VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20241022

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.19? 0.21? 0.24? T:tiaoxinv2 0.20? 0.22? 0.24? T:tiaoxinv1 0.21? 0.23? 0.24? aegis128l 0.34 0.36 0.37 T:aegis128 0.37 0.39 0.40 aegis256 0.33? 0.42? 0.63? T:aeadaes128ocbtaglen128v1 0.47 0.47 0.48 T:aezv3 0.47 0.47 0.48 T:aezv4 0.29? 0.49? 0.77? T:aeadaes192ocbtaglen128v1 0.49 0.51 0.53 T:aezv5 0.51 0.52 0.54 T:aes128otrsv3 0.51 0.52 0.53 T:aes128otrcv3 0.50 0.53 0.54 T:aes128otrpv3 0.64 0.65 0.68 T:aes256otrpv3 0.66 0.67 0.67 T:aes256otrcv3 0.67 0.67 0.68 T:aes256otrsv3 0.53? 0.70? 0.85? T:aeadaes256ocbtaglen128v1 0.78 0.80 0.80 T:deoxysneq128128v1 0.80 0.82 0.82 T:deoxysi128v141 0.86 0.87 0.90 T:deoxysneq256128v1 0.87 0.89 0.90 T:morus1280128v1 0.87? 0.91? 1.07? T:aes256gcmv1 0.86 0.92 0.95 T:deoxysi256v141 0.90 0.93 0.95 T:morus1280128v2 0.93 0.94 0.96 T:morus1280256v1 0.95 0.97 0.98 T:morus1280256v2 0.98 1.00 1.02 T:morus640128v1 1.05 1.07 1.08 T:morus640128v2 1.52 1.54 1.57 T:deoxysii128v141 1.54? 1.56? 2.18? T:deoxyseq128128v1 1.55 1.57 1.58 T:colm0v1 1.60 1.61 1.63 T:aes128gcmv1 1.70 1.72 1.74 T:deoxysii256v141 1.75 1.79 1.81 T:deoxyseq256128v1 2.12 2.13 2.15 T:norx6444v3 2.32 2.33 2.34 T:norx6441v2 2.32 2.34 2.35 T:norx6441v3 2.31 2.37 2.44 T:lunarkeyakv2 2.72 2.72 2.72 T:aes128n12t8silcv3 2.78 2.78 2.79 T:aes128n8t8clocv2 2.71 2.78 2.79 T:aes128n12t8silcv2 2.78 2.78 2.79 T:aes128n12t8clocv2 2.72 2.78 2.78 T:aes128n12t8clocv3 2.72 2.78 2.79 T:aes128n8t8silcv2 2.84 2.85 2.86 T:norx6441v1 3.09 3.14 3.19 T:seakeyakv2 3.23 3.28 3.32 T:oceankeyakv2 3.44 3.44 3.46 T:norx3241v2 3.47 3.47 3.49 T:norx6461v3 3.42 3.48 3.51 T:norx3241v3 3.45 3.49 3.49 T:norx6461v2 3.80 3.81 3.83 T:norx6444v2 4.11 4.17 4.22 T:lakekeyakv1 4.13 4.17 4.18 T:norx3241v1 4.21 4.24 4.27 T:norx6461v1 4.36 4.41 4.43 T:norx6444v1 4.40 4.44 4.47 T:lakekeyakv2 5.10 5.15 5.21 T:norx3261v2 5.14 5.19 5.22 T:norx3261v3 5.27 5.31 5.33 T:aesjambuv1 5.90 5.91 5.94 T:ascon96v1 5.96 5.99 6.00 T:ascon128av11 6.57 6.59 6.60 ascon128av12 7.26 7.29 7.30 T:norx3261v1 8.69 8.76 8.78 T:ascon128v11 8.74 8.76 8.78 T:ascon128v1 8.76 8.91 8.94 T:ketjemajorv2 9.01 9.04 9.07 ascon128v12 9.74 9.75 9.82 T:ketjeminorv2 10.12 10.17 10.25 T:riverkeyakv2 14.92 14.97 15.11 T:oceankeyakv1 15.08 15.12 15.16 T:aes128otrpv2 15.02 15.13 15.37 T:aes128otrsv1 15.09 15.13 15.18 T:aes128otrpv1 15.10 15.14 15.19 T:aes128otrsv2 15.29 15.50 15.64 T:twine80n6t4clocv2 16.01 16.05 16.08 T:seakeyakv1 16.49 16.57 16.73 T:twine80n6t4clocv3 18.69 18.73 18.78 T:aes256otrpv1 18.70 18.74 18.78 T:aes256otrsv2 18.68 18.74 19.10 T:aes256otrpv2 18.71 18.77 18.81 T:aes256otrsv1 19.04 19.26 19.30 T:proest256otrv1 22.46 22.48 22.51 T:aes128n12clocv1 22.47 22.49 22.51 T:aes128n8clocv1 25.29 25.31 25.33 T:aes128n12silcv1 25.29 25.31 25.32 T:aes128n8silcv1 30.55 30.76 31.58 T:ketjesrv1 31.67 31.73 31.95 T:riverkeyakv1 31.88? 32.65? 39.88? T:ketjesrv2 54.78 54.84 54.95 T:proest128otrv1 56.88 56.94 57.03 T:ketjejrv1 75.38 75.47 75.63 T:deoxysneq128128v13 85.93 85.97 86.01 T:present80n6t4silcv3 101.37 102.95 103.65 T:ketjejrv2 113.94 113.97 114.02 T:deoxysneq256128v13 127.84 128.92 129.01 T:twine80n6clocv1 130.84 131.01 131.21 T:led80n6t4silcv3 153.46 153.53 153.59 T:deoxyseq128128v13 171.40 171.66 171.89 T:aezv1 230.77 231.15 231.39 T:deoxyseq256128v13 373.79 374.47 375.19 aes256gcmv1 546.02 554.71 572.12 T:acorn128v3 559.85 564.74 568.43 T:acorn128 571.00 575.72 583.17 T:acorn128v2 4086.33 4086.86 4104.29 T:present80n6t4silcv2 4109.08 4109.39 4109.46 T:present80n6silcv1 7808.75 7829.85 7842.49 T:led80n6t4silcv2 7849.49 7857.78 7869.48 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23? 0.25? 0.26? aegis128l 0.32 0.33 0.35 T:tiaoxinv1 0.33 0.35 0.36 T:tiaoxinv2 0.33? 0.37? 0.38? T:aegis128 0.33? 0.39? 0.42? aegis256 0.27? 0.45? 0.59? T:aeadaes128ocbtaglen128v1 0.42? 0.46? 0.47? T:aezv3 0.46 0.47 0.49 T:aezv4 0.47? 0.51? 0.53? T:aezv5 0.35? 0.52? 0.73? T:aeadaes192ocbtaglen128v1 0.54 0.55 0.55 T:aes128otrpv3 0.54 0.55 0.57 T:aes128otrsv3 0.54 0.55 0.55 T:aes128otrcv3 0.65 0.68 0.68 T:aes256otrsv3 0.68 0.68 0.70 T:aes256otrpv3 0.69 0.69 0.69 T:aes256otrcv3 0.59? 0.76? 0.94? T:aeadaes256ocbtaglen128v1 0.80 0.81 0.82 T:morus1280256v2 0.78 0.81 0.82 T:morus1280256v1 0.85 0.86 0.90 T:deoxysi128v141 0.87 0.90 0.91 T:morus1280128v1 0.79? 0.91? 1.41? T:deoxysneq128128v1 0.81? 0.92? 0.96? T:aes256gcmv1 0.90 0.93 0.94 T:morus1280128v2 0.91 0.93 0.97 T:deoxysneq256128v1 0.94 0.97 0.99 T:deoxysi256v141 1.01 1.04 1.05 T:morus640128v1 1.01 1.04 1.06 T:morus640128v2 1.53 1.55 1.61 T:colm0v1 1.53 1.55 1.60 T:deoxysii128v141 1.59 1.61 1.62 T:aes128gcmv1 1.71 1.72 1.75 T:deoxysii256v141 1.93 1.95 1.99 T:deoxyseq256128v1 2.11 2.14 2.15 T:norx6444v3 1.69? 2.30? 2.68? T:deoxyseq128128v1 2.34 2.35 2.35 T:norx6441v2 2.34 2.40 2.44 T:norx6441v3 2.41 2.47 2.55 T:lunarkeyakv2 2.62 2.62 2.68 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128n12t8clocv2 2.55 2.63 2.63 T:aes128n12t8silcv2 2.55 2.63 2.64 T:aes128n8t8silcv2 2.80 2.81 2.81 T:norx6441v1 3.22 3.29 3.34 T:seakeyakv2 3.36 3.40 3.44 T:oceankeyakv2 3.46 3.49 3.49 T:norx6461v2 3.48 3.50 3.51 T:norx3241v3 3.50 3.52 3.56 T:norx6461v3 3.54 3.54 3.55 T:norx3241v2 3.79 3.81 3.84 T:norx6444v2 4.11 4.17 4.26 T:lakekeyakv1 4.18 4.21 4.23 T:norx6461v1 4.22 4.24 4.37 T:norx3241v1 4.40 4.43 4.46 T:norx6444v1 4.40 4.45 4.49 T:lakekeyakv2 5.18 5.19 5.19 T:norx3261v3 5.20 5.21 5.21 T:norx3261v2 5.69 5.76 5.82 T:aesjambuv1 5.86 5.92 5.95 T:ascon96v1 6.02 6.06 6.07 T:ascon128av11 6.03 6.07 6.10 ascon128av12 7.12 7.12 7.15 T:norx3261v1 8.19 8.40 8.50 T:ketjemajorv2 8.51 8.57 8.58 T:ketjeminorv2 8.96 8.98 9.00 T:ascon128v11 8.96 8.98 8.99 T:ascon128v1 9.08 9.10 9.10 ascon128v12 10.74 10.81 10.87 T:riverkeyakv2 15.11 15.22 15.25 T:oceankeyakv1 15.29 15.31 15.47 T:aes128otrpv1 15.25 15.39 15.54 T:twine80n6t4clocv2 15.29 15.41 15.48 T:aes128otrpv2 15.29 15.41 15.48 T:aes128otrsv2 15.28 15.47 16.18 T:aes128otrsv1 16.16 16.18 16.22 T:seakeyakv1 16.56 16.57 16.61 T:twine80n6t4clocv3 18.97 19.06 19.12 T:aes256otrsv1 18.97 19.06 19.09 T:aes256otrpv1 18.96 19.13 19.17 T:aes256otrpv2 19.06 19.14 19.23 T:aes256otrsv2 19.14 19.17 19.46 T:proest256otrv1 23.69 23.75 23.78 T:aes128n8clocv1 23.73 23.80 23.83 T:aes128n12clocv1 25.46 25.47 25.48 T:aes128n12silcv1 25.47 25.48 25.48 T:aes128n8silcv1 31.80 31.88 32.08 T:riverkeyakv1 32.48 34.13 35.07 T:ketjesrv1 38.97 39.25 41.32 T:ketjesrv2 54.55 54.72 54.96 T:proest128otrv1 58.66 58.77 58.87 T:ketjejrv1 86.86 87.01 87.16 T:present80n6t4silcv3 103.79 104.03 104.11 T:deoxysneq128128v13 107.02 107.89 108.55 T:ketjejrv2 127.86 127.93 128.01 T:twine80n6clocv1 127.86 128.14 128.83 T:led80n6t4silcv3 145.39 146.06 146.14 T:deoxysneq256128v13 153.47 153.56 153.80 T:deoxyseq128128v13 171.21 171.49 171.79 T:aezv1 230.25 231.33 231.91 T:deoxyseq256128v13 374.58 376.29 376.94 aes256gcmv1 546.90 552.86 555.78 T:acorn128v3 554.72 561.11 563.03 T:acorn128 563.58 568.73 574.53 T:acorn128v2 4088.64 4089.20 4089.44 T:present80n6t4silcv2 4107.88 4108.24 4108.31 T:present80n6silcv1 7816.03 7834.20 7836.67 T:led80n6t4silcv2 7886.01 7890.75 7902.83 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.14? 