VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20250922

[Page version: 20251103 11:56:53]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.20? 0.21? 0.23? T:tiaoxinv1 0.19? 0.22? 0.23? T:tiaoxinv2 0.25 0.25 0.26 T:aegis128l 0.25 0.26 0.27 aegis128l 0.40 0.41 0.41 aegis256 0.44 0.47 0.47 T:aegis128 0.62 0.62 0.63 T:aezv4 0.61 0.63 0.63 T:aezv5 0.62 0.63 0.63 T:aezv3 0.62 0.63 0.64 T:morus1280128v2 0.63 0.63 0.64 T:aes128otrcv3 0.63 0.63 0.64 T:morus1280256v1 0.63 0.63 0.65 T:morus1280256v2 0.63 0.64 0.64 T:morus1280128v1 0.64 0.65 0.67 T:aes128otrpv3 0.64 0.66 0.67 T:aes128otrsv3 0.65 0.67 0.69 T:aeadaes128ocbtaglen128v1 0.40? 0.75? 0.81? T:aeadaes192ocbtaglen128v1 0.83 0.86 0.87 T:deoxysi128v141 0.86 0.87 0.88 T:aes256otrcv3 0.87 0.88 0.90 T:aes256otrpv3 0.88 0.89 0.90 T:aes256otrsv3 0.89 0.91 0.93 T:aeadaes256ocbtaglen128v1 0.88 0.92 0.96 T:aes256gcmv1 0.92 0.93 0.93 T:deoxysneq128128v1 0.99 0.99 1.01 T:deoxysneq256128v1 0.98 1.00 1.01 T:deoxysi256v141 1.07 1.07 1.08 T:morus640128v2 1.07 1.08 1.08 T:morus640128v1 1.13 1.15 1.18 T:norx6444v3 1.18 1.20 1.20 T:aes128gcmv1 1.61 1.62 1.62 T:colm0v1 1.73 1.74 1.76 T:deoxysii128v141 1.76 1.77 1.78 T:deoxyseq128128v1 1.99 2.01 2.01 T:deoxysii256v141 2.00 2.02 2.02 T:deoxyseq256128v1 2.06 2.12 2.16 T:lunarkeyakv2 2.11 2.13 2.15 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.55 2.57 2.58 T:norx6441v1 2.75 2.75 2.76 T:aes128n12t8silcv3 2.74 2.76 2.77 T:aes128n12t8clocv3 2.75 2.76 2.76 T:aes128n8t8clocv2 2.75 2.76 2.76 T:aes128n12t8clocv2 2.75 2.76 2.76 T:aes128n8t8silcv2 2.79 2.79 2.79 T:aes128n12t8silcv2 2.78 2.80 2.83 T:seakeyakv2 2.81 2.86 2.91 T:oceankeyakv2 3.23 3.26 3.30 T:norx6461v2 3.24 3.26 3.28 T:norx6461v3 3.73 3.77 3.80 T:norx6444v2 3.94 3.96 3.99 T:norx6461v1 3.96 3.98 3.98 T:norx3241v2 3.97 3.99 4.02 T:norx3241v3 4.09 4.12 4.15 T:lakekeyakv1 4.31 4.35 4.37 T:norx6444v1 4.41 4.44 4.48 T:lakekeyakv2 4.67 4.69 4.71 T:norx3241v1 5.71 5.72 5.72 T:aesjambuv1 5.88 5.90 5.91 T:norx3261v3 6.10 6.13 6.16 T:norx3261v2 7.18 7.21 7.23 T:norx3261v1 7.47 7.51 7.53 T:ascon128av11 7.49 7.52 7.54 T:ascon96v1 7.53 7.57 7.62 ascon128av12 7.82 7.89 7.96 T:ketjemajorv2 9.77 9.85 9.89 T:ketjeminorv2 9.86 9.91 9.97 T:riverkeyakv2 10.86 10.87 10.89 T:ascon128v1 10.86 10.89 10.92 T:ascon128v11 10.90 10.93 10.98 ascon128v12 13.46 13.48 13.52 T:aes128otrsv1 13.52 13.55 13.56 T:aes128otrsv2 13.74 13.76 13.79 T:aes128otrpv2 13.73 13.78 13.80 T:aes128otrpv1 11.29? 15.59? 18.21? T:oceankeyakv1 15.59 15.60 15.61 T:twine80n6t4clocv2 15.88 15.91 15.92 T:twine80n6t4clocv3 17.46 17.48 17.53 T:aes256otrsv1 17.49 17.52 17.55 T:aes256otrsv2 17.64 17.66 17.68 T:aes256otrpv1 17.65 17.67 17.71 T:aes256otrpv2 23.01 23.03 23.07 T:aes128n12clocv1 23.16 23.21 23.24 T:aes128n8clocv1 24.19 24.22 24.25 T:aes128n12silcv1 24.20 24.24 24.26 T:aes128n8silcv1 25.90 26.09 26.30 T:proest256otrv1 31.23 31.40 31.47 T:ketjesrv1 31.33 31.42 31.48 T:riverkeyakv1 32.06 32.08 32.16 T:ketjesrv2 50.77 50.88 51.01 T:proest128otrv1 51.17 51.26 51.29 T:acorn128v3 63.15 63.63 63.71 T:ketjejrv1 70.99 71.72 72.13 T:seakeyakv1 75.51 75.58 75.92 T:present80n6t4silcv3 76.60 76.75 77.01 T:deoxysneq128128v13 93.51 94.03 94.16 T:ketjejrv2 120.92 121.26 124.70 T:twine80n6clocv1 127.54 127.62 127.65 T:deoxysneq256128v13 130.76 130.81 130.87 T:led80n6t4silcv3 154.10 154.19 154.33 T:deoxyseq128128v13 159.18 159.78 160.09 T:aezv1 224.94 225.31 225.78 T:deoxyseq256128v13 303.63? 317.71? 517.53? aes256gcmv1 361.00 363.13 373.81 T:acorn128 355.30? 371.59? 443.58? T:acorn128v2 3176.30 3176.70 3177.03 T:led80n6silcv1 3167.59 3182.40 3184.34 T:led80n6t4silcv2 4375.79 4378.81 4379.08 T:present80n6t4silcv2 4379.98 4380.31 4380.56 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.25 0.26 aegis128l 0.25 0.26 0.27 T:aegis128l 0.36 0.37 0.37 T:tiaoxinv2 0.36 0.37 0.37 T:tiaoxinv1 0.41 0.41 0.42 aegis256 0.44 0.45 0.45 T:aegis128 0.62 0.62 0.66 T:aezv4 0.62 0.62 0.63 T:aezv5 0.62 0.62 0.63 T:aezv3 0.63 0.64 0.65 T:morus1280256v1 0.64 0.65 0.65 T:morus1280256v2 0.65 0.65 0.66 T:morus1280128v2 0.64 0.66 0.66 T:morus1280128v1 0.65 0.66 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.68 0.70 0.71 T:aes128otrpv3 0.67 0.70 0.71 T:aes128otrsv3 0.61? 0.76? 0.79? T:aeadaes192ocbtaglen128v1 0.85 0.90 0.94 T:aes256gcmv1 0.90 0.91 0.92 T:aes256otrcv3 0.92 0.92 0.94 T:aes256otrsv3 0.91 0.93 0.94 T:aes256otrpv3 0.96 0.96 0.98 T:aeadaes256ocbtaglen128v1 1.04 1.07 1.07 T:aes128gcmv1 1.06 1.07 1.08 T:morus640128v1 1.06 1.09 1.11 T:morus640128v2 1.12 1.14 1.15 T:norx6444v3 1.11 1.15 1.16 T:deoxysi128v141 1.20 1.21 1.23 T:deoxysneq128128v1 1.26 1.27 1.29 T:deoxysi256v141 1.30 1.31 1.32 T:deoxysneq256128v1 1.66 1.67 1.69 T:colm0v1 1.74 1.75 1.78 T:deoxysii128v141 1.98 2.01 2.02 T:deoxysii256v141 2.02 2.03 2.05 T:norx6441v2 2.02 2.05 2.06 T:norx6441v3 2.10 2.20 2.23 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.46 2.48 2.50 T:norx6441v1 2.60 2.61 2.62 T:deoxyseq256128v1 2.69 2.72 2.75 T:aes128n12t8silcv3 2.72 2.73 2.74 T:aes128n12t8silcv2 2.72 2.73 2.75 T:aes128n12t8clocv2 2.71 2.73 2.74 T:aes128n12t8clocv3 2.72 2.73 2.75 T:aes128n8t8clocv2 2.72 2.74 2.75 T:aes128n8t8silcv2 2.83 2.88 2.92 T:seakeyakv2 2.85 2.94 2.99 T:oceankeyakv2 3.12 3.15 3.19 T:norx6461v2 3.13 3.15 3.17 T:norx6461v3 3.72 3.74 3.78 T:norx6444v2 3.74 3.76 3.78 T:norx3241v2 3.76 3.79 3.81 T:norx6461v1 3.78 3.80 3.82 T:norx3241v3 4.22 4.25 4.28 T:lakekeyakv1 4.26 4.30 4.34 T:norx6444v1 4.38 4.40 4.44 T:lakekeyakv2 4.53 4.55 4.59 T:norx3241v1 5.71 5.74 5.77 T:norx3261v3 5.88 5.95 5.96 T:aesjambuv1 5.94 5.97 5.99 T:norx3261v2 7.07 7.08 7.09 T:norx3261v1 7.37 7.40 7.43 ascon128av12 7.58 7.62 7.65 T:ascon96v1 7.60 7.63 7.68 T:ascon128av11 7.84 7.95 8.02 T:ketjemajorv2 9.79 9.84 9.92 T:ketjeminorv2 9.94 9.98 10.00 T:riverkeyakv2 10.70 10.73 10.76 T:ascon128v1 10.70 10.74 10.76 T:ascon128v11 10.90 10.93 10.95 ascon128v12 13.86 13.89 13.92 T:aes128otrpv1 13.88 13.92 13.97 T:aes128otrpv2 14.02 14.05 14.08 T:aes128otrsv2 14.30 14.34 14.38 T:aes128otrsv1 15.47 15.49 15.52 T:twine80n6t4clocv2 15.79 15.81 15.85 T:twine80n6t4clocv3 11.54? 15.85? 18.49? T:oceankeyakv1 17.77 17.82 17.85 T:aes256otrpv1 17.84 17.87 17.92 T:aes256otrpv2 17.86 17.92 18.01 T:aes256otrsv2 18.29 18.32 18.37 T:aes256otrsv1 22.06 22.11 22.15 T:aes128n12clocv1 22.58 22.62 22.67 T:aes128n8clocv1 24.13 24.18 24.23 T:aes128n12silcv1 24.14 24.19 24.23 T:aes128n8silcv1 25.74 25.82 25.91 T:proest256otrv1 31.53 31.57 31.67 T:riverkeyakv1 31.82 31.88 31.96 T:ketjesrv2 31.84 32.12 32.15 T:ketjesrv1 50.97 51.06 51.16 T:proest128otrv1 51.49 51.57 51.64 T:acorn128v3 61.04 61.15 62.15 T:ketjejrv1 72.22 73.01 73.78 T:seakeyakv1 75.94 75.97 76.00 T:present80n6t4silcv3 88.81 89.42 89.50 T:ketjejrv2 105.81 105.96 106.12 T:deoxysneq128128v13 120.82 120.93 122.31 T:twine80n6clocv1 131.69 131.75 131.85 T:led80n6t4silcv3 154.00 154.13 154.27 T:deoxyseq128128v13 158.84 158.93 159.09 T:deoxysneq256128v13 159.57 159.93 160.88 T:aezv1 225.25 225.75 226.22 T:deoxyseq256128v13 302.70? 