VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.20? 0.21? 0.23? T:tiaoxinv1 0.19? 0.22? 0.23? T:tiaoxinv2 0.25 0.25 0.26 T:aegis128l 0.25 0.26 0.27 aegis128l 0.40 0.41 0.41 aegis256 0.44 0.47 0.47 T:aegis128 0.62 0.62 0.63 T:aezv4 0.61 0.63 0.63 T:aezv5 0.62 0.63 0.63 T:aezv3 0.62 0.63 0.64 T:morus1280128v2 0.63 0.63 0.64 T:aes128otrcv3 0.63 0.63 0.64 T:morus1280256v1 0.63 0.63 0.65 T:morus1280256v2 0.63 0.64 0.64 T:morus1280128v1 0.64 0.65 0.67 T:aes128otrpv3 0.64 0.66 0.67 T:aes128otrsv3 0.65 0.67 0.69 T:aeadaes128ocbtaglen128v1 0.40? 0.75? 0.81? T:aeadaes192ocbtaglen128v1 0.83 0.86 0.87 T:deoxysi128v141 0.86 0.87 0.88 T:aes256otrcv3 0.87 0.88 0.90 T:aes256otrpv3 0.88 0.89 0.90 T:aes256otrsv3 0.89 0.91 0.93 T:aeadaes256ocbtaglen128v1 0.88 0.92 0.96 T:aes256gcmv1 0.92 0.93 0.93 T:deoxysneq128128v1 0.99 0.99 1.01 T:deoxysneq256128v1 0.98 1.00 1.01 T:deoxysi256v141 1.07 1.07 1.08 T:morus640128v2 1.07 1.08 1.08 T:morus640128v1 1.13 1.15 1.18 T:norx6444v3 1.18 1.20 1.20 T:aes128gcmv1 1.61 1.62 1.62 T:colm0v1 1.73 1.74 1.76 T:deoxysii128v141 1.76 1.77 1.78 T:deoxyseq128128v1 1.99 2.01 2.01 T:deoxysii256v141 2.00 2.02 2.02 T:deoxyseq256128v1 2.06 2.12 2.16 T:lunarkeyakv2 2.11 2.13 2.15 T:norx6441v2 2.15 2.17 2.18 T:norx6441v3 2.55 2.57 2.58 T:norx6441v1 2.75 2.75 2.76 T:aes128n12t8silcv3 2.74 2.76 2.77 T:aes128n12t8clocv3 2.75 2.76 2.76 T:aes128n8t8clocv2 2.75 2.76 2.76 T:aes128n12t8clocv2 2.75 2.76 2.76 T:aes128n8t8silcv2 2.79 2.79 2.79 T:aes128n12t8silcv2 2.78 2.80 2.83 T:seakeyakv2 2.81 2.86 2.91 T:oceankeyakv2 3.23 3.26 3.30 T:norx6461v2 3.24 3.26 3.28 T:norx6461v3 3.73 3.77 3.80 T:norx6444v2 3.94 3.96 3.99 T:norx6461v1 3.96 3.98 3.98 T:norx3241v2 3.97 3.99 4.02 T:norx3241v3 4.09 4.12 4.15 T:lakekeyakv1 4.31 4.35 4.37 T:norx6444v1 4.41 4.44 4.48 T:lakekeyakv2 4.67 4.69 4.71 T:norx3241v1 5.71 5.72 5.72 T:aesjambuv1 5.88 5.90 5.91 T:norx3261v3 6.10 6.13 6.16 T:norx3261v2 7.18 7.21 7.23 T:norx3261v1 7.47 7.51 7.53 T:ascon128av11 7.49 7.52 7.54 T:ascon96v1 7.53 7.57 7.62 ascon128av12 7.82 7.89 7.96 T:ketjemajorv2 9.77 9.85 9.89 T:ketjeminorv2 9.86 9.91 9.97 T:riverkeyakv2 10.86 10.87 10.89 T:ascon128v1 10.86 10.89 10.92 T:ascon128v11 10.90 10.93 10.98 ascon128v12 13.46 13.48 13.52 T:aes128otrsv1 13.52 13.55 13.56 T:aes128otrsv2 13.74 13.76 13.79 T:aes128otrpv2 13.73 13.78 13.80 T:aes128otrpv1 11.29? 15.59? 18.21? T:oceankeyakv1 15.59 15.60 15.61 T:twine80n6t4clocv2 15.88 15.91 15.92 T:twine80n6t4clocv3 17.46 17.48 17.53 T:aes256otrsv1 17.49 17.52 17.55 T:aes256otrsv2 17.64 17.66 17.68 T:aes256otrpv1 17.65 17.67 17.71 T:aes256otrpv2 23.01 23.03 23.07 T:aes128n12clocv1 23.16 23.21 23.24 T:aes128n8clocv1 24.19 24.22 24.25 T:aes128n12silcv1 24.20 24.24 24.26 T:aes128n8silcv1 25.90 26.09 26.30 T:proest256otrv1 31.23 31.40 31.47 T:ketjesrv1 31.33 31.42 31.48 T:riverkeyakv1 32.06 32.08 32.16 T:ketjesrv2 50.77 50.88 51.01 T:proest128otrv1 51.17 51.26 51.29 T:acorn128v3 63.15 63.63 63.71 T:ketjejrv1 70.99 71.72 72.13 T:seakeyakv1 75.51 75.58 75.92 T:present80n6t4silcv3 76.60 76.75 77.01 T:deoxysneq128128v13 93.51 94.03 94.16 T:ketjejrv2 120.92 121.26 124.70 T:twine80n6clocv1 127.54 127.62 127.65 T:deoxysneq256128v13 130.76 130.81 130.87 T:led80n6t4silcv3 154.10 154.19 154.33 T:deoxyseq128128v13 159.18 159.78 160.09 T:aezv1 224.94 225.31 225.78 T:deoxyseq256128v13 303.63? 317.71? 517.53? aes256gcmv1 361.00 363.13 373.81 T:acorn128 355.30? 371.59? 443.58? T:acorn128v2 3176.30 3176.70 3177.03 T:led80n6silcv1 3167.59 3182.40 3184.34 T:led80n6t4silcv2 4375.79 4378.81 4379.08 T:present80n6t4silcv2 4379.98 4380.31 4380.56 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.25 0.26 aegis128l 0.25 0.26 0.27 T:aegis128l 0.36 0.37 0.37 T:tiaoxinv2 0.36 0.37 0.37 T:tiaoxinv1 0.41 0.41 0.42 aegis256 0.44 0.45 0.45 T:aegis128 0.62 0.62 0.66 T:aezv4 0.62 0.62 0.63 T:aezv5 0.62 0.62 0.63 T:aezv3 0.63 0.64 0.65 T:morus1280256v1 0.64 0.65 0.65 T:morus1280256v2 0.65 0.65 0.66 T:morus1280128v2 0.64 0.66 0.66 T:morus1280128v1 0.65 0.66 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.68 0.70 0.71 T:aes128otrpv3 0.67 0.70 0.71 T:aes128otrsv3 0.61? 0.76? 0.79? T:aeadaes192ocbtaglen128v1 0.85 0.90 0.94 T:aes256gcmv1 0.90 0.91 0.92 T:aes256otrcv3 0.92 0.92 0.94 T:aes256otrsv3 0.91 0.93 0.94 T:aes256otrpv3 0.96 0.96 0.98 T:aeadaes256ocbtaglen128v1 1.04 1.07 1.07 T:aes128gcmv1 1.06 1.07 1.08 T:morus640128v1 1.06 1.09 1.11 T:morus640128v2 1.12 1.14 1.15 T:norx6444v3 1.11 1.15 1.16 T:deoxysi128v141 1.20 1.21 1.23 T:deoxysneq128128v1 1.26 1.27 1.29 T:deoxysi256v141 1.30 1.31 1.32 T:deoxysneq256128v1 1.66 1.67 1.69 T:colm0v1 1.74 1.75 1.78 T:deoxysii128v141 1.98 2.01 2.02 T:deoxysii256v141 2.02 2.03 2.05 T:norx6441v2 2.02 2.05 2.06 T:norx6441v3 2.10 2.20 2.23 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.46 2.48 2.50 T:norx6441v1 2.60 2.61 2.62 T:deoxyseq256128v1 2.69 2.72 2.75 T:aes128n12t8silcv3 2.72 2.73 2.74 T:aes128n12t8silcv2 2.72 2.73 2.75 T:aes128n12t8clocv2 2.71 2.73 2.74 T:aes128n12t8clocv3 2.72 2.73 2.75 T:aes128n8t8clocv2 2.72 2.74 2.75 T:aes128n8t8silcv2 2.83 2.88 2.92 T:seakeyakv2 2.85 2.94 2.99 T:oceankeyakv2 3.12 3.15 3.19 T:norx6461v2 3.13 3.15 3.17 T:norx6461v3 3.72 3.74 3.78 T:norx6444v2 3.74 3.76 3.78 T:norx3241v2 3.76 3.79 3.81 T:norx6461v1 3.78 3.80 3.82 T:norx3241v3 4.22 4.25 4.28 T:lakekeyakv1 4.26 4.30 4.34 T:norx6444v1 4.38 4.40 4.44 T:lakekeyakv2 4.53 4.55 4.59 T:norx3241v1 5.71 5.74 5.77 T:norx3261v3 5.88 5.95 5.96 T:aesjambuv1 5.94 5.97 5.99 T:norx3261v2 7.07 7.08 7.09 T:norx3261v1 7.37 7.40 7.43 ascon128av12 7.58 7.62 7.65 T:ascon96v1 7.60 7.63 7.68 T:ascon128av11 7.84 7.95 8.02 T:ketjemajorv2 9.79 9.84 9.92 T:ketjeminorv2 9.94 9.98 10.00 T:riverkeyakv2 10.70 10.73 10.76 T:ascon128v1 10.70 10.74 10.76 T:ascon128v11 10.90 10.93 10.95 ascon128v12 13.86 13.89 13.92 T:aes128otrpv1 13.88 13.92 13.97 T:aes128otrpv2 14.02 14.05 14.08 T:aes128otrsv2 14.30 14.34 14.38 T:aes128otrsv1 15.47 15.49 15.52 T:twine80n6t4clocv2 15.79 15.81 15.85 T:twine80n6t4clocv3 11.54? 15.85? 18.49? T:oceankeyakv1 17.77 17.82 17.85 T:aes256otrpv1 17.84 17.87 17.92 T:aes256otrpv2 17.86 17.92 18.01 T:aes256otrsv2 18.29 18.32 18.37 T:aes256otrsv1 22.06 22.11 22.15 T:aes128n12clocv1 22.58 22.62 22.67 T:aes128n8clocv1 24.13 24.18 24.23 T:aes128n12silcv1 24.14 24.19 24.23 T:aes128n8silcv1 25.74 25.82 25.91 T:proest256otrv1 31.53 31.57 31.67 T:riverkeyakv1 31.82 31.88 31.96 T:ketjesrv2 31.84 32.12 32.15 T:ketjesrv1 50.97 51.06 51.16 T:proest128otrv1 51.49 51.57 51.64 T:acorn128v3 61.04 61.15 62.15 T:ketjejrv1 72.22 73.01 73.78 T:seakeyakv1 75.94 75.97 76.00 T:present80n6t4silcv3 88.81 89.42 89.50 T:ketjejrv2 105.81 105.96 106.12 T:deoxysneq128128v13 120.82 120.93 122.31 T:twine80n6clocv1 131.69 131.75 131.85 T:led80n6t4silcv3 154.00 154.13 154.27 T:deoxyseq128128v13 158.84 158.93 159.09 T:deoxysneq256128v13 159.57 159.93 160.88 T:aezv1 225.25 225.75 226.22 T:deoxyseq256128v13 302.70? 