0.18? 0.19? T:aezv4 0.14? 0.19? 0.19? T:aezv3 0.17? 0.21? 0.27? T:aezv5 0.24 0.25 0.26 aegis128l 0.31? 0.33? 0.39? T:tiaoxinv2 0.30? 0.33? 0.34? T:tiaoxinv1 0.36 0.37 0.37 T:aegis128 0.31? 0.44? 0.56? T:aeadaes128ocbtaglen128v1 0.41? 0.48? 0.49? aegis256 0.36? 0.51? 0.71? T:aeadaes192ocbtaglen128v1 0.54 0.54 0.55 T:aes128otrsv3 0.54 0.54 0.55 T:aes128otrpv3 0.54 0.55 0.56 T:aes128otrcv3 0.65 0.67 0.68 T:aes256otrsv3 0.68 0.68 0.69 T:aes256otrpv3 0.68 0.69 0.69 T:aes256otrcv3 0.54? 0.75? 0.96? T:aeadaes256ocbtaglen128v1 0.80 0.81 0.82 T:morus1280256v1 0.80 0.82 0.82 T:morus1280256v2 0.81? 0.85? 1.40? T:deoxysneq128128v1 0.81 0.86 0.88 T:deoxysi128v141 0.91 0.91 0.92 T:morus1280128v1 0.85 0.91 0.94 T:aes256gcmv1 0.93 0.93 0.95 T:morus1280128v2 0.92 0.93 0.97 T:deoxysneq256128v1 0.93 0.97 1.03 T:deoxysi256v141 1.04 1.05 1.06 T:morus640128v1 1.03 1.06 1.06 T:morus640128v2 1.50 1.53 1.56 T:deoxysii128v141 1.52 1.54 1.57 T:colm0v1 1.60 1.61 1.62 T:aes128gcmv1 1.71 1.71 1.72 T:deoxysii256v141 1.87 1.89 1.89 T:deoxyseq256128v1 2.11 2.13 2.14 T:norx6444v3 1.62? 2.28? 2.67? T:deoxyseq128128v1 2.34 2.35 2.38 T:norx6441v2 2.34 2.38 2.39 T:norx6441v3 2.47 2.53 2.61 T:lunarkeyakv2 2.61 2.62 2.64 T:aes128n12t8silcv2 2.55 2.62 2.63 T:aes128n8t8silcv2 2.57 2.62 2.68 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n12t8clocv2 2.57 2.63 2.63 T:aes128n8t8clocv2 2.78 2.80 2.80 T:norx6441v1 3.33 3.36 3.38 T:seakeyakv2 3.46 3.48 3.50 T:oceankeyakv2 3.48 3.48 3.49 T:norx6461v2 3.49 3.50 3.50 T:norx3241v3 3.54 3.55 3.55 T:norx3241v2 3.55 3.59 3.71 T:norx6461v3 3.84 3.88 3.89 T:norx6444v2 4.19 4.23 4.24 T:norx6461v1 4.22 4.25 4.31 T:norx3241v1 4.25 4.26 4.29 T:lakekeyakv1 4.47 4.48 4.51 T:norx6444v1 4.48 4.50 4.52 T:lakekeyakv2 5.19 5.19 5.19 T:norx3261v3 5.21 5.21 5.21 T:norx3261v2 5.68 5.69 5.69 T:aesjambuv1 5.71 5.92 5.95 T:ascon96v1 6.05 6.05 6.06 T:ascon128av11 6.03 6.06 6.07 ascon128av12 7.12 7.12 7.14 T:norx3261v1 8.25 8.47 8.54 T:ketjemajorv2 8.54 8.61 8.63 T:ketjeminorv2 8.96 8.96 9.02 T:ascon128v1 8.95 8.97 8.99 T:ascon128v11 9.09 9.10 9.12 ascon128v12 10.85 10.89 10.92 T:riverkeyakv2 15.16 15.23 15.28 T:oceankeyakv1 15.31 15.36 15.39 T:aes128otrpv1 15.35 15.37 15.41 T:aes128otrpv2 15.24 15.43 15.59 T:twine80n6t4clocv2 15.37 15.48 15.51 T:aes128otrsv2 15.33 15.53 16.17 T:aes128otrsv1 16.23 16.24 16.28 T:seakeyakv1 16.56 16.57 16.60 T:twine80n6t4clocv3 19.06 19.15 19.23 T:aes256otrsv1 19.01 19.16 19.18 T:aes256otrpv1 19.02 19.17 19.24 T:aes256otrpv2 19.14 19.18 19.49 T:proest256otrv1 19.05 19.19 19.24 T:aes256otrsv2 23.70 23.73 23.78 T:aes128n8clocv1 23.78 23.79 23.81 T:aes128n12clocv1 25.47 25.48 25.50 T:aes128n8silcv1 25.46 25.48 25.49 T:aes128n12silcv1 32.00 32.10 32.21 T:riverkeyakv1 33.77 34.03 35.28 T:ketjesrv1 35.54? 35.83? 41.99? T:ketjesrv2 54.74 54.84 54.94 T:proest128otrv1 58.62 58.80 58.91 T:ketjejrv1 86.85 86.94 87.02 T:present80n6t4silcv3 103.93 104.02 104.16 T:deoxysneq128128v13 106.08 107.89 109.35 T:ketjejrv2 127.62 128.06 128.30 T:twine80n6clocv1 128.05 128.16 130.38 T:led80n6t4silcv3 145.59 145.67 146.27 T:deoxysneq256128v13 153.54 153.72 154.19 T:deoxyseq128128v13 171.28 171.44 171.69 T:aezv1 230.69 231.17 231.25 T:deoxyseq256128v13 370.89 371.32 371.68 aes256gcmv1 529.16 542.49 553.89 T:acorn128v3 555.14 555.66 570.62 T:acorn128 565.51 565.75 582.23 T:acorn128v2 4088.97 4089.22 4089.37 T:present80n6t4silcv2 4105.57 4107.68 4108.25 T:present80n6silcv1 7810.27 7833.09 7837.46 T:led80n6t4silcv2 7868.02 7890.65 7899.20 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.15? 0.17? 0.18? T:tiaoxinv2 0.16? 0.19? 0.20? T:tiaoxinv1 0.17? 0.19? 0.20? aegis128l 0.30? 0.32? 0.34? T:aezv4 0.32 0.33 0.35 T:aezv3 0.31? 0.34? 0.36? T:aegis128 0.34 0.35 0.36 T:aezv5 0.34? 0.37? 0.38? aegis256 0.40 0.43 0.44 T:aeadaes128ocbtaglen128v1 0.43? 0.50? 0.59? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.53 T:aes128otrpv3 0.54 0.54 0.54 T:aes128otrcv3 0.58? 0.66? 0.77? T:aeadaes256ocbtaglen128v1 0.66 0.67 0.68 T:aes256otrpv3 0.61? 0.67? 0.71? T:aes256gcmv1 0.67 0.68 0.69 T:aes256otrcv3 0.76 0.77 0.79 T:deoxysi128v141 0.75? 0.78? 0.95? T:deoxysneq128128v1 0.84 0.86 0.86 T:morus1280128v1 0.84 0.86 0.88 T:deoxysneq256128v1 0.86 0.87 0.89 T:morus1280128v2 0.86 0.88 0.91 T:deoxysi256v141 0.93 0.94 0.94 T:morus1280256v1 0.93 0.94 0.95 T:morus1280256v2 1.00 1.01 1.02 T:morus640128v1 1.04 1.04 1.05 T:morus640128v2 1.07 1.08 1.09 T:aes128gcmv1 1.08 1.12 1.14 T:colm0v1 1.13 1.16 1.19 T:deoxysii128v141 1.16? 1.21? 1.51? T:deoxyseq128128v1 1.26 1.30 1.34 T:deoxysii256v141 1.31 1.33 1.35 T:deoxyseq256128v1 1.57 1.57 1.58 T:aes128otrsv3 2.15 2.15 2.15 T:aes256otrsv3 2.24 2.29 2.30 T:norx6444v3 2.32 2.33 2.36 T:norx6441v3 2.33 2.35 2.36 T:norx6441v2 2.65 2.67 2.68 T:seakeyakv2 2.67 2.67 2.67 T:aes128n8t8clocv2 2.67 2.67 2.67 T:aes128n12t8clocv2 2.67 2.67 2.71 T:aes128n8t8silcv2 2.67 2.68 2.70 T:aes128n12t8silcv2 2.69 2.69 2.69 T:aes128n12t8silcv3 2.67 2.70 2.70 T:aes128n12t8clocv3 2.77 2.80 2.81 T:oceankeyakv2 2.83 2.84 2.87 T:norx6441v1 3.34 3.38 3.41 T:lunarkeyakv2 3.41 3.44 3.48 T:norx3241v3 3.44 3.46 3.47 T:norx3241v2 3.47 3.48 3.51 T:norx6461v2 3.49 3.49 3.51 T:norx6461v3 3.75 3.78 3.79 T:norx6444v2 3.92 3.95 3.98 T:lakekeyakv1 3.94 3.97 3.99 T:lakekeyakv2 4.13 4.14 4.15 T:norx3241v1 4.21 4.23 4.26 T:norx6461v1 4.34 4.35 4.36 T:norx6444v1 5.14 5.16 5.19 T:norx3261v3 5.14 5.18 5.19 T:norx3261v2 5.35 5.36 5.38 T:aesjambuv1 5.91 5.95 5.96 T:ascon96v1 6.01 6.06 6.08 T:ascon128av11 6.28 6.29 6.30 ascon128av12 7.26 7.29 7.30 T:norx3261v1 7.37? 7.42? 