316.69? 517.32? aes256gcmv1 360.92 363.33 377.90 T:acorn128 367.17 371.24 382.45 T:acorn128v2 3164.22 3167.04 3184.18 T:led80n6t4silcv2 3176.38 3176.81 3177.25 T:led80n6silcv1 4376.89 4380.40 4380.83 T:present80n6t4silcv2 4380.04 4381.71 4383.44 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.25 0.25 0.27 T:aezv5 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.27 T:aezv3 0.25 0.26 0.26 T:aegis128l 0.27? 0.28? 0.31? aegis128l 0.35 0.37 0.37 T:tiaoxinv2 0.37 0.37 0.38 T:tiaoxinv1 0.44 0.44 0.45 T:aegis128 0.42 0.46 0.46 aegis256 0.64 0.64 0.65 T:morus1280256v1 0.63 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.65 0.66 0.66 T:aeadaes128ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.68 0.68 0.69 T:aes128otrsv3 0.68 0.68 0.69 T:aes128otrpv3 0.75? 0.76? 1.10? T:aeadaes192ocbtaglen128v1 0.84 0.88 0.92 T:aes256gcmv1 0.90 0.91 0.92 T:aes256otrcv3 0.91 0.92 0.92 T:aes256otrsv3 0.92 0.92 0.92 T:aes256otrpv3 0.95 0.96 0.96 T:aeadaes256ocbtaglen128v1 1.05 1.06 1.06 T:aes128gcmv1 1.07 1.08 1.10 T:morus640128v2 1.08 1.09 1.10 T:morus640128v1 1.12 1.15 1.16 T:deoxysi128v141 1.13 1.15 1.17 T:norx6444v3 1.20 1.21 1.23 T:deoxysneq128128v1 1.26 1.28 1.30 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.63 1.67 1.68 T:colm0v1 1.74 1.76 1.78 T:deoxysii128v141 2.00 2.01 2.02 T:deoxysii256v141 2.01 2.03 2.05 T:norx6441v2 2.03 2.04 2.06 T:norx6441v3 2.17 2.20 2.24 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.45 2.48 2.50 T:norx6441v1 2.61 2.61 2.62 T:deoxyseq256128v1 2.69 2.71 2.75 T:aes128n12t8silcv3 2.72 2.72 2.73 T:aes128n12t8silcv2 2.69 2.72 2.75 T:aes128n8t8clocv2 2.70 2.72 2.75 T:aes128n12t8clocv2 2.70 2.73 2.74 T:aes128n12t8clocv3 2.72 2.74 2.75 T:aes128n8t8silcv2 2.89 2.92 2.97 T:seakeyakv2 2.93 2.95 2.97 T:oceankeyakv2 3.12 3.15 3.16 T:norx6461v3 3.12 3.15 3.17 T:norx6461v2 3.73 3.76 3.77 T:norx3241v2 3.73 3.77 3.81 T:norx6444v2 3.77 3.79 3.83 T:norx6461v1 3.80 3.82 3.84 T:norx3241v3 4.25 4.27 4.30 T:lakekeyakv1 4.31 4.33 4.35 T:norx6444v1 4.40 4.43 4.45 T:lakekeyakv2 4.53 4.55 4.59 T:norx3241v1 5.72 5.75 5.77 T:norx3261v3 5.87 5.88 5.88 T:aesjambuv1 5.92 5.95 5.99 T:norx3261v2 7.06 7.07 7.09 T:norx3261v1 7.38 7.39 7.42 ascon128av12 7.61 7.64 7.67 T:ascon128av11 7.61 7.65 7.68 T:ascon96v1 7.92 8.01 8.05 T:ketjemajorv2 9.54 9.81 9.93 T:ketjeminorv2 9.96 10.00 10.02 T:riverkeyakv2 10.70 10.72 10.75 T:ascon128v11 10.70 10.73 10.74 T:ascon128v1 10.90 10.92 10.97 ascon128v12 13.90 13.93 13.95 T:aes128otrpv1 13.90 13.93 13.96 T:aes128otrpv2 14.09 14.11 14.13 T:aes128otrsv2 14.34 14.37 14.42 T:aes128otrsv1 15.46 15.49 15.51 T:twine80n6t4clocv2 11.58? 15.83? 18.59? T:oceankeyakv1 15.81 15.84 15.85 T:twine80n6t4clocv3 17.78 17.84 17.88 T:aes256otrpv1 17.85 17.88 17.93 T:aes256otrpv2 17.97 18.01 18.05 T:aes256otrsv2 18.33 18.36 18.42 T:aes256otrsv1 22.05 22.08 22.13 T:aes128n12clocv1 22.58 22.63 22.65 T:aes128n8clocv1 24.13 24.17 24.21 T:aes128n12silcv1 24.13 24.20 24.23 T:aes128n8silcv1 25.84 25.87 25.89 T:proest256otrv1 31.51 31.59 31.66 T:riverkeyakv1 31.82 31.91 32.00 T:ketjesrv2 31.97 32.10 32.16 T:ketjesrv1 50.95 51.04 51.09 T:proest128otrv1 51.42 51.52 51.62 T:acorn128v3 61.52 61.94 62.22 T:ketjejrv1 72.95 73.42 74.08 T:seakeyakv1 75.94 75.97 76.00 T:present80n6t4silcv3 88.90 89.49 89.56 T:ketjejrv2 105.87 105.96 106.11 T:deoxysneq128128v13 120.80 120.89 122.30 T:twine80n6clocv1 131.71 131.78 131.84 T:led80n6t4silcv3 153.98 154.16 154.41 T:deoxyseq128128v13 158.85 158.95 159.11 T:deoxysneq256128v13 159.38 159.60 160.16 T:aezv1 224.57 225.64 226.27 T:deoxyseq256128v13 288.76? 302.69? 502.93? aes256gcmv1 360.92 363.31 377.81 T:acorn128 367.55 371.26 382.49 T:acorn128v2 3176.33 3176.90 3177.28 T:led80n6silcv1 3180.61 3184.04 3184.64 T:led80n6t4silcv2 4376.76 4380.76 4381.09 T:present80n6t4silcv2 4378.89 4381.64 4382.41 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.18? 0.19? 0.22? T:tiaoxinv2 0.18? 0.20? 0.22? T:tiaoxinv1 0.24 0.25 0.26 T:aegis128l 0.25 0.26 0.27 aegis128l 0.42 0.43 0.43 aegis256 0.41 0.43 0.45 T:aezv4 0.41 0.44 0.45 T:aezv5 0.42 0.44 0.45 T:aezv3 0.46 0.46 0.46 T:aegis128 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280256v1 0.62 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.62 0.64 0.65 T:aes256gcmv1 0.64 0.64 0.64 T:aes128otrpv3 0.65 0.65 0.66 T:aes128otrcv3 0.61? 0.75? 0.83? T:aeadaes192ocbtaglen128v1 0.79 0.81 0.81 T:aes128gcmv1 0.83 0.86 0.89 T:deoxysi128v141 0.88 0.88 0.89 T:aes256otrcv3 0.88 0.89 0.89 T:aes256otrpv3 0.88 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.88 0.90 0.93 T:deoxysneq128128v1 0.98 1.00 1.02 T:deoxysneq256128v1 0.97 1.00 1.02 T:deoxysi256v141 1.04 1.04 1.05 T:morus640128v1 1.04 1.04 1.05 T:morus640128v2 1.11 1.13 1.13 T:colm0v1 1.30 1.31 1.33 T:deoxysii128v141 1.31 1.33 1.35 T:deoxyseq128128v1 1.49 1.50 1.52 T:deoxysii256v141 1.50 1.51 1.53 T:deoxyseq256128v1 1.64 1.66 1.67 T:norx6444v3 1.69 1.70 1.70 T:aes128otrsv3 2.13 2.15 2.17 T:norx6441v2 2.16 2.17 2.18 T:norx6441v3 2.30 2.30 2.31 T:aes256otrsv3 2.37 2.38 2.42 T:seakeyakv2 2.42 2.44 2.46 T:oceankeyakv2 2.57 2.59 2.60 T:norx6441v1 2.72 2.72 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n8t8silcv2 2.73 2.74 2.74 T:aes128n12t8clocv2 2.74 2.74 2.74 T:aes128n8t8clocv2 2.74 2.74 2.75 T:aes128n12t8clocv3 2.75 2.75 2.76 T:aes128n12t8silcv2 2.90 2.93 2.95 T:lunarkeyakv2 3.30 3.31 3.33 T:norx6461v3 3.32 3.34 3.36 T:norx6461v2 3.70 3.72 3.76 T:norx6444v2 3.90 3.92 3.93 T:lakekeyakv1 3.93 3.94 3.95 T:norx6461v1 3.96 3.97 3.98 T:lakekeyakv2 3.96 3.97 3.99 T:norx3241v3 3.98 3.99 4.01 T:norx3241v2 4.26 4.29 4.31 T:norx6444v1 4.78 4.80 4.82 T:norx3241v1 5.73 5.73 5.74 T:aesjambuv1 5.93 5.99 6.02 T:norx3261v3 6.06 6.07 6.10 T:norx3261v2 6.55 6.60 6.64 T:ketjemajorv2 7.19 7.22 7.23 T:norx3261v1 7.31 7.32 7.35 T:riverkeyakv2 7.36 7.38 7.42 T:ascon96v1 7.40 7.46 7.48 T:ascon128av11 7.47 7.49 7.50 ascon128av12 8.74 8.78 8.81 T:ketjeminorv2 10.85 10.88 10.91 T:ascon128v1 10.86 10.88 10.90 T:ascon128v11 10.92 10.95 10.96 ascon128v12 12.71 12.73 12.76 T:aes128otrsv1 12.73 12.75 12.78 T:aes128otrsv2 13.09 13.11 13.13 T:aes128otrpv2 13.12 13.15 13.25 T:aes128otrpv1 15.31 15.32 15.34 T:twine80n6t4clocv2 12.35? 15.44? 