present80n6silcv1 3421.95 3422.46 3424.01 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.34 0.35 0.35 aegis128l 0.36 0.36 0.36 T:aezv4 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.37 T:tiaoxinv2 0.36 0.37 0.37 T:aezv3 0.38 0.38 0.38 T:aezv5 0.59 0.59 0.60 T:aegis128 0.62 0.62 0.62 aegis256 0.81 0.81 0.81 T:morus1280128v1 0.81 0.81 0.82 T:morus1280256v1 0.82 0.82 0.82 T:morus1280128v2 0.82 0.82 0.82 T:morus1280256v2 0.83? 0.83? 1.16? T:aeadaes128ocbtaglen128v1 0.96? 0.96? 1.61? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.02 1.02 1.03 T:aes128otrcv3 1.20 1.21 1.21 T:morus640128v1 1.21 1.21 1.22 T:morus640128v2 1.26 1.26 1.27 T:aeadaes256ocbtaglen128v1 1.28 1.28 1.28 T:aes256otrpv3 1.36 1.37 1.38 T:deoxysi128v141 1.37 1.37 1.37 T:aes256otrcv3 1.36 1.37 1.38 T:aes128gcmv1 1.53 1.54 1.54 T:deoxysi256v141 1.58 1.59 1.60 T:deoxysneq128128v1 1.67 1.67 1.68 T:deoxysneq256128v1 1.69 1.70 1.72 T:deoxysii128v141 1.71 1.73 1.76 aes256gcmv1 1.84 1.85 1.85 T:colm0v1 1.92 1.93 1.94 T:deoxysii256v141 2.31 2.32 2.32 T:norx6444v3 2.44 2.45 2.45 T:deoxyseq128128v1 2.46 2.47 2.48 T:norx6441v2 2.46 2.47 2.48 T:norx6441v3 2.60 2.60 2.61 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.88 2.89 2.90 T:norx6441v1 3.65 3.66 3.67 T:seakeyakv2 3.72 3.73 3.74 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.80 3.81 3.81 T:aes256otrsv3 4.15 4.16 4.17 T:norx3241v3 4.16 4.17 4.18 T:norx3241v2 4.34 4.34 4.35 T:norx6461v1 4.33 4.35 4.40 T:lakekeyakv2 4.56 4.56 4.59 T:aes128n12t8clocv3 4.56 4.56 4.59 T:aes128n12t8clocv2 4.56 4.56 4.57 T:aes128n8t8clocv2 4.59 4.60 4.60 T:aes128n8t8silcv2 4.60 4.60 4.60 T:aes128n12t8silcv2 4.60 4.60 4.60 T:aes128n12t8silcv3 4.62 4.63 4.64 T:lakekeyakv1 4.89 4.90 4.91 T:norx3241v1 4.92 4.93 4.94 T:oceankeyakv2 5.29 5.30 5.32 T:norx6444v2 6.16 6.17 6.19 T:norx6444v1 6.30 6.31 6.32 T:norx3261v3 6.30 6.31 6.33 T:norx3261v2 7.36 7.37 7.39 T:ascon96v1 7.32 7.38 7.41 T:ascon128av11 7.42 7.44 7.46 ascon128av12 7.68 7.69 7.70 T:riverkeyakv2 7.85 7.85 7.86 T:norx3261v1 7.86 7.88 7.99 T:acorn128v3 8.43 8.45 8.48 T:ketjemajorv2 8.41 8.45 8.47 T:acorn128v2 8.45 8.46 8.47 T:lunarkeyakv2 9.35 9.36 9.36 T:aesjambuv1 10.03 10.06 10.08 T:ketjeminorv2 10.59 10.61 10.63 T:ascon128v11 10.57 10.61 10.65 T:ascon128v1 10.77 10.79 10.80 ascon128v12 14.57 14.59 14.64 T:aes128otrsv2 14.57 14.61 14.67 T:aes128otrsv1 14.74 14.75 14.76 T:twine80n6t4clocv3 14.81 14.83 14.86 T:aes128otrpv1 14.97 15.01 15.05 