VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20250922

[Page version: 20251103 11:56:53]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.19? 0.21? 0.24? T:tiaoxinv2 0.19? 0.22? 0.24? T:tiaoxinv1 0.22 0.23 0.24 aegis128l 0.19? 0.23? 0.24? T:aegis128l 0.33? 0.36? 0.37? T:aegis128 0.37 0.38 0.39 aegis256 0.44 0.45 0.47 T:aeadaes128ocbtaglen128v1 0.46 0.47 0.48 T:aezv3 0.46 0.48 0.49 T:aezv4 0.51 0.52 0.53 T:aes128otrpv3 0.51 0.52 0.53 T:aezv5 0.52 0.52 0.53 T:aes128otrsv3 0.31? 0.52? 0.77? T:aeadaes192ocbtaglen128v1 0.52 0.52 0.53 T:aes128otrcv3 0.54 0.59 0.59 T:aeadaes256ocbtaglen128v1 0.66 0.67 0.67 T:aes256otrpv3 0.67 0.67 0.68 T:aes256otrcv3 0.67 0.67 0.68 T:aes256otrsv3 0.77 0.78 0.82 T:deoxysneq128128v1 0.81 0.81 0.83 T:deoxysi128v141 0.86 0.88 0.88 T:deoxysneq256128v1 0.86 0.89 0.90 T:morus1280128v1 0.89 0.90 0.92 T:deoxysi256v141 0.90 0.93 0.94 T:morus1280128v2 0.92 0.93 0.94 T:morus1280256v1 0.95 0.97 0.98 T:morus1280256v2 0.99 1.01 1.04 T:morus640128v2 0.99 1.01 1.03 T:morus640128v1 1.54 1.54 1.55 T:aes128gcmv1 1.55 1.57 1.59 T:colm0v1 1.59 1.61 1.72 T:deoxyseq128128v1 1.59 1.62 1.64 T:deoxysii128v141 1.71 1.72 1.73 T:deoxyseq256128v1 1.74 1.77 1.78 aes256gcmv1 1.77 1.80 1.82 T:deoxysii256v141 2.12 2.14 2.18 T:norx6444v3 2.32 2.33 2.34 T:norx6441v2 2.31 2.34 2.36 T:norx6441v3 2.34 2.40 2.45 T:lunarkeyakv2 2.72 2.72 2.73 T:aes128n12t8silcv2 2.77 2.78 2.78 T:aes128n12t8silcv3 2.72 2.78 2.78 T:aes128n8t8silcv2 2.78 2.78 2.79 T:aes128n8t8clocv2 2.78 2.78 2.78 T:aes128n12t8clocv3 2.78 2.78 2.78 T:aes128n12t8clocv2 2.85 2.85 2.86 T:norx6441v1 3.09 3.14 3.20 T:seakeyakv2 3.10? 3.23? 3.56? T:oceankeyakv2 3.42 3.44 3.46 T:norx3241v2 3.43 3.46 3.50 T:norx3241v3 3.43 3.48 3.50 T:norx6461v2 3.46 3.49 3.50 T:norx6461v3 3.78 3.81 3.84 T:norx6444v2 4.10 4.13 4.18 T:norx3241v1 4.11 4.15 4.17 T:lakekeyakv1 4.22 4.23 4.28 T:norx6461v1 4.38 4.41 4.44 T:norx6444v1 4.41 4.44 4.48 T:lakekeyakv2 5.12 5.16 5.22 T:norx3261v3 5.10 5.19 5.21 T:norx3261v2 5.25 5.31 5.33 T:aesjambuv1 5.88 5.90 5.94 T:acorn128v3 5.90 5.92 5.93 T:ascon96v1 5.97 5.99 6.01 T:ascon128av11 5.96 6.00 6.05 T:acorn128v2 6.57 6.60 6.61 ascon128av12 7.28 7.29 7.30 T:norx3261v1 8.68 8.75 8.78 T:ascon128v1 8.75 8.76 8.77 T:ascon128v11 8.83 8.91 9.03 T:ketjemajorv2 9.01 9.02 9.03 ascon128v12 9.67 9.73 9.76 T:riverkeyakv2 12.37 12.37 12.38 T:ketjeminorv2 14.56 14.56 14.56 T:twine80n6t4clocv3 14.84 14.90 15.00 T:seakeyakv1 