8.72? T:riverkeyakv2 7.31 7.47 7.50 T:ketjemajorv2 8.37 8.38 8.39 T:ketjeminorv2 8.84 8.85 8.86 T:ascon128v1 8.83 8.85 8.86 T:ascon128v11 8.98 8.99 9.01 ascon128v12 13.62 13.65 14.00 T:aes128otrsv1 13.62 13.65 13.68 T:aes128otrsv2 14.14 14.15 14.18 T:aes128otrpv2 14.13 14.22 14.24 T:aes128otrpv1 14.88 14.95 15.00 T:oceankeyakv1 15.06 15.12 15.15 T:twine80n6t4clocv2 16.02 16.05 16.10 T:seakeyakv1 16.35 16.44 16.57 T:twine80n6t4clocv3 16.95 16.96 16.97 T:aes128n8clocv1 16.94 16.98 17.18 T:aes128n12clocv1 17.26 17.29 17.35 T:aes256otrsv1 17.27 17.30 17.35 T:aes256otrsv2 17.76 17.79 17.83 T:aes256otrpv1 17.74 17.81 18.09 T:aes256otrpv2 18.96 18.97 18.99 T:aes128n12silcv1 18.96 18.97 18.98 T:aes128n8silcv1 19.45 19.48 19.52 T:proest256otrv1 28.62 29.12 29.16 T:ketjesrv2 29.64 29.72 29.79 T:riverkeyakv1 29.19 30.76 30.97 T:ketjesrv1 54.57 54.61 54.67 T:ketjejrv1 55.11 55.27 55.50 T:proest128otrv1 75.55 75.59 75.67 T:deoxysneq128128v13 85.71 85.72 85.76 T:present80n6t4silcv3 96.45 96.53 96.67 T:twine80n6clocv1 100.43 101.44 105.17 T:ketjejrv2 113.07 113.20 113.28 T:aezv1 113.65 113.96 114.59 T:deoxysneq256128v13 114.88 114.95 115.01 T:deoxyseq128128v13 127.23 127.92 129.51 T:led80n6t4silcv3 171.73 171.85 172.55 T:deoxyseq256128v13 373.02 373.30 376.14 aes256gcmv1 548.58 559.67 565.86 T:acorn128v3 568.41 569.78 573.97 T:acorn128 571.77 576.36 577.09 T:acorn128v2 3064.86 3070.63 3076.23 T:present80n6t4silcv2 3081.47 3081.52 3081.56 T:present80n6silcv1 5857.14 5871.86 5874.08 T:led80n6t4silcv2 5890.75 5894.68 5898.97 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.19 0.20 0.21 aegis128l 0.21? 0.23? 0.26? T:tiaoxinv1 0.22? 0.24? 0.25? T:tiaoxinv2 0.29? 0.31? 0.33? T:aezv4 0.32 0.33 0.35 T:aezv3 0.32? 0.34? 0.37? T:aegis128 0.33? 0.35? 0.38? T:aezv5 0.34 0.35 0.36 aegis256 0.39? 0.42? 0.45? T:aeadaes128ocbtaglen128v1 0.39? 0.49? 0.58? T:aeadaes192ocbtaglen128v1 0.53 0.53 0.53 T:aes128otrpv3 0.54 0.55 0.55 T:aes128otrcv3 0.62? 0.66? 0.70? T:aes256gcmv1 0.67 0.69 0.69 T:aes256otrpv3 0.69 0.70 0.70 T:aes256otrcv3 0.61? 0.70? 0.80? T:aeadaes256ocbtaglen128v1 0.75 0.76 0.77 T:morus1280256v1 0.76 0.77 0.77 T:morus1280256v2 0.79 0.80 0.83 T:deoxysi128v141 0.77? 0.83? 1.08? T:deoxysneq128128v1 0.83 0.85 0.86 T:morus1280128v1 0.86 0.87 0.89 T:morus1280128v2 0.85 0.89 0.91 T:deoxysneq256128v1 0.87 0.90 0.91 T:deoxysi256v141 1.01 1.02 1.03 T:morus640128v2 1.02 1.02 1.03 T:morus640128v1 1.07 1.08 1.08 T:aes128gcmv1 1.08 1.10 1.11 T:colm0v1 1.13 1.15 1.18 T:deoxysii128v141 1.28? 1.32? 1.52? T:deoxysii256v141 1.34 1.39 1.43 T:deoxyseq256128v1 1.24? 1.58? 1.63? T:deoxyseq128128v1 1.59 1.59 1.60 T:aes128otrsv3 2.14 2.15 2.16 T:aes256otrsv3 2.25 2.27 2.29 T:norx6444v3 2.35 2.35 2.37 T:norx6441v2 2.36 2.36 2.40 T:norx6441v3 2.60 2.62 2.63 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128n12t8silcv3 2.60 2.62 2.63 T:aes128n8t8clocv2 2.60 2.62 2.63 T:aes128n12t8clocv3 2.59 2.63 2.63 T:aes128n12t8silcv2 2.63 2.63 2.63 T:aes128n8t8silcv2 2.70 2.73 2.77 T:seakeyakv2 2.79 2.80 2.81 T:norx6441v1 2.84 2.86 2.88 T:oceankeyakv2 3.37 3.40 3.45 T:lunarkeyakv2 3.47 3.49 3.50 T:norx3241v3 3.47 3.49 3.53 T:norx3241v2 3.49 3.50 3.51 T:norx6461v2 3.50 3.51 3.54 T:norx6461v3 3.75 3.77 3.77 T:norx6444v2 3.93 3.96 4.00 T:lakekeyakv1 3.95 3.96 3.99 T:lakekeyakv2 4.18 4.19 4.25 T:norx3241v1 4.19 4.20 4.21 T:norx6461v1 4.32 4.35 4.37 T:norx6444v1 5.12 5.18 5.19 T:norx3261v3 5.18 5.19 5.19 T:norx3261v2 5.62 5.64 5.64 T:aesjambuv1 5.92 5.96 5.97 T:ascon96v1 5.96 5.98 6.00 T:ascon128av11 5.97 5.98 6.01 ascon128av12 7.20 7.21 7.21 T:norx3261v1 7.05 7.25 7.36 T:ketjemajorv2 7.77 7.80 7.81 T:ketjeminorv2 7.76? 7.80? 8.99? T:riverkeyakv2 8.91 8.92 8.92 T:ascon128v1 8.92 8.93 8.94 T:ascon128v11 8.92 8.95 9.01 ascon128v12 13.79 13.82 13.95 T:aes128otrsv1 13.81 13.83 13.85 T:aes128otrsv2 14.19 14.24 14.27 T:aes128otrpv1 14.27 14.31 14.38 T:aes128otrpv2 14.93 14.99 15.07 T:oceankeyakv1 14.99 15.06 15.15 T:twine80n6t4clocv2 16.10 16.11 16.15 T:seakeyakv1 16.34 16.40 16.42 T:twine80n6t4clocv3 17.46 17.49 17.51 T:aes256otrsv2 17.47 17.49 17.52 T:aes256otrsv1 17.57 17.59 17.62 T:aes128n12clocv1 17.60 17.61 17.64 T:aes128n8clocv1 17.91 17.94 17.97 T:aes256otrpv1 17.97 18.00 18.05 T:aes256otrpv2 19.04 19.04 19.06 T:aes128n8silcv1 19.03 19.05 19.06 T:aes128n12silcv1 19.55 19.59 19.61 T:proest256otrv1 29.74 29.86 29.97 T:riverkeyakv1 30.91 31.02 31.16 T:ketjesrv1 30.69 32.34 32.48 T:ketjesrv2 55.01 55.17 55.37 T:proest128otrv1 55.49 55.62 55.67 T:ketjejrv1 86.22 86.26 86.30 T:present80n6t4silcv3 89.86 89.92 90.04 T:deoxysneq128128v13 96.18 96.33 96.39 T:twine80n6clocv1 102.76 102.99 103.71 T:ketjejrv2 113.19 113.35 113.67 T:aezv1 114.88 114.96 115.02 T:deoxyseq128128v13 128.84 129.51 131.24 T:led80n6t4silcv3 129.57 129.78 129.91 T:deoxysneq256128v13 172.11 172.84 173.00 T:deoxyseq256128v13 372.47 373.05 373.42 aes256gcmv1 541.15 542.84 562.14 T:acorn128v3 562.56 566.37 584.23 T:acorn128 580.96 581.86 582.39 T:acorn128v2 3066.69 3067.94 3068.14 T:present80n6t4silcv2 3080.83 3081.37 3084.09 T:present80n6silcv1 5864.43 5873.76 5877.24 T:led80n6t4silcv2 5908.70 5911.52 5919.22 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.16? 0.18? 0.21? T:aezv4 0.16? 0.18? 0.20? T:aezv5 0.18 0.19 0.19 T:aezv3 0.19 0.20 0.21 aegis128l 0.21? 0.23? 0.25? T:tiaoxinv1 0.21? 0.24? 0.26? T:tiaoxinv2 0.33 0.34 0.34 T:aegis128 0.37 0.40 0.41 aegis256 0.42 0.43 0.43 T:aeadaes128ocbtaglen128v1 0.47 0.49 0.49 T:aeadaes192ocbtaglen128v1 0.53 0.53 0.54 T:aes128otrpv3 0.55 0.55 0.56 T:aes128otrcv3 0.65 0.67 0.70 T:aes256gcmv1 0.69 0.69 0.70 T:aes256otrcv3 0.69 0.69 0.70 T:aes256otrpv3 0.69 0.70 0.71 T:aeadaes256ocbtaglen128v1 0.77 0.77 0.77 T:morus1280256v1 0.77 0.77 0.77 T:morus1280256v2 0.75? 0.78? 1.06? T:deoxysneq128128v1 0.80 0.81 0.82 T:deoxysi128v141 0.86 0.86 0.86 T:morus1280128v1 0.88 0.88 0.89 T:morus1280128v2 0.84 0.89 0.92 T:deoxysneq256128v1 0.89 0.90 0.90 T:deoxysi256v141 1.00 1.02 1.03 T:morus640128v2 1.02 1.02 1.02 T:morus640128v1 1.06 1.08 1.08 T:aes128gcmv1 1.07 1.09 1.10 T:colm0v1 1.13 1.14 1.15 T:deoxysii128v141 1.27? 1.28? 1.52? T:deoxysii256v141 1.34 1.39 1.39 T:deoxyseq256128v1 1.24? 1.56? 1.63? T:deoxyseq128128v1 1.59 1.59 1.59 T:aes128otrsv3 2.14 2.15 2.15 T:aes256otrsv3 2.24 2.27 2.30 T:norx6444v3 2.34 2.35 2.35 T:norx6441v2 2.34 2.36 2.39 T:norx6441v3 2.59 2.59 2.63 T:aes128n8t8silcv2 2.59 2.59 2.63 T:aes128n12t8silcv2 2.60 2.62 2.63 T:aes128n8t8clocv2 2.60 2.62 2.65 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8silcv3 2.60 2.63 2.63 T:aes128n12t8clocv2 2.76 2.77 2.77 T:seakeyakv2 2.79 2.80 2.81 T:norx6441v1 2.86 2.88 2.89 T:oceankeyakv2 3.38 3.43 3.44 T:lunarkeyakv2 3.46 3.49 3.50 T:norx3241v3 3.49 3.49 3.51 T:norx3241v2 3.49 3.50 3.51 T:norx6461v2 3.48 3.50 3.53 T:norx6461v3 3.79 3.80 3.81 T:norx6444v2 3.97 3.99 4.00 T:lakekeyakv1 3.98 3.99 4.00 T:lakekeyakv2 4.17 4.19 4.19 T:norx6461v1 4.17 4.19 4.23 T:norx3241v1 4.37 4.38 4.39 T:norx6444v1 5.14 5.18 5.19 T:norx3261v3 5.18 5.19 5.19 T:norx3261v2 5.62 5.62 5.64 T:aesjambuv1 5.95 5.97 6.02 T:ascon96v1 5.97 5.98 5.99 T:ascon128av11 5.99 6.00 6.00 ascon128av12 7.20 7.21 7.21 T:norx3261v1 7.21 7.39 7.43 T:ketjemajorv2 7.81? 7.83? 