T:aes128otrpv2 15.63 15.64 15.66 T:twine80n6t4clocv2 18.57 18.60 18.63 T:aes128n12clocv1 18.62 18.65 18.67 T:aes256otrsv2 18.70 18.72 18.74 T:aes256otrsv1 18.86 18.87 18.89 T:aes128n8clocv1 19.51 19.53 19.55 T:aes256otrpv1 19.53 19.54 19.56 T:aes256otrpv2 27.97 28.01 28.20 T:ketjesrv1 28.66 28.67 28.68 T:proest256otrv1 29.61 29.65 29.69 T:aeadaes128ocbtaglen64v1 29.65 29.69 29.73 T:aeadaes128ocbtaglen96v1 29.94 29.95 29.97 T:ketjesrv2 35.14 35.16 35.19 T:aeadaes192ocbtaglen96v1 35.15 35.19 35.33 T:aeadaes192ocbtaglen64v1 40.74 40.78 40.81 T:aeadaes256ocbtaglen64v1 40.78 40.81 40.84 T:aeadaes256ocbtaglen96v1 49.91 49.96 50.17 T:colm127v1 56.92 56.98 57.05 T:ketjejrv1 57.47 57.49 57.51 T:proest128otrv1 68.68 68.72 69.09 T:present80n6t4silcv3 92.91 93.15 93.34 T:ketjejrv2 93.69 93.71 93.74 T:deoxysneq128128v13 114.23 114.40 114.58 T:aezv1 118.52 118.62 124.54 T:deoxyseq128128v13 128.60 128.67 129.52 T:led80n6t4silcv3 139.94 140.10 141.11 T:deoxysneq256128v13 184.42 184.56 184.70 T:deoxyseq256128v13 398.69 398.76 399.08 T:acorn128 3073.45 3073.96 3074.89 T:led80n6silcv1 3078.48 3079.23 3080.45 T:led80n6t4silcv2 3421.63 3422.26 3423.86 T:present80n6silcv1 3422.05 3422.49 3423.93 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.59 1.65 1.68 T:aegis128 1.76 1.83 1.89 aegis128l 2.11 2.15 2.27 T:tiaoxinv2 2.12 2.17 2.23 T:tiaoxinv1 2.15 2.18 2.23 aegis256 2.69 2.71 2.76 T:aezv5 2.68 2.76 2.83 T:aezv4 2.94 2.98 3.05 T:aezv3 4.01 4.05 4.10 T:aes128otrpv3 4.07 4.13 4.22 T:morus640128v1 4.14 4.16 4.28 T:aeadaes256ocbtaglen128v1 4.25 4.31 4.46 T:morus1280256v1 4.27 4.34 4.45 T:morus1280128v1 4.29? 4.35? 12.77? T:aeadaes128ocbtaglen128v1 4.33 4.36 4.43 T:morus640128v2 4.52 4.58 4.64 T:morus1280256v2 4.54 4.60 4.67 T:morus1280128v2 4.67? 4.78? 13.73? T:aeadaes192ocbtaglen128v1 4.99 5.01 5.04 T:aes128otrsv3 5.41 5.44 5.47 T:aes256otrpv3 5.59 5.63 5.66 T:colm0v1 5.58 5.67 5.77 T:deoxysneq128128v1 5.80 5.82 5.84 T:aes128otrcv3 5.89 5.91 5.96 T:aes128n12t8clocv2 5.90 5.93 5.96 T:aes128n12t8clocv3 5.92 5.97 6.02 T:aes128n8t8clocv2 6.15 6.22 6.28 T:deoxysi128v141 6.24 6.33 6.42 T:deoxysneq256128v1 6.47 6.52 6.58 T:aes128gcmv1 6.78 6.83 6.87 T:aes128n8t8silcv2 6.78 6.84 6.90 T:aes128n12t8silcv3 6.81 6.86 6.90 T:aes128n12t8silcv2 6.87 6.90 6.91 T:aes256otrsv3 7.29 7.33 7.37 T:deoxysi256v141 7.48 7.52 7.57 aes256gcmv1 7.84 7.87 7.91 T:aes256otrcv3 7.99 8.04 8.09 T:deoxyseq128128v1 8.19 8.26 8.38 T:norx6441v1 8.26 8.33 8.39 