14.94 14.97 15.00 T:oceankeyakv1 15.07 15.10 15.14 T:aes128otrpv2 15.09 15.11 15.17 T:aes128otrsv1 15.10 15.13 15.15 T:aes128otrpv1 15.10 15.19 15.21 T:aes128otrsv2 15.40 15.49 15.50 T:twine80n6t4clocv2 18.62 18.71 18.73 T:aes256otrsv2 18.70 18.72 18.78 T:aes256otrpv2 18.64 18.73 18.81 T:aes256otrsv1 18.68 18.73 18.76 T:aes256otrpv1 19.01 19.06 19.09 T:proest256otrv1 22.43 22.46 22.47 T:aes128n12clocv1 22.47 22.50 22.83 T:aes128n8clocv1 25.25 25.27 25.28 T:aeadaes128ocbtaglen64v1 25.24 25.31 25.32 T:aeadaes128ocbtaglen96v1 25.30 25.31 25.32 T:aes128n12silcv1 25.29 25.31 25.32 T:aes128n8silcv1 29.45 29.50 29.64 T:aeadaes192ocbtaglen64v1 29.47 29.56 29.59 T:aeadaes192ocbtaglen96v1 30.04? 31.42? 36.97? T:ketjesrv1 31.56 31.87 32.35 T:riverkeyakv1 31.84 32.02 32.65 T:ketjesrv2 33.61 33.65 33.69 T:aeadaes256ocbtaglen96v1 33.79 33.88 33.92 T:aeadaes256ocbtaglen64v1 54.49 54.78 54.94 T:proest128otrv1 56.95 56.99 57.12 T:ketjejrv1 61.56 61.65 61.73 T:colm127v1 71.31 71.34 71.40 T:present80n6t4silcv3 75.39 75.42 75.58 T:deoxysneq128128v13 101.37 102.99 105.73 T:ketjejrv2 113.82 115.13 119.95 T:deoxysneq256128v13 121.82 123.98 125.35 T:led80n6t4silcv3 124.47 124.64 124.71 T:twine80n6clocv1 153.47 153.56 153.66 T:deoxyseq128128v13 171.27 171.44 171.59 T:aezv1 230.41 231.35 231.46 T:deoxyseq256128v13 513.23? 567.32? 799.97? T:acorn128 4086.24 4086.62 4087.99 T:present80n6t4silcv2 4109.26 4109.59 4109.67 T:present80n6silcv1 7823.65 7829.35 7832.74 T:led80n6t4silcv2 7848.84 7873.15 7910.23 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.23? 0.25? 0.26? aegis128l 0.22? 0.25? 0.26? T:aegis128l 0.31 0.33 0.34 T:tiaoxinv1 0.34? 0.35? 0.39? T:tiaoxinv2 0.33? 0.36? 0.38? T:aegis128 0.36? 0.39? 0.40? aegis256 0.46 0.46 0.47 T:aezv3 0.46 0.47 0.49 T:aezv4 0.45 0.47 0.49 T:aeadaes128ocbtaglen128v1 0.29? 0.51? 0.74? T:aeadaes192ocbtaglen128v1 0.51 0.52 0.53 T:aezv5 0.52 0.52 0.53 T:aes128otrsv3 0.52 0.53 0.53 T:aes128otrcv3 0.52 0.53 0.56 T:aes128otrpv3 0.58 0.61 0.62 T:aeadaes256ocbtaglen128v1 0.65 0.66 0.66 T:aes256otrcv3 0.65 0.66 0.67 T:aes256otrpv3 0.66 0.66 0.67 T:aes256otrsv3 0.79 0.81 0.81 T:morus1280256v2 0.79 0.81 0.82 T:morus1280256v1 0.83 0.85 0.86 T:deoxysi128v141 0.83 0.86 0.89 T:deoxysneq128128v1 0.88 0.90 0.92 T:morus1280128v1 0.90 0.92 0.93 T:morus1280128v2 0.91 0.94 0.96 T:deoxysneq256128v1 0.93? 0.98? 