17.03? T:oceankeyakv1 15.65 15.66 15.67 T:twine80n6t4clocv3 16.75 16.77 16.78 T:aes256otrsv1 16.76 16.78 16.81 T:aes256otrsv2 17.04 17.08 17.10 T:aes256otrpv1 17.07 17.08 17.10 T:aes256otrpv2 17.51 17.53 17.56 T:aes128n12clocv1 17.61 17.63 17.65 T:aes128n8clocv1 18.11 18.13 18.15 T:aes128n8silcv1 18.12 18.15 18.19 T:aes128n12silcv1 26.05 26.14 26.19 T:proest256otrv1 28.24 28.35 28.39 T:ketjesrv1 29.51 29.53 29.56 T:ketjesrv2 29.82 29.86 29.93 T:riverkeyakv1 51.07 51.15 51.25 T:proest128otrv1 51.20 51.25 51.32 T:acorn128v3 55.44 55.46 55.51 T:ketjejrv1 71.15 71.45 71.76 T:seakeyakv1 75.20 75.23 75.68 T:present80n6t4silcv3 76.71 76.80 76.91 T:deoxysneq128128v13 90.15 90.44 90.50 T:ketjejrv2 90.37 90.55 92.68 T:twine80n6clocv1 104.70 104.82 104.89 T:aezv1 115.09 115.16 115.22 T:deoxyseq128128v13 126.90 127.07 127.20 T:deoxysneq256128v13 130.57 130.60 130.65 T:led80n6t4silcv3 168.03 168.56 168.81 T:deoxyseq256128v13 297.09? 310.45? 509.80? aes256gcmv1 353.43 354.74 364.24 T:acorn128 348.67? 362.83? 428.88? T:acorn128v2 2373.47 2381.21 2386.18 T:led80n6t4silcv2 2382.25 2382.50 2382.70 T:led80n6silcv1 3284.41 3284.59 3284.76 T:present80n6silcv1 3284.07 3284.86 3285.29 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.24 0.25 0.25 aegis128l 0.24 0.25 0.26 T:aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.41 0.42 0.43 aegis256 0.42 0.44 0.44 T:aezv4 0.43 0.44 0.44 T:aezv5 0.43 0.44 0.45 T:aezv3 0.45 0.45 0.45 T:aegis128 0.59 0.61 0.65 T:aes256gcmv1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280128v2 0.62 0.62 0.63 T:morus1280256v1 0.63 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.68 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.71 0.74 0.75 T:aes128gcmv1 0.57? 0.75? 0.92? T:aeadaes192ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.90 0.91 0.92 T:aes256otrpv3 0.91 0.92 0.92 T:aeadaes256ocbtaglen128v1 0.98 1.01 1.03 T:deoxysi128v141 1.03 1.04 1.05 T:deoxysneq128128v1 1.03 1.04 1.04 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.11 1.13 1.15 T:deoxysi256v141 1.14 1.16 1.16 T:deoxysneq256128v1 1.16 1.17 1.19 T:colm0v1 1.30 1.31 1.33 T:deoxysii128v141 1.48 1.50 1.51 T:deoxysii256v141 1.63 1.65 1.66 T:deoxyseq128128v1 1.64 1.66 1.66 T:norx6444v3 1.72 1.72 1.73 T:aes128otrsv3 1.79 1.81 1.82 T:deoxyseq256128v1 2.08 2.09 2.11 T:norx6441v3 2.09 2.10 2.12 T:norx6441v2 2.32 2.32 2.33 T:aes256otrsv3 2.42 2.44 2.45 T:seakeyakv2 2.43 2.45 2.49 T:oceankeyakv2 2.52 2.54 2.55 T:norx6441v1 2.70 2.70 2.72 T:aes128n8t8silcv2 2.70 2.72 2.72 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n12t8silcv2 2.72 2.72 2.75 T:aes128n12t8clocv2 2.71 2.73 2.74 T:aes128n12t8clocv3 2.73 2.74 2.74 T:aes128n8t8clocv2 2.94 2.96 2.98 T:lunarkeyakv2 3.21 3.23 3.25 T:norx6461v3 3.24 3.26 3.28 T:norx6461v2 3.70 3.71 3.72 T:norx6444v2 3.82 3.84 3.88 T:norx6461v1 3.88 3.90 3.91 T:norx3241v2 3.90 3.91 3.93 T:norx3241v3 3.95 3.96 3.98 T:lakekeyakv2 3.96 3.97 3.99 T:lakekeyakv1 4.24 4.27 4.28 T:norx6444v1 4.71 4.72 4.73 T:norx3241v1 5.81 5.81 5.84 T:aesjambuv1 5.92 5.93 5.94 T:norx3261v3 5.96 5.98 6.01 T:norx3261v2 6.60 6.65 6.73 T:ketjemajorv2 7.12 7.13 7.14 T:norx3261v1 7.31 7.33 7.35 T:riverkeyakv2 7.37 7.42 7.43 ascon128av12 7.38 7.44 7.49 T:ascon128av11 7.46 7.49 7.52 T:ascon96v1 8.65 8.77 8.86 T:ketjeminorv2 10.79 10.82 10.83 T:ascon128v1 10.80 10.82 10.84 T:ascon128v11 10.89 10.92 10.94 ascon128v12 13.00 13.05 13.15 T:aes128otrsv2 13.13 13.16 13.20 T:aes128otrsv1 13.17 13.20 13.22 T:aes128otrpv2 13.17 13.22 13.26 T:aes128otrpv1 15.26 15.28 15.30 T:twine80n6t4clocv2 12.51? 15.53? 17.16? T:oceankeyakv1 15.62 15.63 15.64 T:twine80n6t4clocv3 16.92 16.95 17.00 T:aes256otrsv2 17.03 17.06 17.08 T:aes128n12clocv1 17.10 17.11 17.17 T:aes256otrpv1 17.12 17.15 17.19 T:aes256otrpv2 17.12 17.16 17.20 T:aes256otrsv1 17.32 17.34 17.37 T:aes128n8clocv1 18.09 18.13 18.15 T:aes128n8silcv1 18.10 18.14 18.17 T:aes128n12silcv1 25.92 25.95 26.04 T:proest256otrv1 28.58 28.69 28.74 T:ketjesrv1 29.39 29.42 29.47 T:ketjesrv2 29.88 29.95 30.03 T:riverkeyakv1 51.21 51.28 51.35 T:proest128otrv1 51.36 51.45 51.49 T:acorn128v3 54.63 54.73 54.77 T:ketjejrv1 71.68 72.28 72.59 T:seakeyakv1 75.44 75.51 75.69 T:present80n6t4silcv3 88.52 88.57 88.62 T:ketjejrv2 90.34 90.46 91.53 T:twine80n6clocv1 91.34 91.45 91.57 T:deoxysneq128128v13 104.93 105.11 105.37 T:aezv1 115.15 115.21 115.30 T:deoxyseq128128v13 131.03 131.06 131.11 T:led80n6t4silcv3 142.74 142.97 143.05 T:deoxysneq256128v13 168.10 168.57 168.79 T:deoxyseq256128v13 296.64? 310.01? 509.18? aes256gcmv1 357.21 358.89 370.23 T:acorn128 356.31 362.68 372.82 T:acorn128v2 2374.18 2374.92 2382.65 T:led80n6t4silcv2 2382.29 2382.70 2382.90 T:led80n6silcv1 3284.63 3285.04 3285.31 T:present80n6t4silcv2 3284.00 3285.39 3286.02 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.24 0.25 0.26 T:aezv3 0.24 0.25 0.25 T:aezv5 0.24 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aegis128l 0.26 0.26 0.26 aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.26 0.28 0.28 T:tiaoxinv2 0.43 0.44 0.45 aegis256 0.45 0.45 0.45 T:aegis128 0.60 0.61 0.63 T:aes256gcmv1 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280128v2 0.64 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.68 0.68 0.68 T:aes128otrcv3 0.73 0.74 0.74 T:aes128gcmv1 0.75 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.99 1.00 1.01 T:deoxysi128v141 1.03 1.04 1.04 T:deoxysneq128128v1 1.04 1.04 1.04 T:morus640128v2 1.03 1.04 1.05 T:morus640128v1 1.12 1.13 1.15 T:deoxysi256v141 1.15 1.15 1.16 T:deoxysneq256128v1 1.14 1.17 1.18 T:colm0v1 1.31 1.32 1.34 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq128128v1 1.64 1.66 1.67 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.80 1.81 1.81 T:deoxyseq256128v1 2.08 2.10 2.11 T:norx6441v2 2.11 2.11 2.14 T:norx6441v3 2.32 2.32 2.32 T:aes256otrsv3 2.43 2.44 2.46 T:seakeyakv2 2.46 2.48 2.49 T:oceankeyakv2 2.53 2.54 2.56 T:norx6441v1 2.70 2.71 2.71 T:aes128n12t8silcv3 2.70 2.71 2.72 T:aes128n8t8silcv2 2.71 2.72 2.72 T:aes128n12t8silcv2 2.72 2.72 2.74 T:aes128n12t8clocv2 2.72 2.73 2.74 T:aes128n12t8clocv3 2.72 2.74 2.74 T:aes128n8t8clocv2 2.94 2.96 2.99 T:lunarkeyakv2 3.21 3.22 3.25 T:norx6461v3 3.24 3.26 3.27 T:norx6461v2 3.71 3.72 3.74 T:norx6444v2 3.81 3.83 3.86 T:norx6461v1 3.88 3.90 3.91 T:norx3241v2 3.89 3.90 3.92 T:norx3241v3 3.96 3.98 3.98 T:lakekeyakv2 3.97 3.98 4.00 T:lakekeyakv1 4.26 4.28 4.29 T:norx6444v1 4.71 4.72 4.73 T:norx3241v1 5.81 5.81 5.82 T:aesjambuv1 5.91 5.93 5.95 T:norx3261v3 5.96 5.97 6.00 T:norx3261v2 6.63 6.68 6.74 T:ketjemajorv2 7.12 7.13 7.14 T:norx3261v1 7.32 7.34 7.36 T:riverkeyakv2 7.36 7.39 7.41 ascon128av12 7.38 7.42 7.47 T:ascon128av11 7.45 7.47 7.49 T:ascon96v1 8.74 8.78 8.86 T:ketjeminorv2 10.79 10.81 10.83 T:ascon128v1 10.79 10.81 10.83 T:ascon128v11 10.90 10.92 10.95 ascon128v12 13.05 13.08 13.12 T:aes128otrsv2 13.14 13.18 13.21 T:aes128otrsv1 13.17 13.18 13.22 T:aes128otrpv2 13.18 13.22 13.27 T:aes128otrpv1 15.26 15.27 15.29 T:twine80n6t4clocv2 12.44? 