316.69? 517.32? aes256gcmv1 360.92 363.33 377.90 T:acorn128 367.17 371.24 382.45 T:acorn128v2 3164.22 3167.04 3184.18 T:led80n6t4silcv2 3176.38 3176.81 3177.25 T:led80n6silcv1 4376.89 4380.40 4380.83 T:present80n6t4silcv2 4380.04 4381.71 4383.44 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.25 0.25 0.27 T:aezv5 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.27 T:aezv3 0.25 0.26 0.26 T:aegis128l 0.27? 0.28? 0.31? aegis128l 0.35 0.37 0.37 T:tiaoxinv2 0.37 0.37 0.38 T:tiaoxinv1 0.44 0.44 0.45 T:aegis128 0.42 0.46 0.46 aegis256 0.64 0.64 0.65 T:morus1280256v1 0.63 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280128v2 0.65 0.66 0.66 T:aeadaes128ocbtaglen128v1 0.68 0.68 0.68 T:aes128otrcv3 0.68 0.68 0.69 T:aes128otrsv3 0.68 0.68 0.69 T:aes128otrpv3 0.75? 0.76? 1.10? T:aeadaes192ocbtaglen128v1 0.84 0.88 0.92 T:aes256gcmv1 0.90 0.91 0.92 T:aes256otrcv3 0.91 0.92 0.92 T:aes256otrsv3 0.92 0.92 0.92 T:aes256otrpv3 0.95 0.96 0.96 T:aeadaes256ocbtaglen128v1 1.05 1.06 1.06 T:aes128gcmv1 1.07 1.08 1.10 T:morus640128v2 1.08 1.09 1.10 T:morus640128v1 1.12 1.15 1.16 T:deoxysi128v141 1.13 1.15 1.17 T:norx6444v3 1.20 1.21 1.23 T:deoxysneq128128v1 1.26 1.28 1.30 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.63 1.67 1.68 T:colm0v1 1.74 1.76 1.78 T:deoxysii128v141 2.00 2.01 2.02 T:deoxysii256v141 2.01 2.03 2.05 T:norx6441v2 2.03 2.04 2.06 T:norx6441v3 2.17 2.20 2.24 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.45 2.48 2.50 T:norx6441v1 2.61 2.61 2.62 T:deoxyseq256128v1 2.69 2.71 2.75 T:aes128n12t8silcv3 2.72 2.72 2.73 T:aes128n12t8silcv2 2.69 2.72 2.75 T:aes128n8t8clocv2 2.70 2.72 2.75 T:aes128n12t8clocv2 2.70 2.73 2.74 T:aes128n12t8clocv3 2.72 2.74 2.75 T:aes128n8t8silcv2 2.89 2.92 2.97 T:seakeyakv2 2.93 2.95 2.97 T:oceankeyakv2 3.12 3.15 3.16 T:norx6461v3 3.12 3.15 3.17 T:norx6461v2 3.73 3.76 3.77 T:norx3241v2 3.73 3.77 3.81 T:norx6444v2 3.77 3.79 3.83 T:norx6461v1 3.80 3.82 3.84 T:norx3241v3 4.25 4.27 4.30 T:lakekeyakv1 4.31 4.33 4.35 T:norx6444v1 4.40 4.43 4.45 T:lakekeyakv2 4.53 4.55 4.59 T:norx3241v1 5.72 5.75 5.77 T:norx3261v3 5.87 5.88 5.88 T:aesjambuv1 5.92 5.95 5.99 T:norx3261v2 7.06 7.07 7.09 T:norx3261v1 7.38 7.39 7.42 ascon128av12 7.61 7.64 7.67 T:ascon128av11 7.61 7.65 7.68 T:ascon96v1 7.92 8.01 8.05 T:ketjemajorv2 9.54 9.81 9.93 T:ketjeminorv2 9.96 10.00 10.02 T:riverkeyakv2 10.70 10.72 10.75 T:ascon128v11 10.70 10.73 10.74 T:ascon128v1 10.90 10.92 10.97 ascon128v12 13.90 13.93 13.95 T:aes128otrpv1 13.90 13.93 13.96 T:aes128otrpv2 14.09 14.11 14.13 T:aes128otrsv2 14.34 14.37 14.42 T:aes128otrsv1 15.46 15.49 15.51 T:twine80n6t4clocv2 11.58? 15.83? 18.59? T:oceankeyakv1 15.81 15.84 15.85 T:twine80n6t4clocv3 17.78 17.84 17.88 T:aes256otrpv1 17.85 17.88 17.93 T:aes256otrpv2 17.97 18.01 18.05 T:aes256otrsv2 18.33 18.36 18.42 T:aes256otrsv1 22.05 22.08 22.13 T:aes128n12clocv1 22.58 22.63 22.65 T:aes128n8clocv1 24.13 24.17 24.21 T:aes128n12silcv1 24.13 24.20 24.23 T:aes128n8silcv1 25.84 25.87 25.89 T:proest256otrv1 31.51 31.59 31.66 T:riverkeyakv1 31.82 31.91 32.00 T:ketjesrv2 31.97 32.10 32.16 T:ketjesrv1 50.95 51.04 51.09 T:proest128otrv1 51.42 51.52 51.62 T:acorn128v3 61.52 61.94 62.22 T:ketjejrv1 72.95 73.42 74.08 T:seakeyakv1 75.94 75.97 76.00 T:present80n6t4silcv3 88.90 89.49 89.56 T:ketjejrv2 105.87 105.96 106.11 T:deoxysneq128128v13 120.80 120.89 122.30 T:twine80n6clocv1 131.71 131.78 131.84 T:led80n6t4silcv3 153.98 154.16 154.41 T:deoxyseq128128v13 158.85 158.95 159.11 T:deoxysneq256128v13 159.38 159.60 160.16 T:aezv1 224.57 225.64 226.27 T:deoxyseq256128v13 288.76? 302.69? 502.93? aes256gcmv1 360.92 363.31 377.81 T:acorn128 367.55 371.26 382.49 T:acorn128v2 3176.33 3176.90 3177.28 T:led80n6silcv1 3180.61 3184.04 3184.64 T:led80n6t4silcv2 4376.76 4380.76 4381.09 T:present80n6t4silcv2 4378.89 4381.64 4382.41 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.18? 0.19? 0.22? T:tiaoxinv2 0.18? 0.20? 0.22? T:tiaoxinv1 0.24 0.25 0.26 T:aegis128l 0.25 0.26 0.27 aegis128l 0.42 0.43 0.43 aegis256 0.41 0.43 0.45 T:aezv4 0.41 0.44 0.45 T:aezv5 0.42 0.44 0.45 T:aezv3 0.46 0.46 0.46 T:aegis128 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280256v1 0.62 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.62 0.64 0.65 T:aes256gcmv1 0.64 0.64 0.64 T:aes128otrpv3 0.65 0.65 0.66 T:aes128otrcv3 0.61? 0.75? 0.83? T:aeadaes192ocbtaglen128v1 0.79 0.81 0.81 T:aes128gcmv1 0.83 0.86 0.89 T:deoxysi128v141 0.88 0.88 0.89 T:aes256otrcv3 0.88 0.89 0.89 T:aes256otrpv3 0.88 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.88 0.90 0.93 T:deoxysneq128128v1 0.98 1.00 1.02 T:deoxysneq256128v1 0.97 1.00 1.02 T:deoxysi256v141 1.04 1.04 1.05 T:morus640128v1 1.04 1.04 1.05 T:morus640128v2 1.11 1.13 1.13 T:colm0v1 1.30 1.31 1.33 T:deoxysii128v141 1.31 1.33 1.35 T:deoxyseq128128v1 1.49 1.50 1.52 T:deoxysii256v141 1.50 1.51 1.53 T:deoxyseq256128v1 1.64 1.66 1.67 T:norx6444v3 1.69 1.70 1.70 T:aes128otrsv3 2.13 2.15 2.17 T:norx6441v2 2.16 2.17 2.18 T:norx6441v3 2.30 2.30 2.31 T:aes256otrsv3 2.37 2.38 2.42 T:seakeyakv2 2.42 2.44 2.46 T:oceankeyakv2 2.57 2.59 2.60 T:norx6441v1 2.72 2.72 2.72 T:aes128n12t8silcv3 2.72 2.72 2.72 T:aes128n8t8silcv2 2.73 2.74 2.74 T:aes128n12t8clocv2 2.74 2.74 2.74 T:aes128n8t8clocv2 2.74 2.74 2.75 T:aes128n12t8clocv3 2.75 2.75 2.76 T:aes128n12t8silcv2 2.90 2.93 2.95 T:lunarkeyakv2 3.30 3.31 3.33 T:norx6461v3 3.32 3.34 3.36 T:norx6461v2 3.70 3.72 3.76 T:norx6444v2 3.90 3.92 3.93 T:lakekeyakv1 3.93 3.94 3.95 T:norx6461v1 3.96 3.97 3.98 T:lakekeyakv2 3.96 3.97 3.99 T:norx3241v3 3.98 3.99 4.01 T:norx3241v2 4.26 4.29 4.31 T:norx6444v1 4.78 4.80 4.82 T:norx3241v1 5.73 5.73 5.74 T:aesjambuv1 5.93 5.99 6.02 T:norx3261v3 6.06 6.07 6.10 T:norx3261v2 6.55 6.60 6.64 T:ketjemajorv2 7.19 7.22 7.23 T:norx3261v1 7.31 7.32 7.35 T:riverkeyakv2 7.36 7.38 7.42 T:ascon96v1 7.40 7.46 7.48 T:ascon128av11 7.47 7.49 7.50 ascon128av12 8.74 8.78 8.81 T:ketjeminorv2 10.85 10.88 10.91 T:ascon128v1 10.86 10.88 10.90 T:ascon128v11 10.92 10.95 10.96 ascon128v12 12.71 12.73 12.76 T:aes128otrsv1 12.73 12.75 12.78 T:aes128otrsv2 13.09 13.11 13.13 T:aes128otrpv2 13.12 13.15 13.25 T:aes128otrpv1 15.31 15.32 15.34 T:twine80n6t4clocv2 12.35? 15.44? 