1.48? T:deoxysi256v141 1.03 1.04 1.05 T:morus640128v2 1.00 1.04 1.05 T:morus640128v1 1.53 1.56 1.61 T:colm0v1 1.56 1.59 1.60 T:deoxysii128v141 1.58 1.67 1.68 T:deoxyseq128128v1 1.70 1.72 1.74 T:aes128gcmv1 1.74 1.75 1.77 aes256gcmv1 1.72 1.77 1.84 T:deoxyseq256128v1 1.78 1.79 1.81 T:deoxysii256v141 2.12 2.14 2.15 T:norx6444v3 2.33 2.35 2.39 T:norx6441v2 2.34 2.40 2.44 T:norx6441v3 2.43 2.51 2.55 T:lunarkeyakv2 2.62 2.62 2.63 T:aes128n12t8silcv2 2.57 2.62 2.63 T:aes128n8t8clocv2 2.62 2.62 2.63 T:aes128n12t8clocv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n12t8clocv3 2.56 2.63 2.63 T:aes128n8t8silcv2 2.78 2.80 2.80 T:norx6441v1 3.26 3.30 3.34 T:seakeyakv2 3.22? 3.44? 3.67? T:oceankeyakv2 3.46 3.48 3.50 T:norx6461v2 3.49 3.49 3.50 T:norx3241v3 3.46 3.50 3.57 T:norx6461v3 3.54 3.54 3.55 T:norx3241v2 3.78 3.81 3.85 T:norx6444v2 4.14 4.19 4.25 T:lakekeyakv1 4.21 4.22 4.23 T:norx6461v1 4.22 4.24 4.25 T:norx3241v1 4.39 4.41 4.44 T:norx6444v1 4.41 4.45 4.50 T:lakekeyakv2 5.18 5.18 5.19 T:norx3261v3 5.21 5.21 5.21 T:norx3261v2 5.68 5.69 5.69 T:aesjambuv1 5.85 5.92 5.94 T:ascon96v1 6.00 6.01 6.04 T:acorn128v2 5.99 6.02 6.05 T:acorn128v3 6.05 6.06 6.07 ascon128av12 6.03 6.08 6.11 T:ascon128av11 7.11 7.12 7.14 T:norx3261v1 8.22 8.30 8.34 T:ketjemajorv2 8.98 8.98 8.98 T:ascon128v1 8.98 8.98 8.99 T:ascon128v11 9.09 9.10 9.11 ascon128v12 9.73 9.75 9.77 T:ketjeminorv2 10.10 10.12 10.16 T:riverkeyakv2 14.53 14.53 14.57 T:twine80n6t4clocv3 15.00 15.11 15.20 T:seakeyakv1 15.09 15.17 15.24 T:oceankeyakv1 15.28 15.29 15.41 T:aes128otrpv2 15.37 15.40 15.43 T:aes128otrpv1 15.37 15.40 15.44 T:twine80n6t4clocv2 15.29 15.40 15.46 T:aes128otrsv2 15.27 15.42 15.45 T:aes128otrsv1 18.97 19.01 19.17 T:aes256otrpv1 18.99 19.04 19.15 T:aes256otrsv2 18.99 19.08 19.18 T:aes256otrsv1 18.96 19.09 19.16 T:aes256otrpv2 19.36 19.41 19.51 T:proest256otrv1 23.68 23.72 23.78 T:aes128n8clocv1 23.77 23.78 23.80 T:aes128n12clocv1 25.45 25.47 25.49 T:aes128n12silcv1 25.45 25.48 25.50 T:aes128n8silcv1 31.73 32.04 32.54 T:riverkeyakv1 33.22 33.26 33.39 T:aeadaes128ocbtaglen64v1 33.17 33.33 33.35 T:aeadaes128ocbtaglen96v1 32.07? 34.18? 38.74? T:ketjesrv1 38.97 38.99 39.26 T:ketjesrv2 39.44 39.48 39.55 T:aeadaes192ocbtaglen96v1 39.49 39.57 39.61 T:aeadaes192ocbtaglen64v1 45.44 45.51 45.71 T:aeadaes256ocbtaglen64v1 44.60? 45.55? 