15.58? 17.07? T:oceankeyakv1 15.61 15.63 15.65 T:twine80n6t4clocv3 16.95 16.97 17.00 T:aes256otrsv2 17.07 17.13 17.16 T:aes128n12clocv1 17.12 17.16 17.19 T:aes256otrpv1 17.16 17.18 17.20 T:aes256otrpv2 17.15 17.19 17.22 T:aes256otrsv1 17.33 17.35 17.38 T:aes128n8clocv1 18.10 18.13 18.16 T:aes128n8silcv1 18.10 18.15 18.20 T:aes128n12silcv1 25.99 26.02 26.09 T:proest256otrv1 28.58 28.70 28.73 T:ketjesrv1 29.38 29.42 29.46 T:ketjesrv2 29.96 30.01 30.05 T:riverkeyakv1 51.20 51.25 51.34 T:proest128otrv1 51.41 51.47 51.52 T:acorn128v3 54.68 54.75 54.79 T:ketjejrv1 72.04 72.38 72.56 T:seakeyakv1 75.45 75.47 75.68 T:present80n6t4silcv3 88.57 88.61 88.68 T:ketjejrv2 90.36 90.46 91.52 T:twine80n6clocv1 91.35 91.47 91.62 T:deoxysneq128128v13 104.87 104.94 105.08 T:aezv1 115.10 115.17 115.25 T:deoxyseq128128v13 131.02 131.05 131.09 T:led80n6t4silcv3 142.71 142.94 143.06 T:deoxysneq256128v13 168.23 168.70 168.88 T:deoxyseq256128v13 289.81? 303.01? 502.36? aes256gcmv1 357.25 358.86 370.21 T:acorn128 356.30 362.69 372.83 T:acorn128v2 2374.27 2375.24 2381.84 T:led80n6t4silcv2 2382.26 2382.40 2382.61 T:led80n6silcv1 3284.46 3284.80 3285.66 T:present80n6t4silcv2 3283.75 3285.29 3285.67 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.17? 0.19? 0.20? T:tiaoxinv1 0.23? 0.25? 0.26? T:aezv4 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aegis128l 0.24 0.25 0.26 T:aezv3 0.23? 0.25? 0.27? T:aezv5 0.33? 0.36? 0.40? T:aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 0.44 0.44 0.45 aegis256 0.44 0.45 0.45 T:aegis128 0.59 0.60 0.60 T:morus1280128v2 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.62 0.63 0.64 T:colm0v1 0.62 0.65 0.67 T:aeadaes128ocbtaglen128v1 0.60? 0.65? 0.67? T:aes128otrpv3 0.67 0.68 0.71 T:aes128otrcv3 0.62? 0.77? 1.10? T:aeadaes192ocbtaglen128v1 0.84 0.87 0.89 T:deoxysneq128128v1 0.85 0.87 0.89 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.87 0.89 0.91 T:deoxyseq128128v1 0.88 0.90 0.92 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.92 T:aes256otrpv3 0.90 0.91 0.92 T:aes256otrcv3 0.96 0.99 1.00 T:deoxysi256v141 0.97 0.99 1.01 T:deoxysneq256128v1 1.00 1.00 1.01 T:deoxyseq256128v1 1.00 1.00 1.01 T:morus640128v1 1.00 1.01 1.02 T:deoxysii256v141 1.00 1.02 1.03 T:morus640128v2 1.82 1.88 1.93 T:lunarkeyakv2 1.83 1.89 1.91 T:oceankeyakv2 2.15 2.16 2.17 T:norx6441v2 2.13 2.16 2.18 T:norx6444v3 2.16 2.17 2.18 T:norx6441v3 2.29 2.31 2.33 T:seakeyakv2 2.57 2.60 2.62 T:norx6441v1 2.68 2.69 2.75 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n12t8silcv2 2.71 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.73 2.73 2.73 T:aes128n12t8clocv3 2.68 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128otrsv3 3.31 3.35 3.39 T:norx6461v3 3.38 3.40 3.43 T:norx6461v2 3.63 3.64 3.68 T:lakekeyakv2 3.66 3.67 3.69 T:norx6444v2 3.72 3.72 3.73 T:aes256otrsv3 3.73 3.77 3.79 T:lakekeyakv1 3.91 3.94 3.98 T:norx6461v1 3.95 3.96 3.98 T:norx3241v3 3.97 3.99 4.02 T:norx3241v2 4.23 4.24 4.26 T:norx6444v1 4.86 4.89 4.91 T:norx3241v1 5.38 5.44 5.49 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.96 5.98 6.02 T:norx3261v2 6.04 6.09 6.10 T:norx3261v3 6.84 6.88 6.89 T:riverkeyakv2 7.20 7.23 7.25 T:norx3261v1 7.22 7.27 7.30 T:ascon96v1 7.26 7.31 7.40 T:ascon128av11 7.35 7.38 7.42 ascon128av12 7.88 7.95 7.99 T:ketjeminorv2 10.84 10.86 10.89 T:ascon128v1 10.85 10.87 10.90 T:ascon128v11 10.91 10.94 10.97 ascon128v12 11.91 11.95 11.97 T:aes128otrsv2 11.93 11.95 11.97 T:aes128otrsv1 12.12 12.17 12.20 T:aes128n12silcv1 12.14 12.17 12.22 T:aes128n8silcv1 12.16 12.18 12.20 T:aes128n12clocv1 12.17 12.20 12.23 T:aes128n8clocv1 12.43 12.44 12.48 T:aes128otrpv2 12.44 12.46 12.48 T:aes128otrpv1 15.03 15.06 15.08 T:twine80n6t4clocv2 15.40 15.42 15.46 T:twine80n6t4clocv3 12.07? 15.47? 17.12? T:oceankeyakv1 15.98 16.01 16.03 T:aes256otrsv2 16.00 16.03 16.05 T:aes256otrsv1 16.46 16.49 16.54 T:aes256otrpv1 16.49 16.52 16.54 T:aes256otrpv2 25.25 25.30 25.35 T:ketjesrv1 26.11 26.13 26.16 T:proest256otrv1 26.96 27.00 27.03 T:ketjesrv2 28.30 28.34 28.41 T:riverkeyakv1 47.25 47.30 47.38 T:ketjejrv1 50.90 51.15 51.22 T:aezv1 51.18 51.24 51.29 T:acorn128v3 51.48 51.53 51.59 T:proest128otrv1 59.92 60.02 60.78 T:twine80n6clocv1 70.78 71.49 71.92 T:seakeyakv1 74.96 75.04 75.45 T:present80n6t4silcv3 76.17 76.25 76.35 T:deoxyseq128128v13 76.77 76.83 77.12 T:deoxysneq128128v13 87.53 87.63 87.70 T:ketjejrv2 111.50 111.66 112.05 T:deoxyseq256128v13 126.36 126.63 127.05 T:deoxysneq256128v13 130.35 130.40 130.47 T:led80n6t4silcv3 289.13? 303.23? 503.73? aes256gcmv1 344.34 346.44 356.22 T:acorn128 329.58? 354.08? 426.73? T:acorn128v2 1582.77 1585.57 1591.55 T:led80n6t4silcv2 1587.75 1588.23 1588.68 T:led80n6silcv1 2188.67 2188.89 2189.15 T:present80n6silcv1 2188.74 2189.61 2189.97 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.18? 0.19? 0.20? T:tiaoxinv1 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.27 aegis128l 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.30? 0.36? 0.40? T:aes256gcmv1 0.40 0.42 0.43 T:aes128gcmv1 0.42 0.42 0.44 aegis256 0.45 0.45 0.45 T:aegis128 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280128v2 0.60 0.61 0.61 T:morus1280256v2 0.60 0.61 0.62 T:morus1280256v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.65 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.39? 0.74? 0.77? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.87 T:deoxyseq128128v1 0.85 0.86 0.87 T:deoxysneq128128v1 0.85 0.87 0.88 T:deoxysi128v141 0.86 0.87 0.90 T:deoxysii128v141 0.89 0.89 0.91 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.90 0.91 0.91 T:aes256otrcv3 0.98 0.99 0.99 T:deoxyseq256128v1 0.96 0.99 1.02 T:deoxysi256v141 0.97 0.99 1.01 T:deoxysneq256128v1 0.97 1.00 1.02 T:deoxysii256v141 0.99 1.00 1.02 T:morus640128v1 1.01 1.01 1.01 T:morus640128v2 1.82 1.84 1.92 T:lunarkeyakv2 1.83 1.87 1.90 T:oceankeyakv2 2.12 2.15 2.16 T:norx6441v3 2.12 2.16 2.18 T:norx6444v3 2.15 2.17 2.19 T:norx6441v2 2.27 2.30 2.34 T:seakeyakv2 2.59 2.61 2.64 T:norx6441v1 2.69 2.71 2.72 T:aes128n12t8silcv3 2.69 2.72 2.72 T:aes128n8t8silcv2 2.71 2.72 2.72 T:aes128n12t8clocv2 2.73 2.73 2.75 T:aes128n8t8clocv2 2.71 2.74 2.75 T:aes128n12t8silcv2 2.72 2.74 2.74 T:aes128n12t8clocv3 2.75 2.75 2.75 T:aes128otrsv3 3.30 3.32 3.35 T:norx6461v3 3.33 3.34 3.36 T:norx6461v2 3.61 3.64 3.67 T:lakekeyakv2 3.65 3.68 3.70 T:norx6444v2 3.72 3.72 3.72 T:aes256otrsv3 3.72 3.76 3.77 T:lakekeyakv1 3.84 3.91 3.92 T:norx6461v1 4.00 4.01 4.02 T:norx3241v3 4.01 4.03 4.05 T:norx3241v2 4.21 4.23 4.26 T:norx6444v1 4.87 4.89 4.91 T:norx3241v1 5.35 5.40 5.47 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.99 6.00 6.02 T:norx3261v2 6.08 6.10 6.12 T:norx3261v3 6.86 6.89 6.90 T:riverkeyakv2 7.19 7.20 7.22 T:norx3261v1 7.26 7.30 7.32 T:ascon128av11 7.29 7.32 7.35 T:ascon96v1 7.30 7.33 7.39 ascon128av12 7.85 7.90 7.95 T:ketjeminorv2 10.86 10.89 10.91 ascon128v12 10.85 10.89 10.91 T:ascon128v11 10.87 10.89 10.92 T:ascon128v1 11.99 12.00 12.06 T:aes128otrsv1 12.06 12.08 12.12 T:aes128otrsv2 12.12 12.15 12.19 T:aes128n8silcv1 12.14 12.18 12.21 T:aes128n12silcv1 12.15 12.19 12.23 T:aes128n8clocv1 12.16 12.20 12.23 T:aes128n12clocv1 12.50 12.53 12.57 T:aes128otrpv1 12.49 12.53 12.56 T:aes128otrpv2 15.02 15.04 15.07 T:twine80n6t4clocv2 11.92? 