T:norx6441v2 8.27 8.37 8.45 T:norx6441v3 8.66 8.72 8.81 T:deoxysii128v141 9.80 9.87 9.93 T:deoxyseq256128v1 10.26 10.31 10.43 T:norx3241v1 10.31 10.41 10.54 T:norx3241v2 10.36 10.42 10.52 T:norx3241v3 10.80 10.90 11.05 T:ascon128av11 10.92 10.98 11.09 T:ascon96v1 11.12 11.24 11.38 ascon128av12 12.20 12.25 12.34 T:deoxysii256v141 12.25 12.34 12.41 T:norx6461v1 12.32 12.34 12.38 T:aesjambuv1 12.36 12.41 12.49 T:norx6461v3 12.39 12.46 12.55 T:norx6461v2 14.04 14.10 14.26 T:ascon128v11 14.00 14.14 14.28 T:ascon128v1 14.23 14.30 14.44 ascon128v12 15.05 15.11 15.34 T:lakekeyakv1 15.06 15.12 15.21 T:norx6444v3 15.42 15.49 15.60 T:norx3261v3 15.56 15.64 15.75 T:norx3261v2 16.35 16.43 16.50 T:norx3261v1 17.71 17.83 18.02 T:riverkeyakv2 18.69 18.85 19.04 T:lakekeyakv2 20.77 20.85 20.93 T:twine80n6t4clocv3 21.81 21.89 21.97 T:twine80n6t4clocv2 23.02 23.08 23.37 T:aes128n12clocv1 23.09 23.18 23.52 T:aes128n8clocv1 24.32 24.43 24.58 T:aes128otrsv2 24.31 24.46 24.83 T:aes128otrsv1 24.93 25.01 25.13 T:aes128otrpv2 25.23 25.28 25.43 T:aes128otrpv1 30.71 30.81 33.44 T:acorn128v3 30.92 31.05 31.38 T:aes256otrsv2 30.96 31.05 31.36 T:aes256otrsv1 32.04 32.21 32.66 T:ketjeminorv2 32.45 32.51 32.64 T:aes256otrpv2 32.64 32.70 32.93 T:acorn128v2 32.87 32.97 33.11 T:aes256otrpv1 33.53 33.58 33.78 T:seakeyakv2 37.87 37.99 38.22 T:norx6444v2 39.78 39.82 39.93 T:aeadaes128ocbtaglen96v1 39.79 39.90 40.11 T:aeadaes128ocbtaglen64v1 43.53 43.80 44.10 T:ketjesrv1 43.89 44.04 44.16 T:norx6444v1 46.02 46.07 46.17 T:aeadaes192ocbtaglen64v1 46.07 46.16 46.42 T:aeadaes192ocbtaglen96v1 49.25 49.44 49.72 T:ketjemajorv2 51.04 51.20 51.39 T:ketjesrv2 53.48 53.51 53.62 T:aeadaes256ocbtaglen64v1 53.57 53.60 53.93 T:aeadaes256ocbtaglen96v1 54.08 54.24 54.62 T:oceankeyakv2 60.55 60.62 60.96 T:colm127v1 74.65 75.15 75.43 T:ketjejrv1 82.17 82.49 82.82 T:proest256otrv1 84.70 84.86 85.11 T:present80n6t4silcv3 87.23 87.34 87.49 T:deoxysneq128128v13 110.69 110.88 111.22 T:proest128otrv1 123.59 124.17 124.67 T:ketjejrv2 132.23 132.46 132.80 T:aezv1 136.90 137.08 137.46 T:lunarkeyakv2 137.29 137.60 138.57 T:deoxysneq256128v13 147.09 147.37 152.29 T:deoxyseq128128v13 152.96 153.22 153.34 T:led80n6t4silcv3 229.24 229.37 229.62 T:deoxyseq256128v13 1306.34 1306.89 1307.53 T:acorn128 3439.81 3440.81 3442.53 T:led80n6silcv1 3446.47 3447.03 3447.91 T:led80n6t4silcv2 3829.43 3830.67 3832.21 T:present80n6t4silcv2 3830.72 3831.94 3833.83 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.72 