9.04? T:riverkeyakv2 7.83 7.84 7.85 T:ketjeminorv2 8.94 8.94 8.95 T:ascon128v1 8.94 8.95 8.95 T:ascon128v11 8.94 8.98 9.02 ascon128v12 13.76 13.82 13.97 T:aes128otrsv1 13.79 13.83 13.86 T:aes128otrsv2 14.20 14.29 14.40 T:aes128otrpv2 14.23 14.32 14.38 T:aes128otrpv1 14.95 15.00 15.10 T:oceankeyakv1 15.05 15.11 15.15 T:twine80n6t4clocv2 16.01 16.09 16.18 T:seakeyakv1 16.39 16.41 16.42 T:twine80n6t4clocv3 17.44 17.48 17.53 T:aes256otrsv2 17.44 17.49 17.54 T:aes256otrsv1 17.56 17.59 17.63 T:aes128n8clocv1 17.58 17.60 17.63 T:aes128n12clocv1 17.96 17.98 18.07 T:aes256otrpv1 17.99 18.05 18.07 T:aes256otrpv2 19.03 19.05 19.05 T:aes128n12silcv1 19.04 19.05 19.07 T:aes128n8silcv1 19.46 19.59 19.61 T:proest256otrv1 29.67 29.81 29.84 T:riverkeyakv1 30.51 30.74 32.45 T:ketjesrv2 30.76 31.02 31.22 T:ketjesrv1 54.51 55.04 55.17 T:proest128otrv1 55.46 55.54 55.65 T:ketjejrv1 86.22 86.26 86.30 T:present80n6t4silcv3 89.87 90.09 90.12 T:deoxysneq128128v13 96.20 96.33 96.98 T:twine80n6clocv1 103.01 103.30 104.01 T:ketjejrv2 113.30 113.40 113.59 T:aezv1 114.95 115.00 115.09 T:deoxyseq128128v13 127.70 128.67 129.62 T:led80n6t4silcv3 129.90 129.95 129.99 T:deoxysneq256128v13 172.30 172.93 173.53 T:deoxyseq256128v13 367.17 368.67 369.82 aes256gcmv1 545.00 554.21 556.36 T:acorn128v3 562.14 572.71 582.12 T:acorn128 580.46 582.21 582.53 T:acorn128v2 3066.39 3066.68 3066.87 T:present80n6t4silcv2 3080.94 3081.31 3081.64 T:present80n6silcv1 5855.85 5877.15 5877.85 T:led80n6t4silcv2 5907.07 5910.49 5917.16 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.10? 0.12? 0.15? T:tiaoxinv2 0.11? 0.14? 0.15? T:tiaoxinv1 0.14? 0.16? 0.16? aegis128l 0.17? 0.19? 0.20? T:aezv5 0.18? 0.19? 0.22? T:aezv3 0.17? 0.20? 0.21? T:aezv4 0.28? 0.30? 0.32? T:aegis128 0.31? 0.32? 0.37? aegis256 0.38? 0.41? 0.43? T:aeadaes128ocbtaglen128v1 0.38? 0.48? 0.52? T:aes256gcmv1 0.44? 0.48? 0.68? T:aeadaes192ocbtaglen128v1 0.51 0.53 0.53 T:aes128otrpv3 0.54 0.55 0.55 T:aes128otrcv3 0.55 0.56 0.58 T:aes128gcmv1 0.58? 0.63? 0.66? T:colm0v1 0.48? 0.66? 0.85? T:aeadaes256ocbtaglen128v1 0.64 0.68 0.70 T:aes256otrpv3 0.68 0.70 0.71 T:aes256otrcv3 0.74 0.75 0.77 T:deoxysi128v141 0.75 0.76 0.78 T:deoxysii128v141 0.70? 0.77? 1.14? T:deoxysneq128128v1 0.79 0.80 0.80 T:morus1280128v1 0.79 0.80 0.82 T:morus1280128v2 0.81 0.83 0.84 T:deoxysneq256128v1 0.83 0.86 0.89 T:deoxysi256v141 0.85 0.86 0.87 T:deoxysii256v141 0.84 0.88 0.88 T:deoxyseq128128v1 0.90 0.91 0.91 T:morus1280256v2 0.89 0.91 0.93 T:morus1280256v1 0.91 0.93 0.95 T:deoxyseq256128v1 0.96 0.98 1.02 T:morus640128v2 0.95 0.99 1.00 T:morus640128v1 2.16 2.17 2.20 T:oceankeyakv2 2.17 2.22 2.26 T:lunarkeyakv2 2.32 2.34 2.36 T:norx6441v3 2.33 2.35 2.37 T:norx6441v2 2.36 2.38 2.41 T:norx6444v3 2.56 2.59 2.62 T:seakeyakv2 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8silcv3 2.62 2.62 2.63 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128n8t8silcv2 2.62 2.63 2.63 T:aes128otrsv3 2.62 2.63 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n12t8clocv2 2.80 2.89 2.91 T:norx6441v1 3.39 3.40 3.42 T:norx3241v2 3.35 3.44 3.47 T:norx3241v3 3.49 3.50 3.53 T:norx6461v3 3.46 3.51 3.53 T:norx6461v2 3.48 3.52 3.57 T:lakekeyakv2 3.62 3.63 3.63 T:aes256otrsv3 3.59 3.66 3.72 T:lakekeyakv1 3.68 3.70 3.73 T:norx6444v2 4.10 4.14 4.18 T:norx3241v1 4.24 4.26 4.28 T:norx6444v1 4.19 4.26 4.34 T:norx6461v1 5.06 5.17 5.22 T:norx3261v2 5.06 5.18 5.19 T:norx3261v3 5.40 5.44 5.44 T:aesjambuv1 5.92 5.93 5.94 T:ascon96v1 5.99 6.00 6.01 ascon128av12 6.02 6.03 6.05 T:ascon128av11 5.84 6.05 6.12 T:ketjemajorv2 6.84 6.89 6.95 T:riverkeyakv2 6.98 7.04 7.07 T:ketjeminorv2 7.27 7.30 7.30 T:norx3261v1 8.92 8.92 8.93 T:ascon128v1 8.91 8.94 8.95 T:ascon128v11 8.94 8.94 8.96 ascon128v12 11.38 11.42 11.46 T:aes128n12clocv1 11.42 11.44 11.47 T:aes128n8clocv1 12.13 12.16 12.21 T:aes128otrsv1 12.15 12.17 12.20 T:aes128otrsv2 12.62 12.63 12.63 T:aes128n8silcv1 12.62 12.64 12.64 T:aes128n12silcv1 13.25 13.29 13.35 T:aes128otrpv2 13.09 13.30 13.42 T:aes128otrpv1 14.63 14.75 14.88 T:twine80n6t4clocv2 14.74 14.81 14.85 T:oceankeyakv1 15.83 15.86 15.89 T:aes256otrsv2 15.85 15.87 15.91 T:aes256otrsv1 15.91 15.94 16.04 T:seakeyakv1 16.11 16.25 16.33 T:twine80n6t4clocv3 16.80 16.82 16.85 T:aes256otrpv1 16.83 16.85 16.87 T:aes256otrpv2 19.63 19.67 19.73 T:proest256otrv1 25.39 25.64 25.66 T:ketjesrv2 26.59 27.10 27.26 T:ketjesrv1 27.65 27.69 27.75 T:riverkeyakv1 52.16 52.25 52.40 T:ketjejrv1 55.08 55.16 55.20 T:aezv1 54.97 55.62 55.89 T:proest128otrv1 64.56 64.59 64.70 T:twine80n6clocv1 75.81 75.87 75.93 T:deoxysneq128128v13 76.13 76.16 76.19 T:deoxyseq128128v13 85.48 85.59 85.60 T:present80n6t4silcv3 98.47 99.30 101.00 T:ketjejrv2 113.93 114.12 114.49 T:deoxyseq256128v13 113.81 114.50 115.37 T:deoxysneq256128v13 130.56 130.63 131.09 T:led80n6t4silcv3 369.10 369.68 370.28 aes256gcmv1 539.39 551.76 562.56 T:acorn128v3 567.41 568.42 572.35 T:acorn128 578.02 578.98 581.36 T:acorn128v2 2043.30 2043.95 2044.08 T:present80n6t4silcv2 2053.61 2053.71 2054.02 T:present80n6silcv1 3899.56 3901.04 3905.65 T:led80n6t4silcv2 3928.28 3931.20 3937.51 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.07? 0.12? 0.18? T:tiaoxinv2 0.10? 0.13? 0.16? T:tiaoxinv1 0.14? 0.14? 0.16? aegis128l 0.17? 0.18? 0.19? T:aezv5 0.18 0.18 0.19 T:aezv4 0.18? 0.19? 0.20? T:aezv3 0.26? 0.31? 0.36? aegis256 0.30? 0.31? 0.37? T:aegis128 0.39 0.41 0.41 T:aeadaes128ocbtaglen128v1 0.38? 0.42? 0.48? T:aes256gcmv1 0.28? 0.47? 0.49? T:aeadaes192ocbtaglen128v1 0.50 0.51 0.52 T:aes128otrpv3 0.54 0.55 0.55 T:aes128otrcv3 0.54 0.56 0.58 T:aes128gcmv1 0.61 0.64 0.66 T:colm0v1 0.47? 0.65? 0.84? T:aeadaes256ocbtaglen128v1 0.64 0.66 0.68 T:aes256otrpv3 0.68 0.70 0.70 T:aes256otrcv3 0.70 0.72 0.72 T:morus1280256v1 0.71 0.72 0.73 T:morus1280256v2 0.71? 0.76? 0.80? T:deoxysi128v141 0.74 0.77 0.80 T:deoxysii128v141 0.76 0.78 0.79 T:deoxysneq128128v1 0.79 0.80 0.80 T:morus1280128v1 0.79 0.82 0.82 T:morus1280128v2 0.83 0.83 0.91 T:deoxysi256v141 0.83 0.84 0.85 T:deoxysneq256128v1 0.83? 0.86? 