15.40? 17.33? T:oceankeyakv1 15.39 15.42 15.45 T:twine80n6t4clocv3 16.06 16.07 16.11 T:aes256otrsv2 16.03 16.08 16.13 T:aes256otrsv1 16.50 16.53 16.57 T:aes256otrpv1 16.55 16.57 16.60 T:aes256otrpv2 25.25 25.30 25.33 T:ketjesrv1 26.11 26.13 26.14 T:proest256otrv1 26.93 26.98 27.03 T:ketjesrv2 28.26 28.32 28.39 T:riverkeyakv1 47.25 47.36 47.40 T:ketjejrv1 50.96 51.17 51.22 T:aezv1 51.22 51.27 51.34 T:acorn128v3 51.49 51.53 51.58 T:proest128otrv1 59.95 60.06 60.87 T:twine80n6clocv1 70.84 71.56 71.98 T:seakeyakv1 74.97 75.02 75.41 T:present80n6t4silcv3 76.22 76.26 76.35 T:deoxyseq128128v13 76.81 76.93 77.12 T:deoxysneq128128v13 87.57 87.65 87.72 T:ketjejrv2 111.75 111.93 112.25 T:deoxyseq256128v13 126.32 126.60 127.06 T:deoxysneq256128v13 130.35 130.41 130.46 T:led80n6t4silcv3 289.01? 303.03? 503.15? aes256gcmv1 351.97 354.08 364.20 T:acorn128 342.64 354.09 366.14 T:acorn128v2 1583.28 1583.78 1591.79 T:led80n6t4silcv2 1587.82 1588.27 1588.66 T:led80n6silcv1 2188.32 2188.97 2189.34 T:present80n6silcv1 2188.69 2189.08 2189.41 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv1 0.17? 0.19? 0.22? T:tiaoxinv2 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aezv5 0.25 0.25 0.26 T:aezv4 0.33? 0.34? 0.37? T:aes256gcmv1 0.39 0.42 0.42 aegis256 0.41 0.42 0.42 T:aes128gcmv1 0.45 0.45 0.45 T:aegis128 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280128v2 0.61 0.61 0.62 T:morus1280256v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.74? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.89 T:deoxysi128v141 0.86 0.86 0.87 T:deoxyseq128128v1 0.86 0.87 0.89 T:deoxysneq128128v1 0.86 0.87 0.90 T:deoxysii128v141 0.89 0.89 0.91 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.90 T:aes256otrpv3 0.91 0.91 0.91 T:aes256otrcv3 0.98 0.99 0.99 T:deoxyseq256128v1 0.97 0.99 1.01 T:deoxysneq256128v1 0.98 0.99 1.02 T:deoxysi256v141 0.99 1.00 1.01 T:deoxysii256v141 1.00 1.00 1.02 T:morus640128v1 1.00 1.01 1.02 T:morus640128v2 1.85 1.87 1.89 T:oceankeyakv2 1.86 1.90 1.92 T:lunarkeyakv2 2.13 2.16 2.17 T:norx6441v2 2.15 2.17 2.19 T:norx6444v3 2.14 2.18 2.20 T:norx6441v3 2.30 2.31 2.33 T:seakeyakv2 2.59 2.61 2.62 T:norx6441v1 2.68 2.69 2.71 T:aes128n8t8silcv2 2.68 2.69 2.71 T:aes128n12t8silcv3 2.70 2.72 2.72 T:aes128n12t8clocv2 2.71 2.72 2.74 T:aes128n12t8silcv2 2.72 2.73 2.73 T:aes128n8t8clocv2 2.70 2.74 2.75 T:aes128n12t8clocv3 2.75 2.75 2.75 T:aes128otrsv3 3.29 3.31 3.32 T:norx6461v3 3.32 3.36 3.38 T:norx6461v2 3.61 3.64 3.65 T:lakekeyakv2 3.67 3.69 3.71 T:norx6444v2 3.72 3.72 3.72 T:aes256otrsv3 3.74 3.76 3.78 T:lakekeyakv1 3.81 3.88 3.93 T:norx6461v1 3.97 3.98 4.02 T:norx3241v3 4.00 4.03 4.04 T:norx3241v2 4.22 4.24 4.25 T:norx6444v1 4.87 4.88 4.90 T:norx3241v1 5.36 5.41 5.49 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.96 6.00 6.04 T:norx3261v2 6.07 6.13 6.14 T:norx3261v3 6.83 6.86 6.90 T:riverkeyakv2 7.18 7.20 7.22 T:norx3261v1 7.23 7.28 7.29 T:ascon128av11 7.30 7.34 7.37 T:ascon96v1 7.32 7.34 7.40 ascon128av12 7.82 7.91 7.99 T:ketjeminorv2 10.85 10.88 10.91 T:ascon128v1 10.85 10.89 10.92 ascon128v12 10.85 10.89 10.93 T:ascon128v11 11.98 12.03 12.10 T:aes128otrsv1 12.06 12.13 12.23 T:aes128otrsv2 12.13 12.16 12.19 T:aes128n12silcv1 12.12 12.16 12.21 T:aes128n8silcv1 12.16 12.19 12.21 T:aes128n12clocv1 12.18 12.22 12.28 T:aes128n8clocv1 12.49 12.52 12.54 T:aes128otrpv2 12.51 12.53 12.57 T:aes128otrpv1 15.02 15.03 15.05 T:twine80n6t4clocv2 12.01? 15.41? 17.40? T:oceankeyakv1 15.39 15.44 15.45 T:twine80n6t4clocv3 16.07 16.08 16.11 T:aes256otrsv2 16.00 16.09 16.13 T:aes256otrsv1 16.49 16.52 16.56 T:aes256otrpv1 16.56 16.58 16.61 T:aes256otrpv2 25.24 25.28 25.33 T:ketjesrv1 26.11 26.13 26.15 T:proest256otrv1 26.95 27.01 27.04 T:ketjesrv2 28.32 28.36 28.39 T:riverkeyakv1 47.29 47.36 47.40 T:ketjejrv1 51.03 51.18 51.24 T:aezv1 51.19 51.24 51.37 T:acorn128v3 51.39 51.49 51.59 T:proest128otrv1 59.96 60.04 60.83 T:twine80n6clocv1 70.89 71.59 71.82 T:seakeyakv1 74.92 74.99 75.44 T:present80n6t4silcv3 76.15 76.25 76.42 T:deoxyseq128128v13 76.79 76.92 77.11 T:deoxysneq128128v13 87.61 87.65 87.71 T:ketjejrv2 111.79 111.95 112.12 T:deoxyseq256128v13 127.04 127.09 127.17 T:deoxysneq256128v13 130.36 130.42 130.45 T:led80n6t4silcv3 288.88? 302.94? 503.25? aes256gcmv1 342.42 354.10 366.10 T:acorn128v2 351.96 354.10 364.18 T:acorn128 1583.16 1583.70 1584.33 T:led80n6t4silcv2 1587.92 1588.16 1588.30 T:led80n6silcv1 2188.48 2188.93 2189.45 T:present80n6silcv1 2188.82 2189.18 2189.43 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.29 T:tiaoxinv1 0.29 0.29 0.29 T:tiaoxinv2 0.31 0.31 0.32 aegis128l 0.31 0.32 0.32 T:aegis128l 0.49 0.50 0.51 aegis256 0.51 0.52 0.52 T:aezv5 0.52 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.52 0.52 0.53 T:aegis128 0.74 0.75 0.77 T:aeadaes128ocbtaglen128v1 0.77 0.77 0.77 T:aes128otrpv3 0.77 0.78 0.79 T:morus1280256v1 0.77 0.78 0.78 T:morus1280128v1 0.78 0.79 0.79 T:morus1280256v2 0.79 0.79 0.81 T:morus1280128v2 0.85 0.85 0.86 T:aes128otrcv3 0.93 0.93 0.98 T:aeadaes192ocbtaglen128v1 0.96 0.97 0.98 T:aes128gcmv1 1.02 1.02 1.03 T:aeadaes256ocbtaglen128v1 1.05 1.06 1.06 T:aes256otrpv3 1.06 1.06 1.08 T:deoxysneq128128v1 1.07 1.08 1.09 T:deoxysi128v141 1.15 1.15 1.16 T:aes256otrcv3 1.16 1.16 1.18 T:deoxysneq256128v1 1.17 1.18 1.18 T:morus640128v1 1.18 1.19 1.20 T:morus640128v2 1.22 1.24 1.26 T:deoxysi256v141 1.27 1.28 1.28 T:colm0v1 1.52 1.52 1.53 T:deoxysii128v141 1.53 1.53 1.55 T:deoxyseq128128v1 1.75 1.75 1.76 T:deoxysii256v141 1.75 1.76 1.76 T:deoxyseq256128v1 1.81 1.82 1.82 T:aes128otrsv3 1.89 1.90 1.90 T:aes256gcmv1 2.25 2.27 2.28 T:norx6444v3 2.45 2.46 2.46 T:aes256otrsv3 2.51 2.51 2.53 T:norx6441v2 2.52 2.52 2.54 T:norx6441v3 2.83 2.83 2.83 T:aes128n8t8clocv2 2.82 2.83 2.83 T:aes128n12t8clocv2 2.83 2.83 2.84 T:aes128n12t8clocv3 2.85 2.85 2.85 T:aes128n8t8silcv2 2.85 2.85 2.88 T:aes128n12t8silcv3 2.88 2.88 2.88 T:aes128n12t8silcv2 2.90 2.92 2.93 T:norx6441v1 3.48 3.48 3.50 T:seakeyakv2 3.79 3.81 3.83 T:norx6461v3 3.83 3.85 3.87 T:norx6461v2 4.32 4.32 4.35 T:norx3241v2 4.32 4.32 4.34 T:norx3241v3 4.35 4.37 4.38 T:lakekeyakv2 4.40 4.42 4.44 T:norx6461v1 4.57 4.58 4.60 T:lakekeyakv1 4.71 4.72 4.73 T:oceankeyakv2 5.07 5.09 5.10 T:norx3241v1 5.32 5.35 5.39 T:norx6444v2 5.88 5.88 5.89 T:aesjambuv1 6.05 6.07 6.08 T:norx6444v1 6.52 6.52 6.54 T:norx3261v3 6.54 6.55 6.59 T:norx3261v2 7.55 7.58 7.59 T:ascon96v1 7.60 7.62 7.65 T:ascon128av11 7.63 7.64 7.66 T:norx3261v1 7.65 7.67 7.70 ascon128av12 7.70 7.71 7.72 T:riverkeyakv2 8.08 8.09 8.13 T:lunarkeyakv2 9.05 9.07 9.10 T:ketjemajorv2 9.90 9.95 9.99 T:ketjeminorv2 11.06 11.07 11.08 T:ascon128v1 11.06 11.08 11.09 T:ascon128v11 11.10 11.13 11.16 ascon128v12 13.12 13.14 13.16 T:aes128otrsv1 13.15 13.18 13.20 T:aes128otrsv2 13.54 13.55 13.56 T:aes128otrpv1 13.53 13.55 13.57 T:aes128otrpv2 15.58 15.60 15.61 T:twine80n6t4clocv2 15.99 16.00 16.00 T:twine80n6t4clocv3 17.30 17.34 17.38 T:aes256otrsv1 17.34 17.34 17.35 T:aes256otrsv2 17.63 17.65 17.67 T:aes256otrpv1 17.65 17.67 17.68 T:aes256otrpv2 17.79 17.80 17.83 T:aes128n12clocv1 17.91 17.93 17.94 T:aes128n8clocv1 18.51 18.52 18.54 T:aes128n12silcv1 18.54 18.56 18.57 T:aes128n8silcv1 20.85? 