1.75 1.78 T:aegis128 1.84 1.89 1.93 aegis128l 2.12 2.15 2.20 T:tiaoxinv1 2.12 2.16 2.21 T:tiaoxinv2 2.26 2.31 2.34 aegis256 2.67 2.70 2.77 T:aezv5 2.67 2.72 2.78 T:aezv4 2.95 2.97 3.01 T:aezv3 4.08 4.10 4.16 T:aes128otrpv3 4.13 4.17 4.23 T:morus640128v1 4.43 4.49 4.54 T:morus640128v2 4.41 4.49 4.60 T:morus1280128v1 4.43 4.50 4.62 T:morus1280256v1 4.66 4.71 4.78 T:morus1280128v2 4.69 4.74 4.81 T:morus1280256v2 4.72 4.77 4.99 T:aeadaes256ocbtaglen128v1 4.90? 4.94? 13.64? T:aeadaes128ocbtaglen128v1 5.21 5.22 5.25 T:aes128otrsv3 5.42? 5.46? 14.24? T:aeadaes192ocbtaglen128v1 5.47 5.50 5.58 T:aes256otrpv3 5.99 6.02 6.06 T:aes128otrcv3 6.05 6.07 6.10 T:aes128n12t8clocv2 6.06 6.09 6.12 T:aes128n12t8clocv3 6.09 6.14 6.19 T:aes128n8t8clocv2 6.41 6.45 6.49 T:colm0v1 6.64 6.72 6.78 T:aes128gcmv1 7.03 7.06 7.09 T:aes256otrsv3 6.99 7.07 7.28 T:aes128n8t8silcv2 7.01 7.07 7.16 T:aes128n12t8silcv2 7.03 7.08 7.12 T:aes128n12t8silcv3 7.65 7.71 7.81 aes256gcmv1 8.05 8.07 8.10 T:aes256otrcv3 8.32 8.37 8.43 T:norx6441v1 8.43 8.50 8.58 T:norx6441v2 8.48 8.57 8.67 T:norx6441v3 8.82 8.88 9.06 T:deoxysneq256128v1 8.91 8.99 9.07 T:deoxysneq128128v1 9.28 9.34 9.40 T:deoxysii128v141 9.76 9.83 9.89 T:deoxysi128v141 10.41 10.46 10.53 T:norx3241v1 10.50 10.57 10.65 T:norx3241v3 10.54 10.63 10.80 T:norx3241v2 10.88 10.96 11.07 T:ascon128av11 10.96 11.06 11.19 T:ascon96v1 11.20 11.31 11.43 ascon128av12 11.33 11.40 11.47 T:deoxysi256v141 11.77 11.84 11.92 T:deoxyseq128128v1 12.11 12.21 12.31 T:deoxyseq256128v1 12.45 12.51 12.58 T:norx6461v1 12.50 12.53 12.56 T:aesjambuv1 12.50 12.56 12.67 T:norx6461v2 12.58 12.64 12.71 T:norx6461v3 13.78 13.84 13.89 T:deoxysii256v141 13.92 14.01 14.15 T:ascon128v1 13.97 14.08 14.23 T:ascon128v11 14.26 14.36 14.50 ascon128v12 15.10 15.19 15.37 T:lakekeyakv1 15.15 15.22 15.28 T:norx6444v3 15.72 15.81 15.89 T:norx3261v2 15.79 15.88 15.98 T:norx3261v3 16.56 16.63 16.68 T:norx3261v1 17.82 17.91 18.11 T:riverkeyakv2 18.72 18.80 18.98 T:lakekeyakv2 21.02 21.14 21.23 T:twine80n6t4clocv3 21.83 21.90 21.98 T:twine80n6t4clocv2 22.81 22.87 22.96 T:aes128n12clocv1 23.04 23.11 23.28 T:aes128n8clocv1 24.41 24.54 24.82 T:aes128otrsv2 24.55 24.71 24.99 T:aes128otrsv1 25.16 25.28 25.42 T:aes128otrpv2 25.45 25.58 25.68 T:aes128otrpv1 30.51 30.64 33.42 T:acorn128v3 31.10 31.25 31.59 T:aes256otrsv1 31.13 31.26 31.59 T:aes256otrsv2 32.09 32.31 32.64 T:ketjeminorv2 32.78 32.87 32.95 T:aes256otrpv2 32.89 32.96 