17.03? T:oceankeyakv1 15.65 15.66 15.67 T:twine80n6t4clocv3 16.75 16.77 16.78 T:aes256otrsv1 16.76 16.78 16.81 T:aes256otrsv2 17.04 17.08 17.10 T:aes256otrpv1 17.07 17.08 17.10 T:aes256otrpv2 17.51 17.53 17.56 T:aes128n12clocv1 17.61 17.63 17.65 T:aes128n8clocv1 18.11 18.13 18.15 T:aes128n8silcv1 18.12 18.15 18.19 T:aes128n12silcv1 26.05 26.14 26.19 T:proest256otrv1 28.24 28.35 28.39 T:ketjesrv1 29.51 29.53 29.56 T:ketjesrv2 29.82 29.86 29.93 T:riverkeyakv1 51.07 51.15 51.25 T:proest128otrv1 51.20 51.25 51.32 T:acorn128v3 55.44 55.46 55.51 T:ketjejrv1 71.15 71.45 71.76 T:seakeyakv1 75.20 75.23 75.68 T:present80n6t4silcv3 76.71 76.80 76.91 T:deoxysneq128128v13 90.15 90.44 90.50 T:ketjejrv2 90.37 90.55 92.68 T:twine80n6clocv1 104.70 104.82 104.89 T:aezv1 115.09 115.16 115.22 T:deoxyseq128128v13 126.90 127.07 127.20 T:deoxysneq256128v13 130.57 130.60 130.65 T:led80n6t4silcv3 168.03 168.56 168.81 T:deoxyseq256128v13 297.09? 310.45? 509.80? aes256gcmv1 353.43 354.74 364.24 T:acorn128 348.67? 362.83? 428.88? T:acorn128v2 2373.47 2381.21 2386.18 T:led80n6t4silcv2 2382.25 2382.50 2382.70 T:led80n6silcv1 3284.41 3284.59 3284.76 T:present80n6silcv1 3284.07 3284.86 3285.29 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.24 0.25 0.25 aegis128l 0.24 0.25 0.26 T:aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.41 0.42 0.43 aegis256 0.42 0.44 0.44 T:aezv4 0.43 0.44 0.44 T:aezv5 0.43 0.44 0.45 T:aezv3 0.45 0.45 0.45 T:aegis128 0.59 0.61 0.65 T:aes256gcmv1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280128v2 0.62 0.62 0.63 T:morus1280256v1 0.63 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.68 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.71 0.74 0.75 T:aes128gcmv1 0.57? 0.75? 0.92? T:aeadaes192ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.90 0.91 0.92 T:aes256otrpv3 0.91 0.92 0.92 T:aeadaes256ocbtaglen128v1 0.98 1.01 1.03 T:deoxysi128v141 1.03 1.04 1.05 T:deoxysneq128128v1 1.03 1.04 1.04 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.11 1.13 1.15 T:deoxysi256v141 1.14 1.16 1.16 T:deoxysneq256128v1 1.16 1.17 1.19 T:colm0v1 1.30 1.31 1.33 T:deoxysii128v141 1.48 1.50 1.51 T:deoxysii256v141 1.63 1.65 1.66 T:deoxyseq128128v1 1.64 1.66 1.66 T:norx6444v3 1.72 1.72 1.73 T:aes128otrsv3 1.79 1.81 1.82 T:deoxyseq256128v1 2.08 2.09 2.11 T:norx6441v3 2.09 2.10 2.12 T:norx6441v2 2.32 2.32 2.33 T:aes256otrsv3 2.42 2.44 2.45 T:seakeyakv2 2.43 2.45 2.49 T:oceankeyakv2 2.52 2.54 2.55 T:norx6441v1 2.70 2.70 2.72 T:aes128n8t8silcv2 2.70 2.72 2.72 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n12t8silcv2 2.72 2.72 2.75 T:aes128n12t8clocv2 2.71 2.73 2.74 T:aes128n12t8clocv3 2.73 2.74 2.74 T:aes128n8t8clocv2 2.94 2.96 2.98 T:lunarkeyakv2 3.21 3.23 3.25 T:norx6461v3 3.24 3.26 3.28 T:norx6461v2 3.70 3.71 3.72 T:norx6444v2 3.82 3.84 3.88 T:norx6461v1 3.88 3.90 3.91 T:norx3241v2 3.90 3.91 3.93 T:norx3241v3 3.95 3.96 3.98 T:lakekeyakv2 3.96 3.97 3.99 T:lakekeyakv1 4.24 4.27 4.28 T:norx6444v1 4.71 4.72 4.73 T:norx3241v1 5.81 5.81 5.84 T:aesjambuv1 5.92 5.93 5.94 T:norx3261v3 5.96 5.98 6.01 T:norx3261v2 6.60 6.65 6.73 T:ketjemajorv2 7.12 7.13 7.14 T:norx3261v1 7.31 7.33 7.35 T:riverkeyakv2 7.37 7.42 7.43 ascon128av12 7.38 7.44 7.49 T:ascon128av11 7.46 7.49 7.52 T:ascon96v1 8.65 8.77 8.86 T:ketjeminorv2 10.79 10.82 10.83 T:ascon128v1 10.80 10.82 10.84 T:ascon128v11 10.89 10.92 10.94 ascon128v12 13.00 13.05 13.15 T:aes128otrsv2 13.13 13.16 13.20 T:aes128otrsv1 13.17 13.20 13.22 T:aes128otrpv2 13.17 13.22 13.26 T:aes128otrpv1 15.26 15.28 15.30 T:twine80n6t4clocv2 12.51? 15.53? 17.16? T:oceankeyakv1 15.62 15.63 15.64 T:twine80n6t4clocv3 16.92 16.95 17.00 T:aes256otrsv2 17.03 17.06 17.08 T:aes128n12clocv1 17.10 17.11 17.17 T:aes256otrpv1 17.12 17.15 17.19 T:aes256otrpv2 17.12 17.16 17.20 T:aes256otrsv1 17.32 17.34 17.37 T:aes128n8clocv1 18.09 18.13 18.15 T:aes128n8silcv1 18.10 18.14 18.17 T:aes128n12silcv1 25.92 25.95 26.04 T:proest256otrv1 28.58 28.69 28.74 T:ketjesrv1 29.39 29.42 29.47 T:ketjesrv2 29.88 29.95 30.03 T:riverkeyakv1 51.21 51.28 51.35 T:proest128otrv1 51.36 51.45 51.49 T:acorn128v3 54.63 54.73 54.77 T:ketjejrv1 71.68 72.28 72.59 T:seakeyakv1 75.44 75.51 75.69 T:present80n6t4silcv3 88.52 88.57 88.62 T:ketjejrv2 90.34 90.46 91.53 T:twine80n6clocv1 91.34 91.45 91.57 T:deoxysneq128128v13 104.93 105.11 105.37 T:aezv1 115.15 115.21 115.30 T:deoxyseq128128v13 131.03 131.06 131.11 T:led80n6t4silcv3 142.74 142.97 143.05 T:deoxysneq256128v13 168.10 168.57 168.79 T:deoxyseq256128v13 296.64? 310.01? 509.18? aes256gcmv1 357.21 358.89 370.23 T:acorn128 356.31 362.68 372.82 T:acorn128v2 2374.18 2374.92 2382.65 T:led80n6t4silcv2 2382.29 2382.70 2382.90 T:led80n6silcv1 3284.63 3285.04 3285.31 T:present80n6t4silcv2 3284.00 3285.39 3286.02 T:present80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.24 0.25 0.26 T:aezv3 0.24 0.25 0.25 T:aezv5 0.24 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aegis128l 0.26 0.26 0.26 aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.26 0.28 0.28 T:tiaoxinv2 0.43 0.44 0.45 aegis256 0.45 0.45 0.45 T:aegis128 0.60 0.61 0.63 T:aes256gcmv1 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280128v2 0.64 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.68 0.68 0.68 T:aes128otrcv3 0.73 0.74 0.74 T:aes128gcmv1 0.75 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.99 1.00 1.01 T:deoxysi128v141 1.03 1.04 1.04 T:deoxysneq128128v1 1.04 1.04 1.04 T:morus640128v2 1.03 1.04 1.05 T:morus640128v1 1.12 1.13 1.15 T:deoxysi256v141 1.15 1.15 1.16 T:deoxysneq256128v1 1.14 1.17 1.18 T:colm0v1 1.31 1.32 1.34 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq128128v1 1.64 1.66 1.67 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.80 1.81 1.81 T:deoxyseq256128v1 2.08 2.10 2.11 T:norx6441v2 2.11 2.11 2.14 T:norx6441v3 2.32 2.32 2.32 T:aes256otrsv3 2.43 2.44 2.46 T:seakeyakv2 2.46 2.48 2.49 T:oceankeyakv2 2.53 2.54 2.56 T:norx6441v1 2.70 2.71 2.71 T:aes128n12t8silcv3 2.70 2.71 2.72 T:aes128n8t8silcv2 2.71 2.72 2.72 T:aes128n12t8silcv2 2.72 2.72 2.74 T:aes128n12t8clocv2 2.72 2.73 2.74 T:aes128n12t8clocv3 2.72 2.74 2.74 T:aes128n8t8clocv2 2.94 2.96 2.99 T:lunarkeyakv2 3.21 3.22 3.25 T:norx6461v3 3.24 3.26 3.27 T:norx6461v2 3.71 3.72 3.74 T:norx6444v2 3.81 3.83 3.86 T:norx6461v1 3.88 3.90 3.91 T:norx3241v2 3.89 3.90 3.92 T:norx3241v3 3.96 3.98 3.98 T:lakekeyakv2 3.97 3.98 4.00 T:lakekeyakv1 4.26 4.28 4.29 T:norx6444v1 4.71 4.72 4.73 T:norx3241v1 5.81 5.81 5.82 T:aesjambuv1 5.91 5.93 5.95 T:norx3261v3 5.96 5.97 6.00 T:norx3261v2 6.63 6.68 6.74 T:ketjemajorv2 7.12 7.13 7.14 T:norx3261v1 7.32 7.34 7.36 T:riverkeyakv2 7.36 7.39 7.41 ascon128av12 7.38 7.42 7.47 T:ascon128av11 7.45 7.47 7.49 T:ascon96v1 8.74 8.78 8.86 T:ketjeminorv2 10.79 10.81 10.83 T:ascon128v1 10.79 10.81 10.83 T:ascon128v11 10.90 10.92 10.95 ascon128v12 13.05 13.08 13.12 T:aes128otrsv2 13.14 13.18 13.21 T:aes128otrsv1 13.17 13.18 13.22 T:aes128otrpv2 13.18 13.22 13.27 T:aes128otrpv1 15.26 15.27 15.29 T:twine80n6t4clocv2 12.44? 15.58? 