23.66? 24.25? T:oceankeyakv1 28.40 28.46 28.49 T:proest256otrv1 29.02 29.10 29.13 T:ketjesrv1 30.58 30.61 30.64 T:ketjesrv2 31.18 31.22 31.28 T:riverkeyakv1 53.39 53.42 53.46 T:proest128otrv1 56.21 56.25 56.30 T:ketjejrv1 57.88 57.89 57.94 T:acorn128v3 76.01 76.04 76.46 T:present80n6t4silcv3 77.17 77.21 77.35 T:deoxysneq128128v13 86.31 86.42 87.02 T:seakeyakv1 91.03 91.12 93.10 T:twine80n6clocv1 91.43 91.47 91.82 T:ketjejrv2 103.31 103.54 103.79 T:aezv1 116.41 116.44 116.51 T:deoxyseq128128v13 127.62 127.66 127.78 T:deoxysneq256128v13 131.66 131.68 131.73 T:led80n6t4silcv3 170.05 170.39 170.55 T:deoxyseq256128v13 312.30? 312.52? 499.36? aes256gcmv1 397.10 397.15 406.31 T:acorn128 402.09? 406.77? 469.60? T:acorn128v2 2394.97 2395.33 2395.98 T:led80n6silcv1 2387.54 2398.74 2399.66 T:led80n6t4silcv2 3301.75 3301.97 3302.21 T:present80n6silcv1 3301.92 3329.64 3331.45 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.31 0.32 0.32 T:aegis128l 0.32 0.32 0.33 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.49 0.49 0.50 aegis256 0.51 0.51 0.52 T:aegis128 0.51 0.52 0.52 T:aezv5 0.52 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.75 0.76 0.76 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.80 T:morus1280256v1 0.79 0.79 0.79 T:morus1280128v1 0.80 0.80 0.80 T:morus1280128v2 0.80 0.80 0.81 T:morus1280256v2 0.88 0.88 0.88 T:aes128otrcv3 0.89 0.89 0.90 T:aes128gcmv1 0.91? 0.92? 1.13? T:aeadaes192ocbtaglen128v1 1.06 1.06 1.07 T:aeadaes256ocbtaglen128v1 1.08 1.08 1.08 T:aes256otrpv3 1.18 1.19 1.19 T:morus640128v1 1.19 1.19 1.19 T:aes256otrcv3 1.19 1.20 1.21 T:morus640128v2 1.24 1.24 1.25 T:deoxysi128v141 1.27 1.27 1.28 T:deoxysneq128128v1 1.32 1.33 1.34 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.40 1.41 1.44 T:deoxysi256v141 1.56 1.56 1.58 T:deoxysii128v141 1.81 1.81 1.83 T:deoxysii256v141 1.84 1.84 1.85 T:aes128otrsv3 1.86 1.86 1.87 T:aes256gcmv1 1.91 1.91 1.92 T:deoxyseq128128v1 2.10 2.10 2.11 T:deoxyseq256128v1 2.26 2.27 2.28 T:norx6444v3 2.44 2.45 2.46 T:norx6441v3 2.45 2.46 2.47 T:norx6441v2 2.48 2.49 2.49 T:aes256otrsv3 2.82 2.82 2.83 T:aes128n8t8clocv2 2.80 2.82 2.83 T:aes128n12t8clocv2 2.82 2.83 2.84 T:aes128n12t8clocv3 2.83 2.84 2.85 T:aes128n12t8silcv3 2.83 2.84 2.85 T:aes128n8t8silcv2 2.84 2.85 2.86 T:aes128n12t8silcv2 2.87 2.88 2.89 T:norx6441v1 3.52 3.53 3.56 T:seakeyakv2 3.74 3.75 3.77 T:norx6461v3 3.77 3.78 3.81 T:norx6461v2 4.22 4.23 4.25 T:norx3241v3 4.23 4.25 4.27 T:norx3241v2 4.31 4.33 4.36 T:norx6461v1 4.35 4.36 4.38 T:lakekeyakv2 4.64 4.65 4.65 T:lakekeyakv1 4.75 4.76 4.81 T:oceankeyakv2 5.01 5.02 5.03 T:norx3241v1 5.31 5.33 5.33 T:norx6444v2 5.96 5.97 6.00 T:aesjambuv1 6.02 6.03 6.05 T:norx6444v1 6.46 6.47 6.49 T:norx3261v2 6.46 6.47 6.49 T:norx3261v3 7.55 7.56 7.57 T:norx3261v1 7.59 7.60 7.62 T:ascon128av11 7.58 7.61 7.63 ascon128av12 7.63 7.65 7.67 T:ascon96v1 7.72 7.73 7.74 T:riverkeyakv2 8.13 8.14 8.19 T:lunarkeyakv2 9.12 9.19 9.26 T:ketjemajorv2 9.87 9.93 9.98 T:ketjeminorv2 10.99 11.00 11.02 T:ascon128v1 10.99 11.01 11.02 T:ascon128v11 11.09 11.10 11.12 ascon128v12 13.48 13.50 13.52 T:aes128otrsv2 13.59 13.61 13.63 T:aes128otrsv1 13.63 13.64 13.66 T:aes128otrpv2 13.64 13.66 13.67 T:aes128otrpv1 15.54 15.55 15.56 T:twine80n6t4clocv2 15.96 15.97 15.98 T:twine80n6t4clocv3 17.35 17.37 17.41 T:aes128n12clocv1 17.55 17.59 17.60 T:aes256otrsv2 17.63 17.65 17.67 T:aes128n8clocv1 17.76 17.77 17.81 T:aes256otrsv1 17.76 17.78 17.79 T:aes256otrpv1 17.76 17.78 17.80 T:aes256otrpv2 18.49 18.52 18.56 T:aes128n12silcv1 18.52 18.54 18.59 T:aes128n8silcv1 20.94? 23.82? 24.31? T:oceankeyakv1 28.40 28.41 28.53 T:proest256otrv1 29.38 29.44 29.50 T:ketjesrv1 30.47 30.51 30.54 T:ketjesrv2 31.24 31.30 31.32 T:riverkeyakv1 53.52 53.56 53.58 T:proest128otrv1 55.45 55.51 55.71 T:ketjejrv1 57.99 58.03 58.09 T:acorn128v3 76.31 76.33 76.53 T:present80n6t4silcv3 87.21 87.31 87.77 T:seakeyakv1 89.96 89.99 90.02 T:ketjejrv2 90.94 91.03 91.97 T:twine80n6clocv1 91.86 91.97 92.09 T:deoxysneq128128v13 104.08 104.35 104.77 T:aezv1 116.36 116.48 116.61 T:deoxyseq128128v13 132.20 132.23 132.27 T:led80n6t4silcv3 143.33 143.49 143.69 T:deoxysneq256128v13 170.09 170.69 170.75 T:deoxyseq256128v13 312.09? 312.31? 499.04? aes256gcmv1 402.09 402.12 413.14 T:acorn128 401.83 406.78 415.61 T:acorn128v2 2386.71 2388.02 2398.58 T:led80n6t4silcv2 2394.92 2395.06 2395.49 T:led80n6silcv1 3301.52 3302.70 3303.11 T:present80n6silcv1 3302.61 3330.46 3334.56 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.31 0.32 0.32 T:aegis128l 0.32 0.32 0.33 T:aezv5 0.32 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aezv3 0.33 0.33 0.35 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.38 T:tiaoxinv2 0.51 0.51 0.51 T:aegis128 0.50 0.52 0.53 aegis256 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.79 T:aes128otrpv3 0.78 0.79 0.79 T:morus1280128v1 0.78 0.79 0.80 T:morus1280256v1 0.80 0.80 0.80 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.88 0.88 0.88 T:aes128otrcv3 0.88 0.88 0.89 T:aes128gcmv1 0.91 0.91 0.93 T:aeadaes192ocbtaglen128v1 1.06 1.06 1.06 T:aeadaes256ocbtaglen128v1 1.07 1.08 1.08 T:aes256otrpv3 1.18 1.18 1.18 T:morus640128v1 1.19 1.19 1.19 T:aes256otrcv3 1.19 1.19 1.20 T:morus640128v2 1.23 1.24 1.24 T:deoxysi128v141 1.26 1.27 1.27 T:deoxysneq128128v1 1.33 1.33 1.33 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.40 1.42 1.43 T:deoxysi256v141 1.56 1.58 1.59 T:deoxysii128v141 1.81 1.81 1.81 T:deoxysii256v141 1.84 1.84 1.84 T:aes128otrsv3 1.85 1.85 1.86 T:aes256gcmv1 1.91 1.92 1.92 T:deoxyseq128128v1 2.10 2.10 2.11 T:deoxyseq256128v1 2.26 2.27 2.28 T:norx6444v3 2.44 2.45 2.47 T:norx6441v2 2.46 2.47 2.49 T:norx6441v3 2.48 2.49 2.49 T:aes256otrsv3 2.81 2.82 2.82 