33.06 T:acorn128v2 33.03 33.21 33.30 T:aes256otrpv1 33.56 33.62 33.85 T:seakeyakv2 38.00 38.12 38.43 T:norx6444v2 43.90 44.00 44.15 T:norx6444v1 44.41 44.84 45.11 T:ketjesrv1 48.16 48.26 48.46 T:aeadaes128ocbtaglen64v1 48.17 48.39 48.80 T:aeadaes128ocbtaglen96v1 49.83 50.03 50.41 T:ketjemajorv2 51.72 51.99 52.22 T:ketjesrv2 54.32 54.50 55.04 T:oceankeyakv2 55.74 55.85 55.96 T:aeadaes192ocbtaglen64v1 55.78 55.89 55.99 T:aeadaes192ocbtaglen96v1 65.17 65.49 65.89 T:aeadaes256ocbtaglen64v1 65.14 65.58 66.17 T:aeadaes256ocbtaglen96v1 69.85 70.00 70.27 T:colm127v1 75.65 76.18 76.89 T:ketjejrv1 83.25 83.50 83.98 T:proest256otrv1 84.86 85.04 85.23 T:present80n6t4silcv3 103.24 103.46 103.62 T:deoxysneq128128v13 111.69 111.91 112.31 T:proest128otrv1 124.56 125.02 125.50 T:ketjejrv2 135.91 136.12 136.49 T:aezv1 137.17 137.40 137.66 T:lunarkeyakv2 147.23 147.77 152.18 T:deoxyseq128128v13 153.72 154.07 154.84 T:led80n6t4silcv3 154.92 155.25 156.38 T:deoxysneq256128v13 228.95 229.26 229.61 T:deoxyseq256128v13 1347.12 1347.67 1348.27 T:acorn128 3439.98 3441.38 3442.54 T:led80n6silcv1 3446.26 3446.72 3447.22 T:led80n6t4silcv2 3829.42 3830.49 3831.47 T:present80n6t4silcv2 3830.88 3831.95 3833.73 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.72 1.75 1.77 T:aegis128 1.86 1.89 1.97 aegis128l 2.09 2.13 2.19 T:tiaoxinv2 2.11 2.16 2.19 T:tiaoxinv1 2.17 2.20 2.35 T:aezv4 2.20 2.24 2.28 T:aezv5 2.23 2.25 2.28 T:aezv3 2.26 2.31 2.37 aegis256 4.07 4.10 4.15 T:aes128otrpv3 4.09 4.13 4.21 T:morus640128v1 4.42 4.46 4.51 T:morus640128v2 4.41 4.49 4.56 T:morus1280128v1 4.44 4.52 4.61 T:morus1280256v1 4.66 4.71 4.76 T:morus1280128v2 4.66 4.71 4.76 T:morus1280256v2 4.73 4.75 4.83 T:aeadaes256ocbtaglen128v1 4.89? 4.93? 12.76? T:aeadaes128ocbtaglen128v1 5.20 5.22 5.25 T:aes128otrsv3 5.40? 5.45? 13.55? T:aeadaes192ocbtaglen128v1 5.47 5.49 5.53 T:aes256otrpv3 5.91 5.93 6.03 T:aes128n12t8clocv2 5.91 5.94 6.04 T:aes128n12t8clocv3 5.96 5.99 6.14 T:aes128n8t8clocv2 6.00 6.00 6.04 T:aes128otrcv3 6.49 6.52 6.53 T:colm0v1 6.65 6.68 6.73 T:aes128gcmv1 6.71 6.78 6.87 T:aes128n8t8silcv2 6.72 6.79 6.90 T:aes128n12t8silcv2 6.74 6.83 6.99 T:aes128n12t8silcv3 7.04 7.06 7.07 T:aes256otrsv3 7.64 7.68 7.73 aes256gcmv1 8.05 8.06 8.09 T:aes256otrcv3 8.33 8.39 8.44 T:norx6441v1 8.32 8.40 8.59 T:deoxysneq256128v1 8.46 8.52 8.59 T:norx6441v2 8.50 8.56 8.65 T:deoxysneq128128v1 8.49 8.57 8.64 T:norx6441v3 9.28 9.36 9.40 T:deoxysii128v141 9.76 9.83 9.88 