1.34? T:deoxysii256v141 0.88 0.89 0.90 T:deoxyseq128128v1 0.89 0.91 0.92 T:deoxyseq256128v1 0.97 0.98 1.02 T:morus640128v2 0.97 0.99 1.00 T:morus640128v1 2.14 2.16 2.18 T:oceankeyakv2 2.17 2.22 2.25 T:lunarkeyakv2 2.32 2.33 2.34 T:norx6441v3 2.34 2.36 2.36 T:norx6441v2 2.38 2.39 2.46 T:norx6444v3 2.54 2.54 2.71 T:aes128n12t8silcv2 2.58 2.60 2.62 T:seakeyakv2 2.56 2.62 2.69 T:aes128n12t8clocv2 2.56 2.62 2.69 T:aes128n12t8silcv3 2.56 2.62 2.63 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.63 2.69 T:aes128n8t8clocv2 2.62 2.63 2.73 T:aes128n8t8silcv2 2.75 2.77 2.81 T:norx6441v1 3.39 3.43 3.44 T:norx3241v2 3.43 3.46 3.49 T:norx3241v3 3.45 3.48 3.50 T:norx6461v3 3.49 3.51 3.52 T:norx6461v2 3.51 3.53 3.55 T:lakekeyakv2 3.62 3.62 3.63 T:aes256otrsv3 3.68 3.69 3.74 T:norx6444v2 3.68 3.70 3.71 T:lakekeyakv1 4.11 4.12 4.13 T:norx3241v1 4.14 4.20 4.22 T:norx6461v1 4.23 4.27 4.31 T:norx6444v1 5.16 5.17 5.17 T:norx3261v2 5.10 5.17 5.19 T:norx3261v3 5.44 5.44 5.44 T:aesjambuv1 5.91 5.92 5.93 ascon128av12 5.91 5.97 5.97 T:ascon128av11 5.93 5.98 5.98 T:ascon96v1 6.07 6.10 6.12 T:ketjemajorv2 6.90 6.94 6.96 T:riverkeyakv2 7.01 7.06 7.11 T:ketjeminorv2 7.29 7.30 7.31 T:norx3261v1 8.86 8.88 8.91 ascon128v12 8.88 8.92 8.92 T:ascon128v1 8.91 8.92 8.93 T:ascon128v11 11.37 11.42 11.43 T:aes128n12clocv1 11.41 11.46 11.48 T:aes128n8clocv1 12.12 12.16 12.21 T:aes128otrsv1 12.15 12.17 12.20 T:aes128otrsv2 12.61 12.63 12.67 T:aes128n12silcv1 12.62 12.64 12.64 T:aes128n8silcv1 13.05 13.08 13.12 T:aes128otrpv2 13.07 13.08 13.10 T:aes128otrpv1 14.61 14.70 14.89 T:twine80n6t4clocv2 14.75 14.80 14.83 T:oceankeyakv1 15.83 15.88 15.91 T:aes256otrsv1 15.84 15.88 15.92 T:aes256otrsv2 15.84 15.96 16.04 T:seakeyakv1 16.10 16.23 16.28 T:twine80n6t4clocv3 16.80 16.83 17.08 T:aes256otrpv2 16.79 16.85 17.00 T:aes256otrpv1 19.64 19.67 19.72 T:proest256otrv1 25.25 25.39 25.71 T:ketjesrv2 26.57 26.89 27.19 T:ketjesrv1 27.59 27.63 27.68 T:riverkeyakv1 52.14 52.30 52.41 T:ketjejrv1 55.10 55.16 55.28 T:aezv1 55.38 55.83 55.87 T:proest128otrv1 64.56 64.62 64.72 T:twine80n6clocv1 75.71 75.87 75.97 T:deoxysneq128128v13 76.22 76.32 76.47 T:deoxyseq128128v13 85.52 85.57 85.61 T:present80n6t4silcv3 99.92 101.89 102.51 T:ketjejrv2 113.63 113.81 113.91 T:deoxysneq256128v13 114.28 114.41 114.76 T:deoxyseq256128v13 127.29 130.63 130.94 T:led80n6t4silcv3 368.30 372.53 373.05 aes256gcmv1 540.37 548.25 562.48 T:acorn128v3 575.92 578.96 595.91 T:acorn128 591.46 592.70 602.75 T:acorn128v2 2043.20 2043.81 2044.18 T:present80n6t4silcv2 2053.59 2053.74 2054.02 T:present80n6silcv1 3901.60 3903.19 3907.28 T:led80n6t4silcv2 3926.86 3930.10 3933.06 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.10? 0.12? 0.15? T:tiaoxinv2 0.10? 0.12? 0.15? T:tiaoxinv1 0.16 0.16 0.16 aegis128l 0.18 0.18 0.18 T:aezv4 0.18 0.18 0.19 T:aezv5 0.18? 0.20? 0.20? T:aezv3 0.29? 0.30? 0.34? aegis256 0.30? 0.33? 0.37? T:aegis128 0.39 0.40 0.40 T:aeadaes128ocbtaglen128v1 0.39? 0.44? 0.49? T:aes256gcmv1 0.46? 0.47? 0.67? T:aeadaes192ocbtaglen128v1 0.50 0.51 0.52 T:aes128otrpv3 0.55 0.55 0.55 T:aes128otrcv3 0.56 0.56 0.57 T:aes128gcmv1 0.60 0.63 0.64 T:colm0v1 0.63 0.64 0.66 T:aeadaes256ocbtaglen128v1 0.68 0.68 0.68 T:aes256otrpv3 0.68 0.69 0.71 T:aes256otrcv3 0.72 0.72 0.73 T:morus1280256v2 0.72 0.72 0.73 T:morus1280256v1 0.71 0.74 0.77 T:deoxysi128v141 0.70 0.74 0.75 T:deoxysneq128128v1 0.75 0.76 0.78 T:deoxysii128v141 0.80 0.81 0.81 T:morus1280128v1 0.81 0.82 0.82 T:morus1280128v2 0.83 0.83 0.88 T:deoxysi256v141 0.80 0.83 0.85 T:deoxysneq256128v1 0.83 0.85 0.85 T:deoxyseq128128v1 0.84? 0.86? 1.34? T:deoxysii256v141 0.88 0.88 0.88 T:deoxyseq256128v1 0.97 0.97 0.98 T:morus640128v2 0.99 1.00 1.00 T:morus640128v1 2.18 2.19 2.20 T:oceankeyakv2 2.17 2.23 2.26 T:lunarkeyakv2 2.32 2.33 2.33 T:norx6441v3 2.36 2.37 2.38 T:norx6441v2 2.38 2.39 2.46 T:norx6444v3 2.54 2.55 2.71 T:aes128n8t8silcv2 2.58 2.59 2.61 T:seakeyakv2 2.62 2.62 2.63 T:aes128otrsv3 2.57 2.62 2.68 T:aes128n12t8clocv3 2.57 2.62 2.63 T:aes128n8t8clocv2 2.62 2.63 2.63 T:aes128n12t8clocv2 2.54 2.63 2.71 T:aes128n12t8silcv2 2.56 2.63 2.69 T:aes128n12t8silcv3 2.75 2.80 2.82 T:norx6441v1 3.42 3.45 3.49 T:norx3241v3 3.44 3.45 3.46 T:norx3241v2 3.46 3.46 3.52 T:norx6461v3 3.47 3.51 3.54 T:norx6461v2 3.51 3.53 3.53 T:lakekeyakv2 3.62 3.62 3.63 T:aes256otrsv3 3.68 3.70 3.71 T:norx6444v2 3.68 3.71 3.72 T:lakekeyakv1 4.12 4.12 4.20 T:norx3241v1 4.12 4.15 4.21 T:norx6461v1 4.23 4.28 4.30 T:norx6444v1 5.10 5.17 5.18 T:norx3261v3 5.16 5.17 5.17 T:norx3261v2 5.40 5.44 5.44 T:aesjambuv1 5.89 5.91 5.92 ascon128av12 5.92 5.93 5.97 T:ascon96v1 5.91 5.97 5.98 T:ascon128av11 6.04 6.09 6.12 T:ketjemajorv2 6.93 6.94 6.95 T:riverkeyakv2 7.02 7.04 7.09 T:ketjeminorv2 7.30 7.31 7.31 T:norx3261v1 8.85 8.87 8.89 T:ascon128v11 8.87 8.88 8.89 ascon128v12 8.90 8.92 8.92 T:ascon128v1 11.37 11.42 11.44 T:aes128n12clocv1 11.44 11.47 11.50 T:aes128n8clocv1 12.12 12.18 12.21 T:aes128otrsv1 12.16 12.19 12.22 T:aes128otrsv2 12.61 12.63 12.64 T:aes128n12silcv1 12.61 12.63 12.63 T:aes128n8silcv1 13.07 13.10 13.12 T:aes128otrpv1 13.07 13.13 13.16 T:aes128otrpv2 14.60 14.74 14.82 T:twine80n6t4clocv2 14.70 14.75 14.85 T:oceankeyakv1 15.82 15.86 15.90 T:aes256otrsv2 15.84 15.87 15.91 T:aes256otrsv1 15.86 15.96 15.98 T:seakeyakv1 16.09 16.28 16.66 T:twine80n6t4clocv3 16.82 16.84 16.87 T:aes256otrpv1 16.82 16.85 17.06 T:aes256otrpv2 19.69 19.73 19.80 T:proest256otrv1 25.65 25.67 25.98 T:ketjesrv2 26.67 26.88 27.18 T:ketjesrv1 27.64 27.67 27.79 T:riverkeyakv1 52.19 52.25 52.45 T:ketjejrv1 54.84 55.08 55.85 T:proest128otrv1 55.08 55.10 55.14 T:aezv1 64.61 64.64 64.70 T:twine80n6clocv1 75.85 75.92 76.04 T:deoxysneq128128v13 76.29 76.45 76.50 T:deoxyseq128128v13 85.48 85.50 85.58 T:present80n6t4silcv3 98.16 99.80 101.79 T:ketjejrv2 113.50 113.91 113.98 T:deoxysneq256128v13 114.23 114.39 114.83 T:deoxyseq256128v13 130.62 130.76 131.08 T:led80n6t4silcv3 366.70 368.86 375.98 aes256gcmv1 538.77 549.40 582.81 T:acorn128v3 571.42 580.59 590.62 T:acorn128 594.09 597.76 598.68 T:acorn128v2 2043.65 2043.80 2044.10 T:present80n6t4silcv2 2053.61 2053.72 2053.95 T:present80n6silcv1 3896.93 3900.48 3914.70 T:led80n6t4silcv2 3926.34 3929.98 3932.68 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.23 0.24 0.25 aegis128l 0.23? 0.24? 0.26? T:tiaoxinv2 0.23? 0.25? 0.27? T:tiaoxinv1 0.37 0.37 0.38 T:aegis128 0.39 0.40 0.41 T:aezv4 0.40 0.40 0.41 T:aezv3 0.40 0.41 0.43 aegis256 0.42 0.43 0.44 T:aezv5 0.55 0.55 0.57 T:aeadaes128ocbtaglen128v1 0.66 0.66 0.67 T:aes128otrpv3 0.66 0.67 0.70 T:aeadaes192ocbtaglen128v1 0.71 0.71 0.71 T:aes128otrcv3 0.83 0.83 0.84 T:aes256otrpv3 0.82? 0.84? 0.95? T:aeadaes256ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.98? 1.01? 1.15? T:deoxysneq128128v1 1.04 1.06 1.08 T:deoxysi128v141 1.05 1.06 1.08 T:deoxysneq256128v1 1.08 1.08 1.09 T:morus1280128v1 1.11 1.11 1.12 T:morus1280128v2 1.14 1.15 1.16 T:morus640128v1 1.15 1.16 1.16 T:morus1280256v1 1.16 1.17 1.18 T:morus640128v2 1.19 1.19 1.20 T:morus1280256v2 1.19 1.20 1.23 T:deoxysi256v141 1.21 1.21 1.22 T:aes128gcmv1 1.24 1.24 1.27 T:colm0v1 1.44? 1.47? 1.72? T:deoxyseq128128v1 1.58 1.62 1.63 T:deoxyseq256128v1 1.66 1.66 1.66 T:aes128otrsv3 1.69 1.71 1.75 T:deoxysii256v141 1.83 1.85 1.87 T:deoxysii128v141 1.98 2.01 2.04 T:aes256gcmv1 2.25 2.25 2.25 T:aes256otrsv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.75 T:aes128n12t8clocv3 2.74 2.74 2.79 T:norx6441v3 2.74 2.75 2.77 T:norx6441v2 2.76 2.76 2.79 T:aes128n12t8silcv2 2.77 2.77 2.77 T:aes128n12t8silcv3 2.76 2.78 2.79 T:aes128n8t8silcv2 3.08 3.12 3.15 T:norx6444v3 3.18 3.20 3.22 T:norx6441v1 3.73 3.74 3.76 T:norx3241v2 3.73 3.76 3.78 T:norx3241v3 3.92 3.93 3.94 T:seakeyakv2 4.06 4.07 4.13 T:norx6461v3 4.07 4.09 4.10 T:norx6461v2 4.35 4.35 4.37 T:lakekeyakv2 4.35 4.39 4.39 T:norx3241v1 4.61 4.62 4.65 T:lakekeyakv1 4.77 4.80 4.82 T:norx6461v1 5.30 5.31 5.33 T:oceankeyakv2 5.39 5.40 5.45 T:norx6444v2 5.42 5.43 5.46 T:aesjambuv1 5.53 5.56 5.62 T:norx3261v2 5.58 5.60 5.62 T:norx3261v3 6.13 6.14 6.15 T:norx6444v1 6.10 6.15 6.15 T:ascon96v1 6.17 6.19 6.21 T:ascon128av11 6.45 6.45 6.46 ascon128av12 7.65 7.66 7.69 T:norx3261v1 7.79? 