17.07? T:oceankeyakv1 15.61 15.63 15.65 T:twine80n6t4clocv3 16.95 16.97 17.00 T:aes256otrsv2 17.07 17.13 17.16 T:aes128n12clocv1 17.12 17.16 17.19 T:aes256otrpv1 17.16 17.18 17.20 T:aes256otrpv2 17.15 17.19 17.22 T:aes256otrsv1 17.33 17.35 17.38 T:aes128n8clocv1 18.10 18.13 18.16 T:aes128n8silcv1 18.10 18.15 18.20 T:aes128n12silcv1 25.99 26.02 26.09 T:proest256otrv1 28.58 28.70 28.73 T:ketjesrv1 29.38 29.42 29.46 T:ketjesrv2 29.96 30.01 30.05 T:riverkeyakv1 51.20 51.25 51.34 T:proest128otrv1 51.41 51.47 51.52 T:acorn128v3 54.68 54.75 54.79 T:ketjejrv1 72.04 72.38 72.56 T:seakeyakv1 75.45 75.47 75.68 T:present80n6t4silcv3 88.57 88.61 88.68 T:ketjejrv2 90.36 90.46 91.52 T:twine80n6clocv1 91.35 91.47 91.62 T:deoxysneq128128v13 104.87 104.94 105.08 T:aezv1 115.10 115.17 115.25 T:deoxyseq128128v13 131.02 131.05 131.09 T:led80n6t4silcv3 142.71 142.94 143.06 T:deoxysneq256128v13 168.23 168.70 168.88 T:deoxyseq256128v13 289.81? 303.01? 502.36? aes256gcmv1 357.25 358.86 370.21 T:acorn128 356.30 362.69 372.83 T:acorn128v2 2374.27 2375.24 2381.84 T:led80n6t4silcv2 2382.26 2382.40 2382.61 T:led80n6silcv1 3284.46 3284.80 3285.66 T:present80n6t4silcv2 3283.75 3285.29 3285.67 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.17? 0.19? 0.20? T:tiaoxinv1 0.23? 0.25? 0.26? T:aezv4 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aegis128l 0.24 0.25 0.26 T:aezv3 0.23? 0.25? 0.27? T:aezv5 0.33? 0.36? 0.40? T:aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 0.44 0.44 0.45 aegis256 0.44 0.45 0.45 T:aegis128 0.59 0.60 0.60 T:morus1280128v2 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.62 0.63 0.64 T:colm0v1 0.62 0.65 0.67 T:aeadaes128ocbtaglen128v1 0.60? 0.65? 0.67? T:aes128otrpv3 0.67 0.68 0.71 T:aes128otrcv3 0.62? 0.77? 1.10? T:aeadaes192ocbtaglen128v1 0.84 0.87 0.89 T:deoxysneq128128v1 0.85 0.87 0.89 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.87 0.89 0.91 T:deoxyseq128128v1 0.88 0.90 0.92 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.92 T:aes256otrpv3 0.90 0.91 0.92 T:aes256otrcv3 0.96 0.99 1.00 T:deoxysi256v141 0.97 0.99 1.01 T:deoxysneq256128v1 1.00 1.00 1.01 T:deoxyseq256128v1 1.00 1.00 1.01 T:morus640128v1 1.00 1.01 1.02 T:deoxysii256v141 1.00 1.02 1.03 T:morus640128v2 1.82 1.88 1.93 T:lunarkeyakv2 1.83 1.89 1.91 T:oceankeyakv2 2.15 2.16 2.17 T:norx6441v2 2.13 2.16 2.18 T:norx6444v3 2.16 2.17 2.18 T:norx6441v3 2.29 2.31 2.33 T:seakeyakv2 2.57 2.60 2.62 T:norx6441v1 2.68 2.69 2.75 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n12t8silcv2 2.71 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.73 2.73 2.73 T:aes128n12t8clocv3 2.68 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128otrsv3 3.31 3.35 3.39 T:norx6461v3 3.38 3.40 3.43 T:norx6461v2 3.63 3.64 3.68 T:lakekeyakv2 3.66 3.67 3.69 T:norx6444v2 3.72 3.72 3.73 T:aes256otrsv3 3.73 3.77 3.79 T:lakekeyakv1 3.91 3.94 3.98 T:norx6461v1 3.95 3.96 3.98 T:norx3241v3 3.97 3.99 4.02 T:norx3241v2 4.23 4.24 4.26 T:norx6444v1 4.86 4.89 4.91 T:norx3241v1 5.38 5.44 5.49 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.96 5.98 6.02 T:norx3261v2 6.04 6.09 6.10 T:norx3261v3 6.84 6.88 6.89 T:riverkeyakv2 7.20 7.23 7.25 T:norx3261v1 7.22 7.27 7.30 T:ascon96v1 7.26 7.31 7.40 T:ascon128av11 7.35 7.38 7.42 ascon128av12 7.88 7.95 7.99 T:ketjeminorv2 10.84 10.86 10.89 T:ascon128v1 10.85 10.87 10.90 T:ascon128v11 10.91 10.94 10.97 ascon128v12 11.91 11.95 11.97 T:aes128otrsv2 11.93 11.95 11.97 T:aes128otrsv1 12.12 12.17 12.20 T:aes128n12silcv1 12.14 12.17 12.22 T:aes128n8silcv1 12.16 12.18 12.20 T:aes128n12clocv1 12.17 12.20 12.23 T:aes128n8clocv1 12.43 12.44 12.48 T:aes128otrpv2 12.44 12.46 12.48 T:aes128otrpv1 15.03 15.06 15.08 T:twine80n6t4clocv2 15.40 15.42 15.46 T:twine80n6t4clocv3 12.07? 15.47? 17.12? T:oceankeyakv1 15.98 16.01 16.03 T:aes256otrsv2 16.00 16.03 16.05 T:aes256otrsv1 16.46 16.49 16.54 T:aes256otrpv1 16.49 16.52 16.54 T:aes256otrpv2 25.25 25.30 25.35 T:ketjesrv1 26.11 26.13 26.16 T:proest256otrv1 26.96 27.00 27.03 T:ketjesrv2 28.30 28.34 28.41 T:riverkeyakv1 47.25 47.30 47.38 T:ketjejrv1 50.90 51.15 51.22 T:aezv1 51.18 51.24 51.29 T:acorn128v3 51.48 51.53 51.59 T:proest128otrv1 59.92 60.02 60.78 T:twine80n6clocv1 70.78 71.49 71.92 T:seakeyakv1 74.96 75.04 75.45 T:present80n6t4silcv3 76.17 76.25 76.35 T:deoxyseq128128v13 76.77 76.83 77.12 T:deoxysneq128128v13 87.53 87.63 87.70 T:ketjejrv2 111.50 111.66 112.05 T:deoxyseq256128v13 126.36 126.63 127.05 T:deoxysneq256128v13 130.35 130.40 130.47 T:led80n6t4silcv3 289.13? 303.23? 503.73? aes256gcmv1 344.34 346.44 356.22 T:acorn128 329.58? 354.08? 426.73? T:acorn128v2 1582.77 1585.57 1591.55 T:led80n6t4silcv2 1587.75 1588.23 1588.68 T:led80n6silcv1 2188.67 2188.89 2189.15 T:present80n6silcv1 2188.74 2189.61 2189.97 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv2 0.18? 0.19? 0.20? T:tiaoxinv1 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.27 aegis128l 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aezv4 0.25 0.26 0.26 T:aezv5 0.30? 0.36? 0.40? T:aes256gcmv1 0.40 0.42 0.43 T:aes128gcmv1 0.42 0.42 0.44 aegis256 0.45 0.45 0.45 T:aegis128 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280128v2 0.60 0.61 0.61 T:morus1280256v2 0.60 0.61 0.62 T:morus1280256v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.65 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.68 T:aes128otrcv3 0.39? 0.74? 0.77? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.87 T:deoxyseq128128v1 0.85 0.86 0.87 T:deoxysneq128128v1 0.85 0.87 0.88 T:deoxysi128v141 0.86 0.87 0.90 T:deoxysii128v141 0.89 0.89 0.91 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.90 0.91 0.91 T:aes256otrcv3 0.98 0.99 0.99 T:deoxyseq256128v1 0.96 0.99 1.02 T:deoxysi256v141 0.97 0.99 1.01 T:deoxysneq256128v1 0.97 1.00 1.02 T:deoxysii256v141 0.99 1.00 1.02 T:morus640128v1 1.01 1.01 1.01 T:morus640128v2 1.82 1.84 1.92 T:lunarkeyakv2 1.83 1.87 1.90 T:oceankeyakv2 2.12 2.15 2.16 T:norx6441v3 2.12 2.16 2.18 T:norx6444v3 2.15 2.17 2.19 T:norx6441v2 2.27 2.30 2.34 T:seakeyakv2 2.59 2.61 2.64 T:norx6441v1 2.69 2.71 2.72 T:aes128n12t8silcv3 2.69 2.72 2.72 T:aes128n8t8silcv2 2.71 2.72 2.72 T:aes128n12t8clocv2 2.73 2.73 2.75 T:aes128n8t8clocv2 2.71 2.74 2.75 T:aes128n12t8silcv2 2.72 2.74 2.74 T:aes128n12t8clocv3 2.75 2.75 2.75 T:aes128otrsv3 3.30 3.32 3.35 T:norx6461v3 3.33 3.34 3.36 T:norx6461v2 3.61 3.64 3.67 T:lakekeyakv2 3.65 3.68 3.70 T:norx6444v2 3.72 3.72 3.72 T:aes256otrsv3 3.72 3.76 3.77 T:lakekeyakv1 3.84 3.91 3.92 T:norx6461v1 4.00 4.01 4.02 T:norx3241v3 4.01 4.03 4.05 T:norx3241v2 4.21 4.23 4.26 T:norx6444v1 4.87 4.89 4.91 T:norx3241v1 5.35 5.40 5.47 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.99 6.00 6.02 T:norx3261v2 6.08 6.10 6.12 T:norx3261v3 6.86 6.89 6.90 T:riverkeyakv2 7.19 7.20 7.22 T:norx3261v1 7.26 7.30 7.32 T:ascon128av11 7.29 7.32 7.35 T:ascon96v1 7.30 7.33 7.39 ascon128av12 7.85 7.90 7.95 T:ketjeminorv2 10.86 10.89 10.91 ascon128v12 10.85 10.89 10.91 T:ascon128v11 10.87 10.89 10.92 T:ascon128v1 11.99 12.00 12.06 T:aes128otrsv1 12.06 12.08 12.12 T:aes128otrsv2 12.12 12.15 12.19 T:aes128n8silcv1 12.14 12.18 12.21 T:aes128n12silcv1 12.15 12.19 12.23 T:aes128n8clocv1 12.16 12.20 12.23 T:aes128n12clocv1 12.50 12.53 12.57 T:aes128otrpv1 12.49 12.53 12.56 T:aes128otrpv2 15.02 15.04 15.07 T:twine80n6t4clocv2 11.92? 