T:deoxysi128v141 10.43 10.48 10.57 T:norx3241v1 10.51 10.58 10.64 T:norx3241v3 10.51 10.61 10.76 T:norx3241v2 10.87 10.93 11.04 T:ascon128av11 10.85 10.96 11.05 T:ascon96v1 11.18 11.23 11.34 ascon128av12 11.34 11.41 11.46 T:deoxysi256v141 11.84 11.89 11.92 T:deoxyseq128128v1 12.14 12.22 12.38 T:deoxyseq256128v1 12.49 12.52 12.55 T:aesjambuv1 12.45 12.53 12.60 T:norx6461v1 12.51 12.58 12.66 T:norx6461v2 12.53 12.61 12.70 T:norx6461v3 13.75 13.81 13.87 T:deoxysii256v141 13.88 13.96 14.15 T:ascon128v1 13.92 14.06 14.21 T:ascon128v11 14.26 14.35 14.45 ascon128v12 15.12 15.19 15.28 T:norx6444v3 15.23 15.30 15.55 T:lakekeyakv1 15.78 15.84 15.90 T:norx3261v2 15.81 15.90 15.96 T:norx3261v3 16.53 16.57 16.62 T:norx3261v1 17.88 17.92 18.12 T:riverkeyakv2 18.77 18.88 19.08 T:lakekeyakv2 20.97 21.04 21.16 T:twine80n6t4clocv3 21.73 21.82 21.87 T:twine80n6t4clocv2 22.77 22.85 23.07 T:aes128n12clocv1 22.93 23.01 23.14 T:aes128n8clocv1 24.54 24.64 24.80 T:aes128otrsv2 24.55 24.70 24.85 T:aes128otrsv1 25.23 25.36 25.50 T:aes128otrpv2 25.42 25.61 25.74 T:aes128otrpv1 30.52 30.60 33.28 T:acorn128v3 31.11 31.26 31.50 T:aes256otrsv2 31.18 31.29 31.49 T:aes256otrsv1 32.34 32.55 32.83 T:ketjeminorv2 32.79 32.88 33.02 T:aes256otrpv2 32.89 32.96 33.02 T:acorn128v2 32.91 33.04 33.26 T:aes256otrpv1 33.61 33.71 33.86 T:seakeyakv2 38.01 38.16 38.49 T:norx6444v2 43.92 44.03 44.18 T:norx6444v1 44.42 44.88 45.21 T:ketjesrv1 48.14 48.23 48.41 T:aeadaes128ocbtaglen64v1 48.20 48.30 48.71 T:aeadaes128ocbtaglen96v1 49.86 50.16 50.61 T:ketjemajorv2 51.70 51.96 52.41 T:ketjesrv2 54.54 54.65 54.96 T:oceankeyakv2 55.74 55.85 55.95 T:aeadaes192ocbtaglen96v1 55.78 55.88 55.99 T:aeadaes192ocbtaglen64v1 65.14 65.31 65.79 T:aeadaes256ocbtaglen64v1 65.19 65.38 65.93 T:aeadaes256ocbtaglen96v1 69.61 69.73 69.96 T:colm127v1 75.40 75.88 76.49 T:ketjejrv1 80.81 81.05 81.39 T:proest256otrv1 84.83 84.97 85.21 T:present80n6t4silcv3 103.21 103.49 103.98 T:deoxysneq128128v13 111.62 111.87 112.16 T:proest128otrv1 124.54 125.19 125.56 T:ketjejrv2 135.70 135.97 136.38 T:aezv1 137.21 137.42 137.64 T:lunarkeyakv2 147.46 147.92 152.44 T:deoxyseq128128v13 153.34 153.88 154.46 T:led80n6t4silcv3 154.98 155.18 156.93 T:deoxysneq256128v13 229.26 229.50 229.75 T:deoxyseq256128v13 1347.11 1347.59 1348.29 T:acorn128 3439.54 3440.87 3442.20 T:led80n6silcv1 3446.18 3446.80 3447.43 T:led80n6t4silcv2 3828.92 3829.99 3830.89 T:present80n6t4silcv2 3830.77 3831.72 3832.69 T:present80n6silcv1