7.83? 9.05? T:riverkeyakv2 9.01 9.01 9.01 T:ascon128v1 9.01 9.01 9.02 T:ascon128v11 9.07 9.11 9.13 T:lunarkeyakv2 9.14 9.14 9.15 ascon128v12 9.59 9.60 9.60 T:ketjeminorv2 9.52 9.67 9.68 T:ketjemajorv2 14.06 14.09 14.11 T:aes128otrsv2 14.10 14.11 14.19 T:aes128otrsv1 14.54 14.54 14.57 T:aes128otrpv1 14.52 14.55 14.57 T:aes128otrpv2 15.45 15.49 15.51 T:twine80n6t4clocv2 16.71 16.73 16.79 T:twine80n6t4clocv3 17.24 17.25 17.27 T:aes128n8clocv1 17.24 17.25 17.26 T:aes128n12clocv1 17.82 17.83 17.87 T:aes256otrsv2 17.86 17.88 17.91 T:aes256otrsv1 18.33 18.35 18.53 T:aes256otrpv1 18.33 18.36 18.38 T:aes256otrpv2 19.32 19.32 19.34 T:aes128n8silcv1 19.33 19.33 19.35 T:aes128n12silcv1 19.59 19.61 19.63 T:seakeyakv1 21.18 21.21 21.30 T:proest256otrv1 22.90 22.98 23.03 T:oceankeyakv1 29.63 30.10 30.12 T:ketjesrv2 30.98 31.08 31.11 T:riverkeyakv1 29.64 31.50 31.66 T:ketjesrv1 55.33 55.39 55.47 T:ketjejrv1 57.41 57.71 57.81 T:proest128otrv1 76.05 76.08 76.15 T:deoxysneq128128v13 86.57 86.57 86.62 T:present80n6t4silcv3 97.07 97.12 97.29 T:twine80n6clocv1 102.62 104.28 105.29 T:ketjejrv2 108.40 108.46 108.53 T:aezv1 114.64 114.67 115.10 T:deoxysneq256128v13 115.99 116.05 116.12 T:deoxyseq128128v13 128.43 128.43 129.95 T:led80n6t4silcv3 173.99 174.17 174.29 T:deoxyseq256128v13 372.85 373.79 379.21 aes256gcmv1 614.63 625.78 628.82 T:acorn128v3 638.01 640.51 641.46 T:acorn128 647.31 650.23 652.66 T:acorn128v2 3081.53 3081.55 3081.70 T:present80n6t4silcv2 3097.69 3097.74 3097.79 T:present80n6silcv1 5893.46 5900.59 5903.13 T:led80n6t4silcv2 5920.77 5923.18 5928.69 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.25 0.25 aegis128l 0.29 0.30 0.32 T:tiaoxinv2 0.29? 0.30? 0.33? T:tiaoxinv1 0.37 0.38 0.40 T:aegis128 0.39 0.40 0.41 T:aezv3 0.40 0.40 0.40 T:aezv4 0.40 0.40 0.40 aegis256 0.42 0.43 0.44 T:aezv5 0.55 0.55 0.57 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.74? T:aeadaes192ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.72 0.73 0.73 T:aes128otrcv3 0.84 0.84 0.85 T:aes256otrpv3 0.85? 0.85? 0.96? T:aeadaes256ocbtaglen128v1 0.93 0.93 0.94 T:aes256otrcv3 0.97 0.97 0.97 T:morus1280256v1 0.98 0.99 0.99 T:morus1280256v2 1.10 1.10 1.10 T:morus1280128v1 1.08? 1.10? 1.38? T:deoxysneq128128v1 1.11 1.11 1.16 T:deoxysneq256128v1 1.12 1.12 1.12 T:morus1280128v2 1.12 1.14 1.14 T:deoxysi128v141 1.17 1.17 1.17 T:morus640128v1 1.17 1.17 1.18 T:morus640128v2 1.21 1.21 1.21 T:aes128gcmv1 1.24 1.24 1.25 T:colm0v1 1.27 1.29 1.30 T:deoxysi256v141 1.54 1.54 1.55 T:deoxysii128v141 1.68 1.68 1.68 T:aes128otrsv3 1.69 1.69 1.70 T:deoxyseq256128v1 1.78 1.82 1.96 T:deoxysii256v141 1.60? 1.86? 1.93? T:deoxyseq128128v1 1.95 1.96 2.00 T:aes256gcmv1 2.27 2.27 2.27 T:aes256otrsv3 2.68 2.68 2.71 T:aes128n12t8clocv3 2.68 2.68 2.68 T:aes128n12t8clocv2 2.68 2.68 2.71 T:aes128n8t8clocv2 2.71 2.71 2.75 T:aes128n12t8silcv3 2.71 2.71 2.76 T:aes128n8t8silcv2 2.71 2.71 2.76 T:aes128n12t8silcv2 2.75 2.76 2.77 T:norx6441v2 2.74 2.77 2.77 T:norx6441v3 3.08 3.08 3.09 T:norx6444v3 3.16 3.17 3.18 T:norx6441v1 3.76 3.76 3.76 T:norx3241v3 3.76 3.78 3.79 T:norx3241v2 3.97 3.99 4.03 T:seakeyakv2 4.07 4.08 4.08 T:norx6461v2 4.08 4.10 4.12 T:norx6461v3 4.36 4.37 4.38 T:lakekeyakv2 4.43 4.43 4.44 T:norx3241v1 4.64 4.64 4.68 T:lakekeyakv1 4.70 4.71 4.74 T:norx6461v1 5.32 5.33 5.37 T:oceankeyakv2 5.40 5.41 5.42 T:norx6444v2 5.56 5.60 5.62 T:norx3261v3 5.58 5.61 5.62 T:norx3261v2 5.70 5.72 5.73 T:aesjambuv1 6.12 6.13 6.14 T:ascon96v1 6.13 6.14 6.14 T:ascon128av11 6.13 6.14 6.15 T:norx6444v1 6.15 6.16 6.16 ascon128av12 7.62 7.63 7.63 T:norx3261v1 8.19? 8.22? 9.34? T:riverkeyakv2 9.02 9.03 9.05 T:ketjeminorv2 9.07 9.07 9.09 T:ascon128v11 9.07 9.08 9.08 T:ascon128v1 9.08 9.10 9.15 ascon128v12 9.13 9.15 9.21 T:lunarkeyakv2 9.33 9.39 9.48 T:ketjemajorv2 14.18 14.20 14.28 T:aes128otrsv2 14.28 14.32 14.42 T:aes128otrsv1 14.70 14.73 14.78 T:aes128otrpv1 14.66 14.73 14.80 T:aes128otrpv2 15.45 15.47 15.54 T:twine80n6t4clocv2 16.67 16.72 16.75 T:twine80n6t4clocv3 17.89 17.89 17.91 T:aes128n12clocv1 17.90 17.91 17.94 T:aes128n8clocv1 18.00 18.04 18.10 T:aes256otrsv2 18.04 18.07 18.10 T:aes256otrsv1 18.47 18.50 18.64 T:aes256otrpv1 18.55 18.56 18.62 T:aes256otrpv2 19.40 19.40 19.42 T:aes128n8silcv1 19.41 19.41 19.42 T:aes128n12silcv1 19.62 19.69 19.71 T:seakeyakv1 21.38 21.39 21.42 T:proest256otrv1 23.00 23.00 23.02 T:oceankeyakv1 30.98 31.09 31.16 T:riverkeyakv1 31.74 31.76 31.94 T:ketjesrv1 31.77 33.28 33.38 T:ketjesrv2 56.19 56.28 56.34 T:ketjejrv1 57.36 57.40 57.60 T:proest128otrv1 87.08 87.12 87.15 T:present80n6t4silcv3 90.24 90.39 90.61 T:deoxysneq128128v13 96.84 97.09 97.23 T:twine80n6clocv1 104.67 104.82 105.23 T:ketjejrv2 108.69 108.83 108.94 T:aezv1 116.10 116.19 116.26 T:deoxyseq128128v13 129.31 129.91 130.58 T:led80n6t4silcv3 130.31 130.42 130.55 T:deoxysneq256128v13 173.99 174.37 174.92 T:deoxyseq256128v13 374.94 377.54 381.40 aes256gcmv1 619.15 625.39 626.51 T:acorn128v3 634.15 635.92 660.03 T:acorn128 656.25 657.00 662.75 T:acorn128v2 3082.59 3082.69 3084.23 T:present80n6t4silcv2 3097.04 3097.20 3097.39 T:present80n6silcv1 5903.70 5904.73 5908.52 T:led80n6t4silcv2 5939.72 5940.19 5940.61 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.23? 0.23? 0.27? T:aezv4 0.23 0.23 0.24 T:aezv3 0.25 0.25 0.25 aegis128l 0.24? 0.25? 0.28? T:aezv5 0.29 0.29 0.32 T:tiaoxinv2 0.29 0.30 0.31 T:tiaoxinv1 0.37 0.40 0.40 T:aegis128 0.45 0.45 0.45 aegis256 0.54 0.55 0.55 T:aeadaes128ocbtaglen128v1 0.62 0.62 0.63 T:aeadaes192ocbtaglen128v1 0.67 0.67 0.67 T:aes128otrpv3 0.72 0.73 0.73 T:aes128otrcv3 0.83 0.84 0.84 T:aes256otrpv3 0.84 0.85 0.86 T:aeadaes256ocbtaglen128v1 0.93 0.94 0.94 T:aes256otrcv3 0.97 0.97 0.97 T:morus1280256v1 0.98 0.98 0.98 T:morus1280256v2 1.04? 1.04? 1.36? T:deoxysneq128128v1 1.09 1.10 1.10 T:deoxysneq256128v1 1.10 1.10 1.10 T:morus1280128v1 1.11 1.11 1.13 T:deoxysi128v141 1.12 1.12 1.12 T:morus1280128v2 1.15 1.15 1.16 T:morus640128v1 1.17 1.18 1.18 T:morus640128v2 1.20 1.20 1.21 T:aes128gcmv1 1.24 1.24 1.27 T:colm0v1 1.26 1.26 1.29 T:deoxysi256v141 1.52 1.52 1.55 T:deoxysii128v141 1.67 1.67 1.69 T:deoxyseq256128v1 1.68 1.68 1.69 T:aes128otrsv3 1.73? 1.77? 1.96? T:deoxysii256v141 1.59? 1.85? 