15.40? 17.33? T:oceankeyakv1 15.39 15.42 15.45 T:twine80n6t4clocv3 16.06 16.07 16.11 T:aes256otrsv2 16.03 16.08 16.13 T:aes256otrsv1 16.50 16.53 16.57 T:aes256otrpv1 16.55 16.57 16.60 T:aes256otrpv2 25.25 25.30 25.33 T:ketjesrv1 26.11 26.13 26.14 T:proest256otrv1 26.93 26.98 27.03 T:ketjesrv2 28.26 28.32 28.39 T:riverkeyakv1 47.25 47.36 47.40 T:ketjejrv1 50.96 51.17 51.22 T:aezv1 51.22 51.27 51.34 T:acorn128v3 51.49 51.53 51.58 T:proest128otrv1 59.95 60.06 60.87 T:twine80n6clocv1 70.84 71.56 71.98 T:seakeyakv1 74.97 75.02 75.41 T:present80n6t4silcv3 76.22 76.26 76.35 T:deoxyseq128128v13 76.81 76.93 77.12 T:deoxysneq128128v13 87.57 87.65 87.72 T:ketjejrv2 111.75 111.93 112.25 T:deoxyseq256128v13 126.32 126.60 127.06 T:deoxysneq256128v13 130.35 130.41 130.46 T:led80n6t4silcv3 289.01? 303.03? 503.15? aes256gcmv1 351.97 354.08 364.20 T:acorn128 342.64 354.09 366.14 T:acorn128v2 1583.28 1583.78 1591.79 T:led80n6t4silcv2 1587.82 1588.27 1588.66 T:led80n6silcv1 2188.32 2188.97 2189.34 T:present80n6silcv1 2188.69 2189.08 2189.41 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv1 0.17? 0.19? 0.22? T:tiaoxinv2 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.26 T:aezv5 0.25 0.25 0.26 T:aezv4 0.33? 0.34? 0.37? T:aes256gcmv1 0.39 0.42 0.42 aegis256 0.41 0.42 0.42 T:aes128gcmv1 0.45 0.45 0.45 T:aegis128 0.59 0.60 0.61 T:morus1280128v1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280128v2 0.61 0.61 0.62 T:morus1280256v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.74? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.89 T:deoxysi128v141 0.86 0.86 0.87 T:deoxyseq128128v1 0.86 0.87 0.89 T:deoxysneq128128v1 0.86 0.87 0.90 T:deoxysii128v141 0.89 0.89 0.91 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.90 T:aes256otrpv3 0.91 0.91 0.91 T:aes256otrcv3 0.98 0.99 0.99 T:deoxyseq256128v1 0.97 0.99 1.01 T:deoxysneq256128v1 0.98 0.99 1.02 T:deoxysi256v141 0.99 1.00 1.01 T:deoxysii256v141 1.00 1.00 1.02 T:morus640128v1 1.00 1.01 1.02 T:morus640128v2 1.85 1.87 1.89 T:oceankeyakv2 1.86 1.90 1.92 T:lunarkeyakv2 2.13 2.16 2.17 T:norx6441v2 2.15 2.17 2.19 T:norx6444v3 2.14 2.18 2.20 T:norx6441v3 2.30 2.31 2.33 T:seakeyakv2 2.59 2.61 2.62 T:norx6441v1 2.68 2.69 2.71 T:aes128n8t8silcv2 2.68 2.69 2.71 T:aes128n12t8silcv3 2.70 2.72 2.72 T:aes128n12t8clocv2 2.71 2.72 2.74 T:aes128n12t8silcv2 2.72 2.73 2.73 T:aes128n8t8clocv2 2.70 2.74 2.75 T:aes128n12t8clocv3 2.75 2.75 2.75 T:aes128otrsv3 3.29 3.31 3.32 T:norx6461v3 3.32 3.36 3.38 T:norx6461v2 3.61 3.64 3.65 T:lakekeyakv2 3.67 3.69 3.71 T:norx6444v2 3.72 3.72 3.72 T:aes256otrsv3 3.74 3.76 3.78 T:lakekeyakv1 3.81 3.88 3.93 T:norx6461v1 3.97 3.98 4.02 T:norx3241v3 4.00 4.03 4.04 T:norx3241v2 4.22 4.24 4.25 T:norx6444v1 4.87 4.88 4.90 T:norx3241v1 5.36 5.41 5.49 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.96 6.00 6.04 T:norx3261v2 6.07 6.13 6.14 T:norx3261v3 6.83 6.86 6.90 T:riverkeyakv2 7.18 7.20 7.22 T:norx3261v1 7.23 7.28 7.29 T:ascon128av11 7.30 7.34 7.37 T:ascon96v1 7.32 7.34 7.40 ascon128av12 7.82 7.91 7.99 T:ketjeminorv2 10.85 10.88 10.91 T:ascon128v1 10.85 10.89 10.92 ascon128v12 10.85 10.89 10.93 T:ascon128v11 11.98 12.03 12.10 T:aes128otrsv1 12.06 12.13 12.23 T:aes128otrsv2 12.13 12.16 12.19 T:aes128n12silcv1 12.12 12.16 12.21 T:aes128n8silcv1 12.16 12.19 12.21 T:aes128n12clocv1 12.18 12.22 12.28 T:aes128n8clocv1 12.49 12.52 12.54 T:aes128otrpv2 12.51 12.53 12.57 T:aes128otrpv1 15.02 15.03 15.05 T:twine80n6t4clocv2 12.01? 15.41? 17.40? T:oceankeyakv1 15.39 15.44 15.45 T:twine80n6t4clocv3 16.07 16.08 16.11 T:aes256otrsv2 16.00 16.09 16.13 T:aes256otrsv1 16.49 16.52 16.56 T:aes256otrpv1 16.56 16.58 16.61 T:aes256otrpv2 25.24 25.28 25.33 T:ketjesrv1 26.11 26.13 26.15 T:proest256otrv1 26.95 27.01 27.04 T:ketjesrv2 28.32 28.36 28.39 T:riverkeyakv1 47.29 47.36 47.40 T:ketjejrv1 51.03 51.18 51.24 T:aezv1 51.19 51.24 51.37 T:acorn128v3 51.39 51.49 51.59 T:proest128otrv1 59.96 60.04 60.83 T:twine80n6clocv1 70.89 71.59 71.82 T:seakeyakv1 74.92 74.99 75.44 T:present80n6t4silcv3 76.15 76.25 76.42 T:deoxyseq128128v13 76.79 76.92 77.11 T:deoxysneq128128v13 87.61 87.65 87.71 T:ketjejrv2 111.79 111.95 112.12 T:deoxyseq256128v13 127.04 127.09 127.17 T:deoxysneq256128v13 130.36 130.42 130.45 T:led80n6t4silcv3 288.88? 302.94? 503.25? aes256gcmv1 342.42 354.10 366.10 T:acorn128v2 351.96 354.10 364.18 T:acorn128 1583.16 1583.70 1584.33 T:led80n6t4silcv2 1587.92 1588.16 1588.30 T:led80n6silcv1 2188.48 2188.93 2189.45 T:present80n6silcv1 2188.82 2189.18 2189.43 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.29 T:tiaoxinv1 0.29 0.29 0.29 T:tiaoxinv2 0.31 0.31 0.32 aegis128l 0.31 0.32 0.32 T:aegis128l 0.49 0.50 0.51 aegis256 0.51 0.52 0.52 T:aezv5 0.52 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.52 0.52 0.53 T:aegis128 0.74 0.75 0.77 T:aeadaes128ocbtaglen128v1 0.77 0.77 0.77 T:aes128otrpv3 0.77 0.78 0.79 T:morus1280256v1 0.77 0.78 0.78 T:morus1280128v1 0.78 0.79 0.79 T:morus1280256v2 0.79 0.79 0.81 T:morus1280128v2 0.85 0.85 0.86 T:aes128otrcv3 0.93 0.93 0.98 T:aeadaes192ocbtaglen128v1 0.96 0.97 0.98 T:aes128gcmv1 1.02 1.02 1.03 T:aeadaes256ocbtaglen128v1 1.05 1.06 1.06 T:aes256otrpv3 1.06 1.06 1.08 T:deoxysneq128128v1 1.07 1.08 1.09 T:deoxysi128v141 1.15 1.15 1.16 T:aes256otrcv3 1.16 1.16 1.18 T:deoxysneq256128v1 1.17 1.18 1.18 T:morus640128v1 1.18 1.19 1.20 T:morus640128v2 1.22 1.24 1.26 T:deoxysi256v141 1.27 1.28 1.28 T:colm0v1 1.52 1.52 1.53 T:deoxysii128v141 1.53 1.53 1.55 T:deoxyseq128128v1 1.75 1.75 1.76 T:deoxysii256v141 1.75 1.76 1.76 T:deoxyseq256128v1 1.81 1.82 1.82 T:aes128otrsv3 1.89 1.90 1.90 T:aes256gcmv1 2.25 2.27 2.28 T:norx6444v3 2.45 2.46 2.46 T:aes256otrsv3 2.51 2.51 2.53 T:norx6441v2 2.52 2.52 2.54 T:norx6441v3 2.83 2.83 2.83 T:aes128n8t8clocv2 2.82 2.83 2.83 T:aes128n12t8clocv2 2.83 2.83 2.84 T:aes128n12t8clocv3 2.85 2.85 2.85 T:aes128n8t8silcv2 2.85 2.85 2.88 T:aes128n12t8silcv3 2.88 2.88 2.88 T:aes128n12t8silcv2 2.90 2.92 2.93 T:norx6441v1 3.48 3.48 3.50 T:seakeyakv2 3.79 3.81 3.83 T:norx6461v3 3.83 3.85 3.87 T:norx6461v2 4.32 4.32 4.35 T:norx3241v2 4.32 4.32 4.34 T:norx3241v3 4.35 4.37 4.38 T:lakekeyakv2 4.40 4.42 4.44 T:norx6461v1 4.57 4.58 4.60 T:lakekeyakv1 4.71 4.72 4.73 T:oceankeyakv2 5.07 5.09 5.10 T:norx3241v1 5.32 5.35 5.39 T:norx6444v2 5.88 5.88 5.89 T:aesjambuv1 6.05 6.07 6.08 T:norx6444v1 6.52 6.52 6.54 T:norx3261v3 6.54 6.55 6.59 T:norx3261v2 7.55 7.58 7.59 T:ascon96v1 7.60 7.62 7.65 T:ascon128av11 7.63 7.64 7.66 T:norx3261v1 7.65 7.67 7.70 ascon128av12 7.70 7.71 7.72 T:riverkeyakv2 8.08 8.09 8.13 T:lunarkeyakv2 9.05 9.07 9.10 T:ketjemajorv2 9.90 9.95 9.99 T:ketjeminorv2 11.06 11.07 11.08 T:ascon128v1 11.06 11.08 11.09 T:ascon128v11 11.10 11.13 11.16 ascon128v12 13.12 13.14 13.16 T:aes128otrsv1 13.15 13.18 13.20 T:aes128otrsv2 13.54 13.55 13.56 T:aes128otrpv1 13.53 13.55 13.57 T:aes128otrpv2 15.58 15.60 15.61 T:twine80n6t4clocv2 15.99 16.00 16.00 T:twine80n6t4clocv3 17.30 17.34 17.38 T:aes256otrsv1 17.34 17.34 17.35 T:aes256otrsv2 17.63 17.65 17.67 T:aes256otrpv1 17.65 17.67 17.68 T:aes256otrpv2 17.79 17.80 17.83 T:aes128n12clocv1 17.91 17.93 17.94 T:aes128n8clocv1 18.51 18.52 18.54 T:aes128n12silcv1 18.54 18.56 18.57 T:aes128n8silcv1 20.85? 