T:aes128n8t8clocv2 2.82 2.82 2.83 T:aes128n12t8clocv2 2.82 2.83 2.83 T:aes128n12t8clocv3 2.83 2.83 2.83 T:aes128n12t8silcv3 2.83 2.83 2.84 T:aes128n8t8silcv2 2.84 2.85 2.85 T:aes128n12t8silcv2 2.88 2.88 2.89 T:norx6441v1 3.54 3.54 3.56 T:seakeyakv2 3.75 3.76 3.77 T:norx6461v3 3.77 3.78 3.80 T:norx6461v2 4.23 4.24 4.26 T:norx3241v2 4.23 4.25 4.27 T:norx3241v3 4.30 4.32 4.33 T:norx6461v1 4.37 4.38 4.39 T:lakekeyakv2 4.65 4.65 4.66 T:lakekeyakv1 4.76 4.76 4.77 T:oceankeyakv2 5.00 5.01 5.02 T:norx3241v1 5.32 5.34 5.35 T:norx6444v2 5.96 5.97 5.97 T:aesjambuv1 6.03 6.04 6.05 T:norx6444v1 6.45 6.46 6.47 T:norx3261v3 6.45 6.48 6.51 T:norx3261v2 7.55 7.56 7.57 T:norx3261v1 7.57 7.58 7.60 ascon128av12 7.59 7.61 7.64 T:ascon128av11 7.65 7.67 7.67 T:ascon96v1 7.73 7.75 7.76 T:riverkeyakv2 8.15 8.17 8.18 T:lunarkeyakv2 9.11 9.16 9.18 T:ketjemajorv2 9.88 9.95 9.99 T:ketjeminorv2 10.98 10.99 11.01 T:ascon128v11 10.99 11.00 11.02 T:ascon128v1 11.08 11.10 11.11 ascon128v12 13.48 13.49 13.51 T:aes128otrsv2 13.59 13.60 13.63 T:aes128otrsv1 13.64 13.66 13.68 T:aes128otrpv1 13.65 13.66 13.67 T:aes128otrpv2 15.54 15.54 15.55 T:twine80n6t4clocv2 15.95 15.96 15.97 T:twine80n6t4clocv3 17.37 17.38 17.40 T:aes128n12clocv1 17.59 17.62 17.64 T:aes256otrsv2 17.63 17.65 17.67 T:aes128n8clocv1 17.76 17.78 17.81 T:aes256otrpv1 17.78 17.79 17.81 T:aes256otrsv1 17.77 17.79 17.84 T:aes256otrpv2 18.50 18.54 18.57 T:aes128n12silcv1 18.50 18.55 18.56 T:aes128n8silcv1 20.89? 23.77? 24.33? T:oceankeyakv1 28.39 28.41 28.58 T:proest256otrv1 29.37 29.48 29.49 T:ketjesrv1 30.48 30.50 30.53 T:ketjesrv2 31.25 31.32 31.40 T:riverkeyakv1 53.51 53.55 53.59 T:proest128otrv1 55.50 55.58 55.60 T:ketjejrv1 58.01 58.06 58.08 T:acorn128v3 76.30 76.32 76.50 T:present80n6t4silcv3 87.10 87.21 87.49 T:seakeyakv1 90.03 90.05 90.12 T:ketjejrv2 90.93 90.97 91.97 T:twine80n6clocv1 91.92 92.04 92.18 T:deoxysneq128128v13 103.99 104.08 104.35 T:aezv1 116.44 116.50 116.65 T:deoxyseq128128v13 132.21 132.22 132.26 T:led80n6t4silcv3 143.54 143.73 143.76 T:deoxysneq256128v13 170.05 170.19 170.52 T:deoxyseq256128v13 304.63? 304.91? 491.92? aes256gcmv1 402.08 402.29 413.10 T:acorn128 402.01 406.77 415.93 T:acorn128v2 2387.28 2391.32 2399.07 T:led80n6t4silcv2 2394.98 2395.18 2395.25 T:led80n6silcv1 3301.54 3302.52 3303.01 T:present80n6silcv1 3302.74 3330.75 3334.43 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.77 1.77 1.96 T:aegis128l 1.78 1.79 1.80 aegis128l 1.91 1.92 1.95 T:aegis128 2.12 2.15 2.19 aegis256 2.30? 2.32? 2.58? T:aezv3 2.33? 2.34? 2.71? T:aezv4 2.24? 2.38? 2.82? T:aezv5 2.35? 2.38? 2.67? T:tiaoxinv1 2.35? 2.46? 2.84? T:tiaoxinv2 3.18 3.27 3.52 T:aeadaes128ocbtaglen128v1 3.61 3.63 3.68 T:aes128otrpv3 3.96 3.98 4.37 T:aeadaes256ocbtaglen128v1 4.03 4.04 4.12 T:deoxysneq128128v1 4.25 4.27 4.42 T:aes128otrsv3 4.23 4.33 4.53 T:morus640128v1 4.41 4.42 4.61 T:morus1280128v1 4.38 4.46 4.68 T:morus1280256v1 4.45 4.49 4.57 T:morus640128v2 4.51? 4.55? 5.16? T:colm0v1 4.64 4.66 4.72 T:aes256otrpv3 4.67 4.72 4.90 T:morus1280256v2 4.70 4.77 5.01 T:morus1280128v2 4.77 4.83 5.02 T:aes128n12t8clocv3 4.80 4.83 4.89 T:deoxysneq256128v1 4.78 4.84 4.86 T:aes128n8t8clocv2 4.82 4.85 4.88 T:aes128n12t8clocv2 4.94 4.98 5.26 T:deoxysi128v141 4.98 5.02 5.08 T:aes128otrcv3 5.47 5.51 5.56 T:aes256otrsv3 5.74 5.77 5.78 T:aes128n12t8silcv3 5.75 5.77 5.77 T:aes128n8t8silcv2 5.79 5.80 5.81 T:aes128n12t8silcv2 5.78 5.94 6.25 T:deoxysi256v141 5.95 5.97 6.15 T:aes128gcmv1 6.41 6.45 6.51 T:aes256otrcv3 6.62 6.65 6.70 T:deoxyseq128128v1 5.98? 6.73? 11.31? T:aeadaes192ocbtaglen128v1 8.41 8.43 8.53 T:deoxysii128v141 8.45 8.54 8.66 T:norx6441v3 8.41 8.55 8.72 T:norx6441v2 8.51 8.59 8.66 T:norx6441v1 9.12 9.13 9.30 T:deoxyseq256128v1 9.27 9.29 9.32 T:aesjambuv1 9.98 10.05 10.09 T:deoxysii256v141 10.72 10.78 10.92 T:norx3241v3 10.79 10.86 10.94 T:norx3241v2 10.95 11.04 11.10 T:norx3241v1 11.49 11.55 11.80 T:ascon96v1 11.51 11.58 11.82 T:ascon128av11 12.12 12.27 12.54 ascon128av12 12.42 12.50 12.90 T:norx6461v1 12.47 12.58 12.73 T:norx6461v2 12.45 12.60 12.77 T:norx6461v3 14.65 14.81 15.02 T:norx6444v3 15.02 15.23 15.49 T:ascon128v11 15.05 15.26 15.59 T:ascon128v1 15.09 15.26 15.34 ascon128v12 15.40 15.70 15.81 T:lakekeyakv1 16.02 16.08 16.16 T:norx3261v2 16.12 16.20 16.23 T:norx3261v3 16.21 16.30 16.35 T:norx3261v1 18.11 18.31 18.45 T:riverkeyakv2 19.08 19.12 19.34 T:lakekeyakv2 21.72 21.77 21.81 T:twine80n6t4clocv2 22.59 22.64 22.82 T:aes128n12clocv1 22.55 22.65 22.99 T:aes128n8clocv1 22.64 22.70 22.85 T:aes128otrsv1 22.75 22.89 22.98 T:aes128otrsv2 23.45 23.52 23.67 T:aes128otrpv1 23.49 23.57 23.63 T:twine80n6t4clocv3 23.46 23.60 23.84 T:aes128otrpv2 25.86 25.96 26.35 T:aes128n8silcv1 25.98 26.09 26.19 T:aes128n12silcv1 29.65 29.72 29.87 T:aes256otrsv2 29.70 29.78 29.90 T:aes256otrsv1 30.41 30.49 30.64 T:aes256otrpv2 30.44 30.55 30.70 T:aes256otrpv1 31.13 31.23 31.41 T:aes256gcmv1 32.22 32.27 32.53 T:seakeyakv2 34.69 35.06 35.38 T:ketjeminorv2 37.64 37.82 37.90 T:norx6444v2 42.68 42.88 43.19 T:norx6444v1 46.02 46.41 46.53 T:ketjesrv1 53.06 53.38 53.57 T:oceankeyakv2 54.51 54.64 54.71 T:ketjesrv2 56.13 56.41 56.60 T:riverkeyakv1 64.58 64.72 64.90 T:ketjemajorv2 73.60 74.00 74.27 T:ketjejrv1 82.13 82.50 83.64 T:proest256otrv1 87.20 87.49 88.19 T:deoxysneq128128v13 94.38 94.64 94.92 T:present80n6t4silcv3 102.17 102.50 104.48 T:twine80n6clocv1 104.18 104.49 105.01 T:proest128otrv1 123.33 123.56 123.93 T:ketjejrv2 126.08 126.27 127.02 T:aezv1 132.68 133.18 134.04 T:lunarkeyakv2 143.52 144.02 144.14 T:deoxysneq256128v13 144.88 145.06 145.52 T:deoxyseq128128v13 156.68 156.86 157.05 T:led80n6t4silcv3 210.48 210.67 211.01 T:acorn128v3 213.09 213.47 214.31 T:deoxyseq256128v13 227.17? 256.82? 261.94? T:oceankeyakv1 352.59? 352.88? 562.29? aes256gcmv1 635.62 640.18 646.34 T:seakeyakv1 1372.46 1372.73 1402.98 T:acorn128 1395.20? 1420.27? 1642.55? T:acorn128v2 2683.32 2684.52 2685.42 T:led80n6silcv1 2687.28 2687.80 2689.09 T:led80n6t4silcv2 3698.66 3699.31 3700.05 T:present80n6t4silcv2 3701.57 3702.03 3702.77 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.78 1.80 1.95 T:aegis128l 1.88 1.90 1.93 T:aegis128 1.96? 1.98? 2.19? aegis128l 2.26 2.28 2.34 T:aezv5 2.33 2.34 2.38 T:aezv3 2.31 2.34 2.38 aegis256 2.32? 2.34? 3.04? T:aezv4 2.37 2.38 2.59 T:tiaoxinv2 2.37? 2.38? 2.81? T:tiaoxinv1 3.45 3.54 3.73 T:aeadaes128ocbtaglen128v1 3.67 3.73 3.83 T:aes128otrpv3 4.27 4.30 4.37 T:aeadaes256ocbtaglen128v1 4.31 4.35 4.45 T:morus640128v1 4.45 4.47 4.48 T:aes128otrsv3 4.57 4.59 4.70 T:morus1280128v1 4.62 4.66 4.84 T:morus1280256v1 4.76 4.82 4.83 T:aes256otrpv3 4.83 4.87 5.19 T:morus1280256v2 4.89 4.91 4.96 T:aes128n8t8clocv2 4.88 4.91 5.23 T:morus1280128v2 4.91 4.93 4.98 T:aes128n12t8clocv2 4.84 4.94 5.13 T:morus640128v2 4.91 4.95 5.12 T:aes128n12t8clocv3 5.11 5.12 5.14 T:aes128otrcv3 5.25 5.30 5.66 T:colm0v1 5.76 5.80 5.89 T:deoxysneq256128v1 5.80 5.81 5.84 T:aes256otrsv3 5.81 5.82 5.84 T:aes128n8t8silcv2 5.83 5.84 5.85 T:aes128n12t8silcv3 5.84 5.90 5.91 T:aes128n12t8silcv2 5.98 6.01 6.06 T:aes128gcmv1 6.14? 