1.90? T:deoxyseq128128v1 1.93 1.94 1.96 T:aes256gcmv1 2.27 2.27 2.28 T:aes256otrsv3 2.67 2.67 2.67 T:aes128n12t8clocv2 2.67 2.67 2.71 T:aes128n8t8clocv2 2.67 2.67 2.71 T:aes128n12t8clocv3 2.71 2.71 2.74 T:aes128n12t8silcv3 2.71 2.71 2.71 T:aes128n12t8silcv2 2.71 2.71 2.71 T:aes128n8t8silcv2 2.75 2.76 2.76 T:norx6441v2 2.73 2.77 2.78 T:norx6441v3 3.06 3.10 3.12 T:norx6444v3 3.15 3.16 3.17 T:norx6441v1 3.78 3.78 3.79 T:norx3241v2 3.79 3.79 3.79 T:norx3241v3 4.00 4.00 4.01 T:seakeyakv2 4.07 4.07 4.08 T:norx6461v2 4.10 4.11 4.17 T:norx6461v3 4.38 4.39 4.39 T:lakekeyakv2 4.40 4.43 4.45 T:norx3241v1 4.66 4.66 4.67 T:lakekeyakv1 4.73 4.74 4.74 T:norx6461v1 5.34 5.35 5.36 T:oceankeyakv2 5.42 5.43 5.44 T:norx6444v2 5.61 5.62 5.62 T:norx3261v2 5.60 5.62 5.62 T:norx3261v3 5.70 5.73 5.73 T:aesjambuv1 6.11 6.13 6.14 T:ascon96v1 6.13 6.13 6.14 T:ascon128av11 6.15 6.16 6.16 ascon128av12 6.17 6.18 6.19 T:norx6444v1 7.62 7.63 7.63 T:norx3261v1 8.22? 8.23? 9.36? T:riverkeyakv2 9.06 9.07 9.07 T:ketjeminorv2 9.10 9.10 9.10 T:ascon128v1 9.10 9.10 9.10 T:ascon128v11 9.10 9.11 9.15 ascon128v12 9.12 9.12 9.15 T:lunarkeyakv2 9.18 9.51 9.58 T:ketjemajorv2 14.26 14.29 14.31 T:aes128otrsv2 14.25 14.31 14.43 T:aes128otrsv1 14.67 14.69 14.90 T:aes128otrpv2 14.67 14.70 14.73 T:aes128otrpv1 15.44 15.49 15.53 T:twine80n6t4clocv2 16.65 16.68 16.74 T:twine80n6t4clocv3 17.87 17.87 17.89 T:aes128n12clocv1 17.87 17.89 17.92 T:aes128n8clocv1 18.07 18.09 18.12 T:aes256otrsv1 18.07 18.11 18.14 T:aes256otrsv2 18.50 18.52 18.65 T:aes256otrpv1 18.55 18.57 18.62 T:aes256otrpv2 19.40 19.40 19.41 T:aes128n12silcv1 19.41 19.41 19.41 T:aes128n8silcv1 19.70 19.71 19.75 T:seakeyakv1 21.25 21.38 21.39 T:proest256otrv1 22.96 23.01 23.06 T:oceankeyakv1 31.01 31.06 31.12 T:riverkeyakv1 31.68 31.71 33.33 T:ketjesrv2 31.78 31.79 31.98 T:ketjesrv1 56.29 56.39 56.47 T:ketjejrv1 57.22 57.32 57.44 T:proest128otrv1 87.05 87.10 87.17 T:present80n6t4silcv3 90.20 90.40 90.44 T:deoxysneq128128v13 96.77 96.94 96.97 T:twine80n6clocv1 104.02 104.75 105.46 T:ketjejrv2 108.50 108.59 108.86 T:aezv1 116.21 116.26 116.31 T:deoxyseq128128v13 130.08 130.37 130.99 T:deoxysneq256128v13 129.61 130.46 130.58 T:led80n6t4silcv3 173.87 173.99 174.04 T:deoxyseq256128v13 373.32 375.32 375.97 aes256gcmv1 610.79 612.66 621.01 T:acorn128v3 633.55 635.74 653.36 T:acorn128 652.49 658.26 658.83 T:acorn128v2 3082.49 3082.59 3082.70 T:present80n6t4silcv2 3096.97 3097.14 3097.45 T:present80n6silcv1 5900.23 5904.09 5906.43 T:led80n6t4silcv2 5930.54 5938.27 5949.02 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.05? 1.20? 1.62? T:aegis128 1.20? 1.53? 1.81? aegis128l 1.70? 1.73? 2.01? T:aezv3 1.41? 1.74? 2.03? aegis256 1.77? 1.84? 1.98? T:aezv4 1.77? 1.85? 2.14? T:tiaoxinv2 1.79? 2.07? 2.28? T:aezv5 1.60? 2.08? 2.32? T:tiaoxinv1 3.23 3.25 3.32 T:aes128otrpv3 3.30 3.34 3.34 T:aes128otrsv3 3.70 3.73 3.84 T:aes256otrpv3 3.71 3.74 3.76 T:aes128n8t8clocv2 3.74 3.77 3.80 T:aes128n12t8clocv2 3.74 3.77 3.78 T:aes128n12t8clocv3 3.81? 3.88? 4.66? T:colm0v1 3.83 4.01 4.23 T:deoxysneq128128v1 4.09 4.13 4.20 T:aes128otrcv3 4.17 4.17 4.19 T:aes256otrsv3 4.05 4.20 4.37 T:deoxysneq256128v1 4.10? 4.34? 5.84? T:aeadaes128ocbtaglen128v1 4.28 4.45 4.71 T:morus640128v1 4.34 4.47 4.82 T:morus640128v2 4.60 4.63 4.63 T:aes128n12t8silcv3 4.68 4.69 4.70 T:aes128n8t8silcv2 4.68 4.70 4.74 T:aes128n12t8silcv2 4.34? 4.90? 7.27? T:aeadaes256ocbtaglen128v1 4.83 4.91 4.91 T:deoxysi128v141 5.14 5.16 5.19 T:aes256otrcv3 4.84? 5.39? 7.76? T:aeadaes192ocbtaglen128v1 5.47 5.53 5.73 T:aes128gcmv1 5.73 5.81 5.91 T:deoxysi256v141 6.02 6.11 6.28 T:deoxyseq128128v1 6.16 6.27 6.48 T:morus1280256v1 6.16 6.44 6.62 T:morus1280128v1 6.23 6.52 6.84 T:morus1280128v2 6.28 6.52 6.69 T:deoxysii128v141 6.89 6.92 7.16 T:morus1280256v2 7.07 7.09 7.11 T:aesjambuv1 7.12 7.48 7.74 T:deoxysii256v141 7.84 8.06 8.12 T:deoxyseq256128v1 9.09 9.16 9.16 T:norx6441v1 9.16 9.18 9.23 T:norx3241v1 9.32 9.37 9.40 T:norx6441v2 9.43 9.44 9.45 T:norx3241v2 9.42 9.48 9.54 T:norx6441v3 9.48 9.48 9.55 T:norx3241v3 9.55 9.78 10.00 T:ascon128av11 10.15 10.27 10.50 T:ascon96v1 10.05 10.41 10.58 ascon128av12 12.16 12.64 12.95 T:ascon128v11 12.34 12.73 12.91 T:ascon128v1 12.48 12.80 12.95 ascon128v12 13.38 13.40 13.52 T:norx6461v1 13.66 13.69 14.02 T:norx6461v2 13.66 13.71 13.74 T:norx6461v3 13.95 14.01 14.07 T:norx3261v2 13.98 14.01 14.01 T:norx3261v3 15.87 15.88 15.91 T:norx3261v1 16.30 16.46 16.60 T:lakekeyakv1 18.97 19.10 19.45 T:riverkeyakv2 19.16 19.59 20.13 T:lakekeyakv2 20.19 20.22 20.30 T:norx6444v3 23.43 23.46 23.70 T:twine80n6t4clocv3 23.46 23.73 23.83 T:aes128n8clocv1 23.84 23.94 24.23 T:aes128n12clocv1 23.89 24.20 24.45 T:aes128otrsv2 23.97 24.20 25.89 T:twine80n6t4clocv2 24.15 24.33 24.62 T:aes128otrsv1 24.43 24.47 24.64 T:aes128otrpv2 24.69 24.74 24.89 T:aes128otrpv1 27.81 27.82 28.38 T:aes128n8silcv1 27.82 28.00 28.33 T:aes128n12silcv1 30.28 30.48 30.80 T:aes256otrsv2 30.48 30.66 30.92 T:aes256otrsv1 31.01 31.17 31.38 T:aes256otrpv2 31.09 31.18 31.38 T:aes256otrpv1 31.99 32.05 33.47 T:aes256gcmv1 36.84 37.40 37.81 T:seakeyakv2 37.88 37.96 38.17 T:ketjeminorv2 38.91 38.92 38.94 T:norx6444v2 43.93 44.00 44.08 T:norx6444v1 47.36 48.62 48.90 T:ketjesrv1 52.09 52.31 52.59 T:ketjesrv2 56.05 56.20 56.26 T:riverkeyakv1 58.34 58.64 59.11 T:oceankeyakv2 59.36 59.62 60.14 T:ketjemajorv2 62.89 63.12 63.43 T:proest256otrv1 74.08 74.30 74.62 T:ketjejrv1 86.02 86.34 86.57 T:deoxysneq128128v13 106.32 106.46 106.47 T:present80n6t4silcv3 106.77 107.06 107.56 T:twine80n6clocv1 113.38 113.60 114.46 T:proest128otrv1 116.40 117.06 117.67 T:aezv1 129.29 129.45 130.20 T:deoxysneq256128v13 136.88 139.10 139.93 T:ketjejrv2 144.48 144.70 145.08 T:deoxyseq128128v13 147.54 147.94 148.63 T:lunarkeyakv2 148.15 148.40 148.64 T:seakeyakv1 153.38 155.16 156.25 T:led80n6t4silcv3 216.47 216.86 217.32 T:deoxyseq256128v13 250.36 250.55 250.94 T:oceankeyakv1 418.83 419.96 421.09 aes256gcmv1 2183.88 2217.96 2219.22 T:acorn128v3 2235.55 2236.95 2238.10 T:acorn128 2342.70 2344.20 2345.74 T:acorn128v2 3451.32 3453.69 3455.91 T:present80n6t4silcv2 3469.23 3469.49 3470.02 T:present80n6silcv1 6574.91 6584.01 6598.37 T:led80n6t4silcv2 6609.08 6612.89 6619.67 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.16? 1.41? 1.77? T:aegis128 1.21? 1.48? 1.66? aegis128l 1.73? 1.87? 2.26? T:tiaoxinv2 1.80? 1.87? 2.24? T:aezv3 1.70? 1.88? 2.09? T:aezv5 1.65? 1.90? 2.51? T:tiaoxinv1 1.95? 2.09? 2.44? T:aezv4 1.52? 2.19? 2.41? aegis256 3.37 3.44 3.59 T:aes128otrpv3 3.45 3.46 3.47 T:aes128otrsv3 3.74 3.77 3.80 T:aes256otrpv3 3.89 3.91 3.96 T:aes128n12t8clocv3 3.89? 3.91? 4.70? T:aes128n8t8clocv2 3.90 3.91 3.93 T:aes128n12t8clocv2 4.27 4.31 4.42 T:aes128otrcv3 4.29 4.31 4.35 T:aes256otrsv3 4.29? 4.34? 6.98? T:aeadaes256ocbtaglen128v1 4.27? 4.51? 5.48? T:colm0v1 4.27? 4.54? 6.47? T:aeadaes128ocbtaglen128v1 4.48? 