23.66? 24.25? T:oceankeyakv1 28.40 28.46 28.49 T:proest256otrv1 29.02 29.10 29.13 T:ketjesrv1 30.58 30.61 30.64 T:ketjesrv2 31.18 31.22 31.28 T:riverkeyakv1 53.39 53.42 53.46 T:proest128otrv1 56.21 56.25 56.30 T:ketjejrv1 57.88 57.89 57.94 T:acorn128v3 76.01 76.04 76.46 T:present80n6t4silcv3 77.17 77.21 77.35 T:deoxysneq128128v13 86.31 86.42 87.02 T:seakeyakv1 91.03 91.12 93.10 T:twine80n6clocv1 91.43 91.47 91.82 T:ketjejrv2 103.31 103.54 103.79 T:aezv1 116.41 116.44 116.51 T:deoxyseq128128v13 127.62 127.66 127.78 T:deoxysneq256128v13 131.66 131.68 131.73 T:led80n6t4silcv3 170.05 170.39 170.55 T:deoxyseq256128v13 312.30? 312.52? 499.36? aes256gcmv1 397.10 397.15 406.31 T:acorn128 402.09? 406.77? 469.60? T:acorn128v2 2394.97 2395.33 2395.98 T:led80n6silcv1 2387.54 2398.74 2399.66 T:led80n6t4silcv2 3301.75 3301.97 3302.21 T:present80n6silcv1 3301.92 3329.64 3331.45 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.31 0.32 0.32 T:aegis128l 0.32 0.32 0.33 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.49 0.49 0.50 aegis256 0.51 0.51 0.52 T:aegis128 0.51 0.52 0.52 T:aezv5 0.52 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.75 0.76 0.76 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.80 T:morus1280256v1 0.79 0.79 0.79 T:morus1280128v1 0.80 0.80 0.80 T:morus1280128v2 0.80 0.80 0.81 T:morus1280256v2 0.88 0.88 0.88 T:aes128otrcv3 0.89 0.89 0.90 T:aes128gcmv1 0.91? 0.92? 1.13? T:aeadaes192ocbtaglen128v1 1.06 1.06 1.07 T:aeadaes256ocbtaglen128v1 1.08 1.08 1.08 T:aes256otrpv3 1.18 1.19 1.19 T:morus640128v1 1.19 1.19 1.19 T:aes256otrcv3 1.19 1.20 1.21 T:morus640128v2 1.24 1.24 1.25 T:deoxysi128v141 1.27 1.27 1.28 T:deoxysneq128128v1 1.32 1.33 1.34 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.40 1.41 1.44 T:deoxysi256v141 1.56 1.56 1.58 T:deoxysii128v141 1.81 1.81 1.83 T:deoxysii256v141 1.84 1.84 1.85 T:aes128otrsv3 1.86 1.86 1.87 T:aes256gcmv1 1.91 1.91 1.92 T:deoxyseq128128v1 2.10 2.10 2.11 T:deoxyseq256128v1 2.26 2.27 2.28 T:norx6444v3 2.44 2.45 2.46 T:norx6441v3 2.45 2.46 2.47 T:norx6441v2 2.48 2.49 2.49 T:aes256otrsv3 2.82 2.82 2.83 T:aes128n8t8clocv2 2.80 2.82 2.83 T:aes128n12t8clocv2 2.82 2.83 2.84 T:aes128n12t8clocv3 2.83 2.84 2.85 T:aes128n12t8silcv3 2.83 2.84 2.85 T:aes128n8t8silcv2 2.84 2.85 2.86 T:aes128n12t8silcv2 2.87 2.88 2.89 T:norx6441v1 3.52 3.53 3.56 T:seakeyakv2 3.74 3.75 3.77 T:norx6461v3 3.77 3.78 3.81 T:norx6461v2 4.22 4.23 4.25 T:norx3241v3 4.23 4.25 4.27 T:norx3241v2 4.31 4.33 4.36 T:norx6461v1 4.35 4.36 4.38 T:lakekeyakv2 4.64 4.65 4.65 T:lakekeyakv1 4.75 4.76 4.81 T:oceankeyakv2 5.01 5.02 5.03 T:norx3241v1 5.31 5.33 5.33 T:norx6444v2 5.96 5.97 6.00 T:aesjambuv1 6.02 6.03 6.05 T:norx6444v1 6.46 6.47 6.49 T:norx3261v2 6.46 6.47 6.49 T:norx3261v3 7.55 7.56 7.57 T:norx3261v1 7.59 7.60 7.62 T:ascon128av11 7.58 7.61 7.63 ascon128av12 7.63 7.65 7.67 T:ascon96v1 7.72 7.73 7.74 T:riverkeyakv2 8.13 8.14 8.19 T:lunarkeyakv2 9.12 9.19 9.26 T:ketjemajorv2 9.87 9.93 9.98 T:ketjeminorv2 10.99 11.00 11.02 T:ascon128v1 10.99 11.01 11.02 T:ascon128v11 11.09 11.10 11.12 ascon128v12 13.48 13.50 13.52 T:aes128otrsv2 13.59 13.61 13.63 T:aes128otrsv1 13.63 13.64 13.66 T:aes128otrpv2 13.64 13.66 13.67 T:aes128otrpv1 15.54 15.55 15.56 T:twine80n6t4clocv2 15.96 15.97 15.98 T:twine80n6t4clocv3 17.35 17.37 17.41 T:aes128n12clocv1 17.55 17.59 17.60 T:aes256otrsv2 17.63 17.65 17.67 T:aes128n8clocv1 17.76 17.77 17.81 T:aes256otrsv1 17.76 17.78 17.79 T:aes256otrpv1 17.76 17.78 17.80 T:aes256otrpv2 18.49 18.52 18.56 T:aes128n12silcv1 18.52 18.54 18.59 T:aes128n8silcv1 20.94? 23.82? 24.31? T:oceankeyakv1 28.40 28.41 28.53 T:proest256otrv1 29.38 29.44 29.50 T:ketjesrv1 30.47 30.51 30.54 T:ketjesrv2 31.24 31.30 31.32 T:riverkeyakv1 53.52 53.56 53.58 T:proest128otrv1 55.45 55.51 55.71 T:ketjejrv1 57.99 58.03 58.09 T:acorn128v3 76.31 76.33 76.53 T:present80n6t4silcv3 87.21 87.31 87.77 T:seakeyakv1 89.96 89.99 90.02 T:ketjejrv2 90.94 91.03 91.97 T:twine80n6clocv1 91.86 91.97 92.09 T:deoxysneq128128v13 104.08 104.35 104.77 T:aezv1 116.36 116.48 116.61 T:deoxyseq128128v13 132.20 132.23 132.27 T:led80n6t4silcv3 143.33 143.49 143.69 T:deoxysneq256128v13 170.09 170.69 170.75 T:deoxyseq256128v13 312.09? 312.31? 499.04? aes256gcmv1 402.09 402.12 413.14 T:acorn128 401.83 406.78 415.61 T:acorn128v2 2386.71 2388.02 2398.58 T:led80n6t4silcv2 2394.92 2395.06 2395.49 T:led80n6silcv1 3301.52 3302.70 3303.11 T:present80n6silcv1 3302.61 3330.46 3334.56 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.31 0.32 0.32 T:aegis128l 0.32 0.32 0.33 T:aezv5 0.32 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aezv3 0.33 0.33 0.35 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.38 T:tiaoxinv2 0.51 0.51 0.51 T:aegis128 0.50 0.52 0.53 aegis256 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.79 T:aes128otrpv3 0.78 0.79 0.79 T:morus1280128v1 0.78 0.79 0.80 T:morus1280256v1 0.80 0.80 0.80 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.88 0.88 0.88 T:aes128otrcv3 0.88 0.88 0.89 T:aes128gcmv1 0.91 0.91 0.93 T:aeadaes192ocbtaglen128v1 1.06 1.06 1.06 T:aeadaes256ocbtaglen128v1 1.07 1.08 1.08 T:aes256otrpv3 1.18 1.18 1.18 T:morus640128v1 1.19 1.19 1.19 T:aes256otrcv3 1.19 1.19 1.20 T:morus640128v2 1.23 1.24 1.24 T:deoxysi128v141 1.26 1.27 1.27 T:deoxysneq128128v1 1.33 1.33 1.33 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.40 1.42 1.43 T:deoxysi256v141 1.56 1.58 1.59 T:deoxysii128v141 1.81 1.81 1.81 T:deoxysii256v141 1.84 1.84 1.84 T:aes128otrsv3 1.85 1.85 1.86 T:aes256gcmv1 1.91 1.92 1.92 T:deoxyseq128128v1 2.10 2.10 2.11 T:deoxyseq256128v1 2.26 2.27 2.28 T:norx6444v3 2.44 2.45 2.47 T:norx6441v2 2.46 2.47 2.49 T:norx6441v3 2.48 2.49 2.49 T:aes256otrsv3 2.81 2.82 2.82 T:aes128n8t8clocv2 