6.17? 8.30? T:aeadaes192ocbtaglen128v1 6.16 6.18 6.34 T:deoxysneq128128v1 6.51 6.55 6.66 T:deoxysi128v141 6.75 6.81 6.93 T:aes256otrcv3 7.55 7.58 7.81 T:deoxysi256v141 8.60 8.71 8.77 T:norx6441v1 8.65 8.73 8.85 T:norx6441v3 8.71 8.83 9.04 T:norx6441v2 9.16 9.19 9.36 T:deoxyseq128128v1 9.34 9.38 9.48 T:deoxysii128v141 9.44 9.45 9.47 T:aesjambuv1 10.88 10.90 11.02 T:deoxyseq256128v1 10.91 10.98 11.13 T:norx3241v3 10.95 11.02 11.12 T:norx3241v2 10.98 11.04 11.12 T:norx3241v1 11.49 11.57 11.60 T:deoxysii256v141 11.63 11.66 11.95 T:ascon96v1 11.38 11.71 12.00 T:ascon128av11 12.07 12.23 12.44 ascon128av12 12.71 12.75 12.90 T:norx6461v1 12.69 12.81 12.95 T:norx6461v3 12.84 13.00 13.15 T:norx6461v2 14.82 14.93 15.10 T:norx6444v3 15.04 15.20 15.67 T:ascon128v1 14.94 15.21 15.42 T:ascon128v11 15.13 15.43 15.61 ascon128v12 15.35 15.77 15.92 T:lakekeyakv1 16.20 16.31 16.50 T:norx3261v2 16.31 16.45 16.56 T:norx3261v3 16.39 16.45 16.55 T:norx3261v1 18.09 18.27 18.51 T:riverkeyakv2 18.90 18.96 19.13 T:lakekeyakv2 21.66 21.69 21.74 T:twine80n6t4clocv2 22.38 22.46 22.57 T:aes128n12clocv1 22.45 22.54 22.70 T:aes128n8clocv1 23.26 23.44 23.74 T:aes128otrsv1 23.44 23.57 23.83 T:aes128otrsv2 23.48 23.59 23.64 T:twine80n6t4clocv3 23.77 23.89 24.05 T:aes128otrpv2 23.88 23.93 24.12 T:aes128otrpv1 26.22 26.46 26.57 T:aes128n12silcv1 26.15 26.65 26.93 T:aes128n8silcv1 30.32 30.46 30.92 T:aes256otrsv1 30.30 30.52 31.01 T:aes256otrsv2 30.67 30.73 30.84 T:aes256otrpv1 30.59 30.79 31.06 T:aes256otrpv2 30.77 31.05 31.41 T:aes256gcmv1 32.42 32.62 32.80 T:seakeyakv2 34.34 34.58 34.95 T:ketjeminorv2 37.84 38.02 38.20 T:norx6444v2 42.80 42.95 43.09 T:norx6444v1 46.68 46.82 47.19 T:ketjesrv1 53.27 53.68 54.09 T:oceankeyakv2 54.26 54.59 54.89 T:ketjesrv2 56.20 56.45 56.64 T:riverkeyakv1 64.23 64.51 64.87 T:ketjemajorv2 73.33 73.62 73.76 T:ketjejrv1 83.16 83.48 83.70 T:proest256otrv1 95.59 95.78 96.16 T:present80n6t4silcv3 101.66 101.82 102.72 T:deoxysneq128128v13 102.27 102.59 103.51 T:twine80n6clocv1 105.30 107.04 108.49 T:proest128otrv1 122.51 122.99 123.27 T:ketjejrv2 133.04 133.37 133.88 T:lunarkeyakv2 137.01 137.33 137.65 T:aezv1 144.70 145.05 146.16 T:deoxyseq128128v13 158.45 158.82 159.07 T:led80n6t4silcv3 159.69 159.88 160.48 T:deoxysneq256128v13 210.81 211.07 211.36 T:acorn128v3 213.39 214.63 215.79 T:deoxyseq256128v13 229.59? 256.24? 262.91? T:oceankeyakv1 352.62? 353.02? 562.40? aes256gcmv1 637.48 639.38 642.23 T:seakeyakv1 1399.20 1399.50 1433.34 T:acorn128 1394.85 1420.48 1451.68 T:acorn128v2 2672.34 2673.52 2675.03 T:led80n6t4silcv2 2682.29 2682.70 2684.54 T:led80n6silcv1 3699.59 3700.15 3701.48 T:present80n6t4silcv2 3701.30 3703.27 3704.42 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.77 1.79 1.79 T:aegis128l 1.88 1.89 1.90 T:aegis128 1.96 1.97 1.98 T:aezv5 2.00? 2.02? 2.37? aegis128l 2.00? 2.02? 2.34? T:aezv3 2.02 2.03 2.07 T:aezv4 2.34 2.35 2.40 T:tiaoxinv1 2.35? 2.36? 2.63? T:tiaoxinv2 2.38? 2.39? 2.73? aegis256 3.41 3.45 3.55 T:aeadaes128ocbtaglen128v1 3.70 3.75 3.83 T:aes128otrpv3 4.20 4.24 4.29 T:morus640128v1 4.29 4.30 4.37 T:aeadaes256ocbtaglen128v1 4.46 4.48 4.49 T:aes128otrsv3 4.51 4.58 4.62 T:morus1280128v1 4.55 4.58 4.62 T:morus1280256v1 4.77 4.78 4.81 T:aes256otrpv3 4.81 4.81 4.91 T:morus1280256v2 4.82 4.84 4.90 T:morus1280128v2 4.81 4.85 4.98 T:morus640128v2 4.80 4.87 5.20 T:aes128n12t8clocv3 4.85 4.87 4.90 T:aes128n8t8clocv2 4.86 4.91 5.16 T:aes128n12t8clocv2 5.12 5.15 5.18 T:aes128otrcv3 5.29 5.35 5.66 T:colm0v1 5.62 5.65 5.83 T:deoxysneq256128v1 5.73 5.73 5.77 T:aes128n8t8silcv2 5.75 5.76 5.78 T:aes128n12t8silcv3 5.79 5.80 5.83 T:aes256otrsv3 5.79 5.84 5.84 T:aes128n12t8silcv2 5.98 6.02 6.05 T:aes128gcmv1 6.00 6.03 6.07 T:deoxysneq128128v1 6.12? 6.14? 11.51? T:aeadaes192ocbtaglen128v1 6.48 6.52 6.62 T:deoxysi128v141 6.76 6.77 6.82 T:aes256otrcv3 7.51 7.55 7.65 T:deoxysi256v141 8.60 8.69 8.75 T:norx6441v1 8.69 8.75 8.81 T:norx6441v3 8.82 8.91 8.99 T:norx6441v2 9.15 9.18 9.30 T:deoxyseq128128v1 9.38 9.40 9.42 T:deoxysii128v141 9.41 9.44 9.45 T:aesjambuv1 10.77 10.85 10.95 T:norx3241v2 10.80 10.92 10.98 T:norx3241v3 10.92 10.98 11.08 T:deoxyseq256128v1 11.00 11.05 11.12 T:norx3241v1 11.47 11.54 11.59 T:ascon96v1 11.48 11.55 11.61 T:deoxysii256v141 11.52 11.73 11.82 T:ascon128av11 11.98 12.16 12.35 ascon128av12 12.59 12.75 12.84 T:norx6461v3 12.73 12.79 12.88 T:norx6461v1 12.80 12.91 12.95 T:norx6461v2 14.74 14.85 15.02 T:norx6444v3 14.82 14.98 15.21 T:ascon128v11 14.86 15.01 15.16 T:ascon128v1 15.02 15.16 15.26 ascon128v12 15.35 15.48 15.71 T:lakekeyakv1 16.03 16.17 16.29 T:norx3261v2 16.25 16.29 16.41 T:norx3261v3 16.37 16.43 16.47 T:norx3261v1 18.27 18.38 18.45 T:riverkeyakv2 19.02 19.06 19.20 T:lakekeyakv2 21.70 21.80 22.02 T:twine80n6t4clocv2 22.41 22.46 22.67 T:aes128n8clocv1 22.33 22.47 22.69 T:aes128n12clocv1 23.51 23.61 23.77 T:twine80n6t4clocv3 23.42 23.62 23.91 T:aes128otrsv1 23.48 23.67 24.07 T:aes128otrsv2 23.83 24.04 24.14 T:aes128otrpv2 23.82 24.21 24.30 T:aes128otrpv1 26.01 26.20 26.48 T:aes128n12silcv1 26.01 26.37 26.41 T:aes128n8silcv1 30.32 30.66 30.80 T:aes256otrsv2 30.40 30.74 30.86 T:aes256otrsv1 30.77 30.82 31.13 T:aes256otrpv2 30.70 30.84 31.01 T:aes256otrpv1 30.62 30.90 31.23 T:aes256gcmv1 32.47 32.53 32.70 T:seakeyakv2 34.67 34.88 35.21 T:ketjeminorv2 38.09 38.33 38.46 T:norx6444v2 42.66 42.73 42.91 T:norx6444v1 46.65 46.79 46.98 T:ketjesrv1 53.59 53.73 53.82 T:oceankeyakv2 54.29 54.54 54.70 T:ketjesrv2 55.87 56.02 56.55 T:riverkeyakv1 64.68 64.78 65.23 T:ketjemajorv2 74.20 74.53 75.45 T:ketjejrv1 81.12 81.15 81.55 T:proest256otrv1 95.43 95.69 95.76 T:present80n6t4silcv3 102.01 102.39 103.23 T:twine80n6clocv1 102.91 103.38 103.98 T:deoxysneq128128v13 105.03 105.73 106.01 T:proest128otrv1 122.77 123.10 123.35 T:ketjejrv2 133.12 133.43 133.61 T:lunarkeyakv2 136.76 137.09 137.22 T:aezv1 145.83 146.23 146.70 T:deoxyseq128128v13 158.16 158.30 158.55 T:led80n6t4silcv3 161.16 161.33 161.57 T:deoxysneq256128v13 210.74 210.84 211.23 T:acorn128v3 214.74 215.09 215.99 T:deoxyseq256128v13 227.80? 256.20? 262.77? T:oceankeyakv1 345.61? 346.32? 554.90? aes256gcmv1 636.02 639.51 644.39 T:seakeyakv1 1399.04 1399.41 1433.52 T:acorn128 1395.16 1420.53 1452.19 T:acorn128v2 2670.97 2672.85 2674.25 T:led80n6t4silcv2 2682.93 2683.46 2684.83 T:led80n6silcv1 3699.94 3701.26 3702.42 T:present80n6t4silcv2 3701.62 3703.31 3703.75 T:present80n6silcv1