4.62? 5.18? T:morus640128v1 4.64? 4.67? 5.67? T:aes128n12t8silcv3 4.70? 4.76? 5.83? T:aes128n8t8silcv2 4.70? 4.80? 5.82? T:aes128n12t8silcv2 4.41? 4.82? 7.50? T:aeadaes192ocbtaglen128v1 4.82? 5.24? 5.79? T:morus640128v2 5.08? 5.36? 6.05? T:deoxysneq256128v1 5.27 5.41 5.77 T:deoxysneq128128v1 5.35 5.43 5.45 T:aes256otrcv3 5.48 5.52 5.55 T:aes128gcmv1 5.52 5.65 5.80 T:morus1280256v1 5.87 6.02 6.12 T:morus1280256v2 5.92 6.16 6.45 T:deoxysi128v141 6.61 6.63 7.26 T:morus1280128v1 6.57 6.73 7.00 T:morus1280128v2 6.88 6.98 7.04 T:deoxysii128v141 6.98 7.12 7.50 T:deoxysi256v141 7.37 7.39 7.40 T:aesjambuv1 7.98 8.02 8.24 T:deoxyseq128128v1 8.42 8.49 8.58 T:deoxysii256v141 8.81 8.84 8.92 T:deoxyseq256128v1 9.29 9.35 9.43 T:norx6441v1 9.46 9.48 9.58 T:norx3241v1 9.63 9.63 9.82 T:norx6441v3 9.62 9.67 9.73 T:norx3241v3 9.67 9.67 9.73 T:norx3241v2 9.65 9.68 9.71 T:norx6441v2 9.45? 9.93? 10.60? T:ascon128av11 9.80 10.17 10.67 ascon128av12 10.33 10.52 10.80 T:ascon96v1 12.23 12.37 13.07 ascon128v12 12.26 12.49 13.05 T:ascon128v11 12.34 12.76 13.20 T:ascon128v1 13.54 13.79 13.96 T:norx6461v1 13.80 13.97 13.99 T:norx6461v2 14.11 14.12 14.12 T:norx3261v3 14.13 14.16 14.17 T:norx3261v2 14.00 14.19 14.20 T:norx6461v3 16.18 16.19 16.19 T:norx3261v1 16.16 16.30 16.70 T:lakekeyakv1 19.03 19.20 19.66 T:lakekeyakv2 19.16 19.46 19.62 T:riverkeyakv2 20.06 20.12 20.16 T:norx6444v3 23.34 23.40 23.56 T:twine80n6t4clocv3 23.91 24.05 24.82 T:twine80n6t4clocv2 24.36 24.38 24.52 T:aes128otrsv2 24.34 24.41 24.73 T:aes128otrsv1 24.59 24.82 25.19 T:aes128n8clocv1 24.71 24.91 25.22 T:aes128n12clocv1 24.86 24.91 25.09 T:aes128otrpv1 24.88 24.97 25.34 T:aes128otrpv2 27.32 27.45 27.92 T:aes128n12silcv1 27.43 27.46 27.78 T:aes128n8silcv1 30.81 31.11 31.30 T:aes256otrsv1 30.76 31.17 31.50 T:aes256otrsv2 31.42 31.59 31.77 T:aes256otrpv2 31.44 31.59 31.84 T:aes256otrpv1 31.88 32.25 33.20 T:aes256gcmv1 36.46 36.91 37.73 T:seakeyakv2 37.44 37.47 37.57 T:ketjeminorv2 39.24 39.25 39.36 T:norx6444v2 43.94 44.43 44.84 T:norx6444v1 48.88 49.16 49.31 T:ketjesrv1 55.18 55.31 55.49 T:ketjesrv2 56.05 56.28 56.58 T:riverkeyakv1 58.06 58.33 58.48 T:oceankeyakv2 59.27 59.48 59.80 T:ketjemajorv2 63.52 64.00 64.21 T:proest256otrv1 74.98 75.25 75.48 T:ketjejrv1 100.13 100.45 100.59 T:deoxysneq128128v13 106.68 106.73 106.90 T:present80n6t4silcv3 108.01 108.16 108.28 T:twine80n6clocv1 114.09 114.37 115.34 T:proest128otrv1 119.58 119.81 119.96 T:aezv1 139.40 140.84 142.13 T:ketjejrv2 144.68 145.10 145.44 T:deoxyseq128128v13 145.40 145.75 145.99 T:deoxysneq256128v13 147.48 147.63 147.81 T:seakeyakv1 147.53 147.83 148.38 T:lunarkeyakv2 153.28 154.99 155.16 T:led80n6t4silcv3 216.80 217.02 218.59 T:deoxyseq256128v13 249.31 250.03 250.31 T:oceankeyakv1 421.52 422.41 426.34 aes256gcmv1 2168.91 2221.76 2253.71 T:acorn128v3 2237.12 2237.62 2258.30 T:acorn128 2375.27 2381.18 2398.77 T:acorn128v2 3451.49 3451.77 3461.49 T:present80n6t4silcv2 3466.71 3468.84 3469.84 T:present80n6silcv1 6564.36 6580.67 6594.95 T:led80n6t4silcv2 6619.54 6623.80 6625.10 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.13? 1.14? 1.35? T:aegis128 1.25? 1.34? 1.70? aegis128l 1.17? 1.36? 2.28? T:aezv5 1.40 1.43 1.45 T:aezv3 1.48? 1.49? 2.27? T:aezv4 1.52? 1.55? 2.47? aegis256 1.56? 1.68? 2.35? T:tiaoxinv2 1.70? 1.88? 2.62? T:tiaoxinv1 3.37 3.38 3.38 T:aes128otrpv3 3.41 3.42 3.46 T:aes128otrsv3 3.75? 3.76? 4.59? T:aes128n12t8clocv3 3.74 3.77 3.80 T:aes256otrpv3 3.75? 3.77? 4.57? T:aes128n8t8clocv2 3.75? 3.79? 4.59? T:aes128n12t8clocv2 4.17 4.22 4.25 T:morus640128v1 4.15 4.23 4.35 T:aeadaes128ocbtaglen128v1 4.26 4.27 4.29 T:aes128otrcv3 4.29 4.30 4.33 T:aes256otrsv3 4.30 4.34 4.45 T:aeadaes256ocbtaglen128v1 4.38? 4.45? 7.39? T:aeadaes192ocbtaglen128v1 4.55? 4.56? 5.48? T:aes128n12t8silcv3 4.64? 4.66? 5.76? T:aes128n12t8silcv2 4.66 4.68 4.70 T:aes128n8t8silcv2 4.73 4.77 4.79 T:morus640128v2 4.70? 4.78? 5.47? T:colm0v1 5.01 5.02 5.09 T:deoxysneq256128v1 5.23? 5.37? 5.93? T:deoxysneq128128v1 5.31 5.38 5.43 T:aes256otrcv3 5.47 5.51 5.60 T:morus1280256v1 5.50 5.52 5.59 T:aes128gcmv1 5.84 5.87 6.02 T:morus1280256v2 5.90 5.98 6.17 T:deoxysi128v141 6.38 6.45 6.47 T:morus1280128v2 6.54 6.55 6.60 T:morus1280128v1 6.88 6.95 6.99 T:deoxysii128v141 6.98 7.04 7.08 T:deoxysi256v141 7.36 7.37 7.37 T:aesjambuv1 7.90 7.91 8.63 T:deoxyseq128128v1 8.26 8.48 8.52 T:deoxysii256v141 8.88 8.93 9.61 T:deoxyseq256128v1 9.34 9.34 9.55 T:norx6441v1 9.48 9.52 9.55 T:norx3241v1 9.55 9.60 9.66 T:norx6441v2 9.61 9.62 9.70 T:norx3241v3 9.66 9.68 9.75 T:norx6441v3 9.65 9.70 9.76 T:norx3241v2 9.59 9.95 10.31 T:ascon128av11 9.66 9.95 10.11 ascon128av12 9.80 10.02 10.25 T:ascon96v1 12.29 12.29 12.76 T:ascon128v11 12.20 12.40 12.91 T:ascon128v1 12.54 12.56 12.77 ascon128v12 13.62 13.91 13.93 T:norx6461v1 13.80 13.97 14.01 T:norx6461v2 14.00 14.05 14.07 T:norx6461v3 14.05 14.05 14.12 T:norx3261v3 14.12 14.12 14.16 T:norx3261v2 16.13 16.15 16.17 T:norx3261v1 16.27 16.31 16.53 T:lakekeyakv1 19.14 19.14 19.41 T:lakekeyakv2 19.20 19.41 19.77 T:riverkeyakv2 20.07 20.14 20.17 T:norx6444v3 23.29 23.45 23.88 T:twine80n6t4clocv3 24.00 24.05 26.31 T:twine80n6t4clocv2 24.13 24.35 24.62 T:aes128n8clocv1 24.49 24.50 24.75 T:aes128n12clocv1 24.52 24.63 24.80 T:aes128otrsv2 24.63 24.74 25.07 T:aes128otrsv1 24.90 24.97 25.08 T:aes128otrpv1 24.93 25.00 25.24 T:aes128otrpv2 27.27 27.30 27.43 T:aes128n12silcv1 27.38 27.40 27.73 T:aes128n8silcv1 30.90 31.05 31.26 T:aes256otrsv2 30.99 31.07 31.20 T:aes256otrsv1 31.25 31.42 31.62 T:aes256otrpv2 31.37 31.43 31.62 T:aes256otrpv1 31.95 32.03 32.71 T:aes256gcmv1 36.62 36.77 37.09 T:seakeyakv2 37.34 37.57 37.73 T:ketjeminorv2 39.32 39.32 39.44 T:norx6444v2 44.12 44.19 44.39 T:norx6444v1 49.03 49.12 49.34 T:ketjesrv1 54.17 54.90 55.45 T:ketjesrv2 56.31 56.52 57.02 T:riverkeyakv1 58.12 58.18 58.33 T:oceankeyakv2 59.37 59.54 60.05 T:ketjemajorv2 61.48 61.69 61.83 T:proest256otrv1 74.80 75.10 75.28 T:ketjejrv1 100.18 100.45 100.76 T:deoxysneq128128v13 106.66 106.74 106.86 T:present80n6t4silcv3 107.96 108.10 108.32 T:twine80n6clocv1 113.50 113.65 114.02 T:proest128otrv1 118.85 119.05 119.70 T:aezv1 139.84 140.41 142.38 T:ketjejrv2 144.23 144.52 144.73 T:deoxyseq128128v13 145.38 145.64 145.90 T:deoxysneq256128v13 147.43 147.71 148.07 T:lunarkeyakv2 147.80 147.88 148.12 T:seakeyakv1 153.51 154.94 155.09 T:led80n6t4silcv3 216.72 216.87 217.40 T:deoxyseq256128v13 250.01 250.17 250.59 T:oceankeyakv1 417.75 422.31 424.59 aes256gcmv1 2182.92 2210.21 2250.16 T:acorn128v3 2234.29 2240.25 2244.00 T:acorn128 2365.06 2370.28 2375.88 T:acorn128v2 3451.13 3451.60 3452.58 T:present80n6t4silcv2 3468.70 3469.11 3469.30 T:present80n6silcv1 6565.82 6575.16 6587.78 T:led80n6t4silcv2 6626.04 6628.26 6630.36 T:led80n6silcv1