2.82 2.82 2.83 T:aes128n12t8clocv2 2.82 2.83 2.83 T:aes128n12t8clocv3 2.83 2.83 2.83 T:aes128n12t8silcv3 2.83 2.83 2.84 T:aes128n8t8silcv2 2.84 2.85 2.85 T:aes128n12t8silcv2 2.88 2.88 2.89 T:norx6441v1 3.54 3.54 3.56 T:seakeyakv2 3.75 3.76 3.77 T:norx6461v3 3.77 3.78 3.80 T:norx6461v2 4.23 4.24 4.26 T:norx3241v2 4.23 4.25 4.27 T:norx3241v3 4.30 4.32 4.33 T:norx6461v1 4.37 4.38 4.39 T:lakekeyakv2 4.65 4.65 4.66 T:lakekeyakv1 4.76 4.76 4.77 T:oceankeyakv2 5.00 5.01 5.02 T:norx3241v1 5.32 5.34 5.35 T:norx6444v2 5.96 5.97 5.97 T:aesjambuv1 6.03 6.04 6.05 T:norx6444v1 6.45 6.46 6.47 T:norx3261v3 6.45 6.48 6.51 T:norx3261v2 7.55 7.56 7.57 T:norx3261v1 7.57 7.58 7.60 ascon128av12 7.59 7.61 7.64 T:ascon128av11 7.65 7.67 7.67 T:ascon96v1 7.73 7.75 7.76 T:riverkeyakv2 8.15 8.17 8.18 T:lunarkeyakv2 9.11 9.16 9.18 T:ketjemajorv2 9.88 9.95 9.99 T:ketjeminorv2 10.98 10.99 11.01 T:ascon128v11 10.99 11.00 11.02 T:ascon128v1 11.08 11.10 11.11 ascon128v12 13.48 13.49 13.51 T:aes128otrsv2 13.59 13.60 13.63 T:aes128otrsv1 13.64 13.66 13.68 T:aes128otrpv1 13.65 13.66 13.67 T:aes128otrpv2 15.54 15.54 15.55 T:twine80n6t4clocv2 15.95 15.96 15.97 T:twine80n6t4clocv3 17.37 17.38 17.40 T:aes128n12clocv1 17.59 17.62 17.64 T:aes256otrsv2 17.63 17.65 17.67 T:aes128n8clocv1 17.76 17.78 17.81 T:aes256otrpv1 17.78 17.79 17.81 T:aes256otrsv1 17.77 17.79 17.84 T:aes256otrpv2 18.50 18.54 18.57 T:aes128n12silcv1 18.50 18.55 18.56 T:aes128n8silcv1 20.89? 23.77? 24.33? T:oceankeyakv1 28.39 28.41 28.58 T:proest256otrv1 29.37 29.48 29.49 T:ketjesrv1 30.48 30.50 30.53 T:ketjesrv2 31.25 31.32 31.40 T:riverkeyakv1 53.51 53.55 53.59 T:proest128otrv1 55.50 55.58 55.60 T:ketjejrv1 58.01 58.06 58.08 T:acorn128v3 76.30 76.32 76.50 T:present80n6t4silcv3 87.10 87.21 87.49 T:seakeyakv1 90.03 90.05 90.12 T:ketjejrv2 90.93 90.97 91.97 T:twine80n6clocv1 91.92 92.04 92.18 T:deoxysneq128128v13 103.99 104.08 104.35 T:aezv1 116.44 116.50 116.65 T:deoxyseq128128v13 132.21 132.22 132.26 T:led80n6t4silcv3 143.54 143.73 143.76 T:deoxysneq256128v13 170.05 170.19 170.52 T:deoxyseq256128v13 304.63? 304.91? 491.92? aes256gcmv1 402.08 402.29 413.10 T:acorn128 402.01 406.77 415.93 T:acorn128v2 2387.28 2391.32 2399.07 T:led80n6t4silcv2 2394.98 2395.18 2395.25 T:led80n6silcv1 3301.54 3302.52 3303.01 T:present80n6silcv1 3302.74 3330.75 3334.43 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.77 1.77 1.96 T:aegis128l 1.78 1.79 1.80 aegis128l 1.91 1.92 1.95 T:aegis128 2.12 2.15 2.19 aegis256 2.30? 2.32? 2.58? T:aezv3 2.33? 2.34? 2.71? T:aezv4 2.24? 2.38? 2.82? T:aezv5 2.35? 2.38? 2.67? T:tiaoxinv1 2.35? 2.46? 2.84? T:tiaoxinv2 3.18 3.27 3.52 T:aeadaes128ocbtaglen128v1 3.61 3.63 3.68 T:aes128otrpv3 3.96 3.98 4.37 T:aeadaes256ocbtaglen128v1 4.03 4.04 4.12 T:deoxysneq128128v1 4.25 4.27 4.42 T:aes128otrsv3 4.23 4.33 4.53 T:morus640128v1 4.41 4.42 4.61 T:morus1280128v1 4.38 4.46 4.68 T:morus1280256v1 4.45 4.49 4.57 T:morus640128v2 4.51? 4.55? 5.16? T:colm0v1 4.64 4.66 4.72 T:aes256otrpv3 4.67 4.72 4.90 T:morus1280256v2 4.70 4.77 5.01 T:morus1280128v2 4.77 4.83 5.02 T:aes128n12t8clocv3 4.80 4.83 4.89 T:deoxysneq256128v1 4.78 4.84 4.86 T:aes128n8t8clocv2 4.82 4.85 4.88 T:aes128n12t8clocv2 4.94 4.98 5.26 T:deoxysi128v141 4.98 5.02 5.08 T:aes128otrcv3 5.47 5.51 5.56 T:aes256otrsv3 5.74 5.77 5.78 T:aes128n12t8silcv3 5.75 5.77 5.77 T:aes128n8t8silcv2 5.79 5.80 5.81 T:aes128n12t8silcv2 5.78 5.94 6.25 T:deoxysi256v141 5.95 5.97 6.15 T:aes128gcmv1 6.41 6.45 6.51 T:aes256otrcv3 6.62 6.65 6.70 T:deoxyseq128128v1 5.98? 6.73? 11.31? T:aeadaes192ocbtaglen128v1 8.41 8.43 8.53 T:deoxysii128v141 8.45 8.54 8.66 T:norx6441v3 8.41 8.55 8.72 T:norx6441v2 8.51 8.59 8.66 T:norx6441v1 9.12 9.13 9.30 T:deoxyseq256128v1 9.27 9.29 9.32 T:aesjambuv1 9.98 10.05 10.09 T:deoxysii256v141 10.72 10.78 10.92 T:norx3241v3 10.79 10.86 10.94 T:norx3241v2 10.95 11.04 11.10 T:norx3241v1 11.49 11.55 11.80 T:ascon96v1 11.51 11.58 11.82 T:ascon128av11 12.12 12.27 12.54 ascon128av12 12.42 12.50 12.90 T:norx6461v1 12.47 12.58 12.73 T:norx6461v2 12.45 12.60 12.77 T:norx6461v3 14.65 14.81 15.02 T:norx6444v3 15.02 15.23 15.49 T:ascon128v11 15.05 15.26 15.59 T:ascon128v1 15.09 15.26 15.34 ascon128v12 15.40 15.70 15.81 T:lakekeyakv1 16.02 16.08 16.16 T:norx3261v2 16.12 16.20 16.23 T:norx3261v3 16.21 16.30 16.35 T:norx3261v1 18.11 18.31 18.45 T:riverkeyakv2 19.08 19.12 19.34 T:lakekeyakv2 21.72 21.77 21.81 T:twine80n6t4clocv2 22.59 22.64 22.82 T:aes128n12clocv1 22.55 22.65 22.99 T:aes128n8clocv1 22.64 22.70 22.85 T:aes128otrsv1 22.75 22.89 22.98 T:aes128otrsv2 23.45 23.52 23.67 T:aes128otrpv1 23.49 23.57 23.63 T:twine80n6t4clocv3 23.46 23.60 23.84 T:aes128otrpv2 25.86 25.96 26.35 T:aes128n8silcv1 25.98 26.09 26.19 T:aes128n12silcv1 29.65 29.72 29.87 T:aes256otrsv2 29.70 29.78 29.90 T:aes256otrsv1 30.41 30.49 30.64 T:aes256otrpv2 30.44 30.55 30.70 T:aes256otrpv1 31.13 31.23 31.41 T:aes256gcmv1 32.22 32.27 32.53 T:seakeyakv2 34.69 35.06 35.38 T:ketjeminorv2 37.64 37.82 37.90 T:norx6444v2 42.68 42.88 43.19 T:norx6444v1 46.02 46.41 46.53 T:ketjesrv1 53.06 53.38 53.57 T:oceankeyakv2 54.51 54.64 54.71 T:ketjesrv2 56.13 56.41 56.60 T:riverkeyakv1 64.58 64.72 64.90 T:ketjemajorv2 73.60 74.00 74.27 T:ketjejrv1 82.13 82.50 83.64 T:proest256otrv1 87.20 87.49 88.19 T:deoxysneq128128v13 94.38 94.64 94.92 T:present80n6t4silcv3 102.17 102.50 104.48 T:twine80n6clocv1 104.18 104.49 105.01 T:proest128otrv1 123.33 123.56 123.93 T:ketjejrv2 126.08 126.27 127.02 T:aezv1 132.68 133.18 134.04 T:lunarkeyakv2 143.52 144.02 144.14 T:deoxysneq256128v13 144.88 145.06 145.52 T:deoxyseq128128v13 156.68 156.86 157.05 T:led80n6t4silcv3 210.48 210.67 211.01 T:acorn128v3 213.09 213.47 214.31 T:deoxyseq256128v13 227.17? 256.82? 261.94? T:oceankeyakv1 352.59? 352.88? 562.29? aes256gcmv1 635.62 640.18 646.34 T:seakeyakv1 1372.46 1372.73 1402.98 T:acorn128 1395.20? 1420.27? 1642.55? T:acorn128v2 2683.32 2684.52 2685.42 T:led80n6silcv1 2687.28 2687.80 2689.09 T:led80n6t4silcv2 3698.66 3699.31 3700.05 T:present80n6t4silcv2 3701.57 3702.03 3702.77 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.78 1.80 1.95 T:aegis128l 1.88 1.90 1.93 T:aegis128 1.96? 1.98? 2.19? aegis128l 2.26 2.28 2.34 T:aezv5 2.33 2.34 2.38 T:aezv3 2.31 2.34 2.38 aegis256 2.32? 2.34? 3.04? T:aezv4 2.37 2.38 2.59 T:tiaoxinv2 2.37? 2.38? 2.81? T:tiaoxinv1 3.45 3.54 3.73 T:aeadaes128ocbtaglen128v1 3.67 3.73 3.83 T:aes128otrpv3 4.27 4.30 4.37 T:aeadaes256ocbtaglen128v1 4.31 4.35 4.45 T:morus640128v1 4.45 4.47 4.48 T:aes128otrsv3 4.57 4.59 4.70 T:morus1280128v1 4.62 4.66 4.84 T:morus1280256v1 4.76 4.82 4.83 T:aes256otrpv3 4.83 4.87 5.19 T:morus1280256v2 4.89 4.91 4.96 T:aes128n8t8clocv2 4.88 4.91 5.23 T:morus1280128v2 4.91 4.93 4.98 T:aes128n12t8clocv2 4.84 4.94 5.13 T:morus640128v2 4.91 4.95 5.12 T:aes128n12t8clocv3 5.11 5.12 5.14 T:aes128otrcv3 5.25 5.30 5.66 T:colm0v1 5.76 5.80 5.89 T:deoxysneq256128v1 5.80 5.81 5.84 T:aes256otrsv3 5.81 5.82 5.84 T:aes128n8t8silcv2 5.83 5.84 5.85 T:aes128n12t8silcv3 5.84 5.90 5.91 T:aes128n12t8silcv2 5.98 6.01 6.06 T:aes128gcmv1 6.14? 6.17? 8.30? T:aeadaes192ocbtaglen128v1 6.16 6.18 6.34 T:deoxysneq128128v1 6.51 6.55 6.66 T:deoxysi128v141 6.75 6.81 6.93 T:aes256otrcv3 7.55 7.58 7.81 T:deoxysi256v141 8.60 8.71 8.77 T:norx6441v1 8.65 8.73 8.85 T:norx6441v3 8.71 8.83 9.04 T:norx6441v2 9.16 9.19 9.36 T:deoxyseq128128v1 9.34 9.38 9.48 T:deoxysii128v141 9.44 9.45 9.47 T:aesjambuv1 10.88 10.90 11.02 T:deoxyseq256128v1 10.91 10.98 11.13 T:norx3241v3 10.95 11.02 11.12 T:norx3241v2 10.98 11.04 11.12 T:norx3241v1 11.49 11.57 11.60 T:deoxysii256v141 11.63 11.66 11.95 T:ascon96v1 11.38 11.71 12.00 T:ascon128av11 12.07 12.23 12.44 ascon128av12 12.71 12.75 12.90 T:norx6461v1 12.69 12.81 12.95 T:norx6461v3 12.84 13.00 13.15 T:norx6461v2 14.82 14.93 15.10 T:norx6444v3 15.04 15.20 15.67 T:ascon128v1 14.94 15.21 15.42 T:ascon128v11 15.13 15.43 15.61 ascon128v12 15.35 15.77 15.92 T:lakekeyakv1 16.20 16.31 16.50 T:norx3261v2 16.31 16.45 16.56 T:norx3261v3 16.39 16.45 16.55 T:norx3261v1 18.09 18.27 18.51 T:riverkeyakv2 18.90 18.96 19.13 T:lakekeyakv2 21.66 21.69 21.74 T:twine80n6t4clocv2 22.38 22.46 22.57 T:aes128n12clocv1 22.45 22.54 22.70 T:aes128n8clocv1 23.26 23.44 23.74 T:aes128otrsv1 23.44 23.57 23.83 T:aes128otrsv2 23.48 23.59 23.64 T:twine80n6t4clocv3 23.77 23.89 24.05 T:aes128otrpv2 23.88 23.93 24.12 T:aes128otrpv1 26.22 26.46 26.57 T:aes128n12silcv1 26.15 26.65 26.93 T:aes128n8silcv1 30.32 30.46 30.92 T:aes256otrsv1 30.30 30.52 31.01 T:aes256otrsv2 30.67 30.73 30.84 T:aes256otrpv1 30.59 30.79 31.06 T:aes256otrpv2 30.77 31.05 31.41 T:aes256gcmv1 32.42 32.62 32.80 T:seakeyakv2 34.34 34.58 34.95 T:ketjeminorv2 37.84 38.02 38.20 T:norx6444v2 42.80 42.95 43.09 T:norx6444v1 46.68 46.82 47.19 T:ketjesrv1 53.27 53.68 54.09 T:oceankeyakv2 54.26 54.59 54.89 T:ketjesrv2 56.20 56.45 56.64 T:riverkeyakv1 64.23 64.51 64.87 T:ketjemajorv2 73.33 73.62 73.76 T:ketjejrv1 83.16 83.48 83.70 T:proest256otrv1 95.59 95.78 96.16 T:present80n6t4silcv3 101.66 101.82 102.72 T:deoxysneq128128v13 102.27 102.59 103.51 T:twine80n6clocv1 105.30 107.04 108.49 T:proest128otrv1 122.51 122.99 123.27 T:ketjejrv2 133.04 133.37 133.88 T:lunarkeyakv2 137.01 137.33 137.65 T:aezv1 144.70 145.05 146.16 T:deoxyseq128128v13 158.45 158.82 159.07 T:led80n6t4silcv3 159.69 159.88 160.48 T:deoxysneq256128v13 210.81 211.07 211.36 T:acorn128v3 213.39 214.63 215.79 T:deoxyseq256128v13 229.59? 256.24? 262.91? T:oceankeyakv1 352.62? 353.02? 562.40? aes256gcmv1 637.48 639.38 642.23 T:seakeyakv1 1399.20 1399.50 1433.34 T:acorn128 1394.85 1420.48 1451.68 T:acorn128v2 2672.34 2673.52 2675.03 T:led80n6t4silcv2 2682.29 2682.70 2684.54 T:led80n6silcv1 3699.59 3700.15 3701.48 T:present80n6t4silcv2 3701.30 3703.27 3704.42 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.77 1.79 1.79 T:aegis128l 1.88 1.89 1.90 T:aegis128 1.96 1.97 1.98 T:aezv5 2.00? 2.02? 2.37? aegis128l 2.00? 2.02? 2.34? T:aezv3 2.02 2.03 2.07 T:aezv4 2.34 2.35 2.40 T:tiaoxinv1 2.35? 2.36? 2.63? T:tiaoxinv2 2.38? 2.39? 2.73? aegis256 3.41 3.45 3.55 T:aeadaes128ocbtaglen128v1 3.70 3.75 3.83 T:aes128otrpv3 4.20 4.24 4.29 T:morus640128v1 4.29 4.30 4.37 T:aeadaes256ocbtaglen128v1 4.46 4.48 4.49 T:aes128otrsv3 4.51 4.58 4.62 T:morus1280128v1 4.55 4.58 4.62 T:morus1280256v1 4.77 4.78 4.81 T:aes256otrpv3 4.81 4.81 4.91 T:morus1280256v2 4.82 4.84 4.90 T:morus1280128v2 4.81 4.85 4.98 T:morus640128v2 4.80 4.87 5.20 T:aes128n12t8clocv3 4.85 4.87 4.90 T:aes128n8t8clocv2 4.86 4.91 5.16 T:aes128n12t8clocv2 5.12 5.15 5.18 T:aes128otrcv3 5.29 5.35 5.66 T:colm0v1 5.62 5.65 5.83 T:deoxysneq256128v1 5.73 5.73 5.77 T:aes128n8t8silcv2 5.75 5.76 5.78 T:aes128n12t8silcv3 5.79 5.80 5.83 T:aes256otrsv3 5.79 5.84 5.84 T:aes128n12t8silcv2 5.98 6.02 6.05 T:aes128gcmv1 6.00 6.03 6.07 T:deoxysneq128128v1 6.12? 6.14? 11.51? T:aeadaes192ocbtaglen128v1 6.48 6.52 6.62 T:deoxysi128v141 6.76 6.77 6.82 T:aes256otrcv3 7.51 7.55 7.65 T:deoxysi256v141 8.60 8.69 8.75 T:norx6441v1 8.69 8.75 8.81 T:norx6441v3 8.82 8.91 8.99 T:norx6441v2 9.15 9.18 9.30 T:deoxyseq128128v1 9.38 9.40 9.42 T:deoxysii128v141 9.41 9.44 9.45 T:aesjambuv1 10.77 10.85 10.95 T:norx3241v2 10.80 10.92 10.98 T:norx3241v3 10.92 10.98 11.08 T:deoxyseq256128v1 11.00 11.05 11.12 T:norx3241v1 11.47 11.54 11.59 T:ascon96v1 11.48 11.55 11.61 T:deoxysii256v141 11.52 11.73 11.82 T:ascon128av11 11.98 12.16 12.35 ascon128av12 12.59 12.75 12.84 T:norx6461v3 12.73 12.79 12.88 T:norx6461v1 12.80 12.91 12.95 T:norx6461v2 14.74 14.85 15.02 T:norx6444v3 14.82 14.98 15.21 T:ascon128v11 14.86 15.01 15.16 T:ascon128v1 15.02 15.16 15.26 ascon128v12 15.35 15.48 15.71 T:lakekeyakv1 16.03 16.17 16.29 T:norx3261v2 16.25 16.29 16.41 T:norx3261v3 16.37 16.43 16.47 T:norx3261v1 18.27 18.38 18.45 T:riverkeyakv2 19.02 19.06 19.20 T:lakekeyakv2 21.70 21.80 22.02 T:twine80n6t4clocv2 22.41 22.46 22.67 T:aes128n8clocv1 22.33 22.47 22.69 T:aes128n12clocv1 23.51 23.61 23.77 T:twine80n6t4clocv3 23.42 23.62 23.91 T:aes128otrsv1 23.48 23.67 24.07 T:aes128otrsv2 23.83 24.04 24.14 T:aes128otrpv2 23.82 24.21 24.30 T:aes128otrpv1 26.01 26.20 26.48 T:aes128n12silcv1 26.01 26.37 26.41 T:aes128n8silcv1 30.32 30.66 30.80 T:aes256otrsv2 30.40 30.74 30.86 T:aes256otrsv1 30.77 30.82 31.13 T:aes256otrpv2 30.70 30.84 31.01 T:aes256otrpv1 30.62 30.90 31.23 T:aes256gcmv1 32.47 32.53 32.70 T:seakeyakv2 34.67 34.88 35.21 T:ketjeminorv2 38.09 38.33 38.46 T:norx6444v2 42.66 42.73 42.91 T:norx6444v1 46.65 46.79 46.98 T:ketjesrv1 53.59 53.73 53.82 T:oceankeyakv2 54.29 54.54 54.70 T:ketjesrv2 55.87 56.02 56.55 T:riverkeyakv1 64.68 64.78 65.23 T:ketjemajorv2 74.20 74.53 75.45 T:ketjejrv1 81.12 81.15 81.55 T:proest256otrv1 95.43 95.69 95.76 T:present80n6t4silcv3 102.01 102.39 103.23 T:twine80n6clocv1 102.91 103.38 103.98 T:deoxysneq128128v13 105.03 105.73 106.01 T:proest128otrv1 122.77 123.10 123.35 T:ketjejrv2 133.12 133.43 133.61 T:lunarkeyakv2 136.76 137.09 137.22 T:aezv1 145.83 146.23 146.70 T:deoxyseq128128v13 158.16 158.30 158.55 T:led80n6t4silcv3 161.16 161.33 161.57 T:deoxysneq256128v13 210.74 210.84 211.23 T:acorn128v3 214.74 215.09 215.99 T:deoxyseq256128v13 227.80? 256.20? 262.77? T:oceankeyakv1 345.61? 346.32? 554.90? aes256gcmv1 636.02 639.51 644.39 T:seakeyakv1 1399.04 1399.41 1433.52 T:acorn128 1395.16 1420.53 1452.19 T:acorn128v2 2670.97 2672.85 2674.25 T:led80n6t4silcv2 2682.93 2683.46 2684.83 T:led80n6silcv1 3699.94 3701.26 3702.42 T:present80n6t4silcv2 3701.62 3703.31 3703.75 T:present80n6silcv1