59.05? T:aeadaes256ocbtaglen96v1 54.57 54.64 54.78 T:proest128otrv1 58.58 58.74 58.80 T:ketjejrv1 71.35 71.43 71.45 T:present80n6t4silcv3 75.07 75.38 75.68 T:colm127v1 103.89 104.02 104.18 T:deoxysneq128128v13 106.05 107.16 108.54 T:ketjejrv2 121.71 123.75 124.14 T:led80n6t4silcv3 123.69 123.75 123.78 T:twine80n6clocv1 145.32 147.15 155.04 T:deoxysneq256128v13 153.42 153.45 153.51 T:deoxyseq128128v13 171.31 171.53 171.83 T:aezv1 231.42 231.93 232.16 T:deoxyseq256128v13 521.04? 567.70? 795.80? T:acorn128 4087.17 4087.85 4088.68 T:present80n6t4silcv2 4105.41 4107.77 4108.02 T:present80n6silcv1 7834.39 7836.23 7839.56 T:led80n6t4silcv2 7898.08 7900.62 7916.29 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.16? 0.18? 0.20? T:aezv4 0.18? 0.19? 0.20? T:aezv3 0.16? 0.21? 0.21? T:aezv5 0.23? 0.25? 0.26? T:aegis128l 0.25 0.25 0.26 aegis128l 0.29? 0.33? 0.34? T:tiaoxinv1 0.31? 0.35? 0.35? T:tiaoxinv2 0.33? 0.35? 0.37? T:aegis128 0.46 0.47 0.49 T:aeadaes128ocbtaglen128v1 0.43? 0.49? 0.50? aegis256 0.34? 0.51? 0.72? T:aeadaes192ocbtaglen128v1 0.52 0.53 0.53 T:aes128otrsv3 0.52 0.53 0.53 T:aes128otrcv3 0.52 0.53 0.56 T:aes128otrpv3 0.60 0.60 0.61 T:aeadaes256ocbtaglen128v1 0.65 0.66 0.66 T:aes256otrcv3 0.65 0.66 0.67 T:aes256otrpv3 0.66 0.66 0.67 T:aes256otrsv3 0.79 0.81 0.82 T:morus1280256v1 0.76 0.81 0.83 T:deoxysneq128128v1 0.81 0.81 0.82 T:morus1280256v2 0.82 0.84 0.89 T:deoxysi128v141 0.90 0.91 0.92 T:morus1280128v1 0.94 0.94 0.95 T:morus1280128v2 0.93 0.95 0.97 T:deoxysneq256128v1 0.92? 0.97? 1.48? T:deoxysi256v141 1.05 1.05 1.07 T:morus640128v2 1.04 1.05 1.07 T:morus640128v1 1.49 1.55 1.60 T:colm0v1 1.60 1.61 1.62 T:deoxysii128v141 1.59 1.62 1.64 T:deoxyseq128128v1 1.69 1.71 1.73 T:aes128gcmv1 1.74 1.75 1.76 aes256gcmv1 1.75 1.75 1.76 T:deoxysii256v141 1.77 1.83 1.84 T:deoxyseq256128v1 2.12 2.13 2.14 T:norx6444v3 2.34 2.34 2.38 T:norx6441v2 2.34 2.38 2.38 T:norx6441v3 2.47 2.55 2.59 T:lunarkeyakv2 2.57 2.62 2.63 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128n12t8silcv2 2.57 2.63 2.63 T:aes128n8t8clocv2 2.62 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n8t8silcv2 2.80 2.82 2.82 T:norx6441v1 3.35 3.37 3.37 T:seakeyakv2 3.48 3.48 3.50 T:norx6461v2 3.49 3.49 3.50 T:norx3241v3 3.31? 3.50? 3.72? T:oceankeyakv2 3.54 3.54 3.55 T:norx3241v2 3.46 3.58 3.59 T:norx6461v3 3.85 3.89 3.91 T:norx6444v2 4.18 4.20 4.21 T:norx6461v1 4.23 4.24 4.26 T:lakekeyakv1 4.24 4.25 4.26 T:norx3241v1 4.47 4.49 4.50 T:norx6444v1 4.50 4.50 4.52 T:lakekeyakv2 5.18 5.18 5.19 T:norx3261v3 5.20 5.21 5.21 T:norx3261v2 5.68 5.75 5.81 T:aesjambuv1 5.71 5.91 5.94 T:ascon96v1 5.99 6.00 6.01 T:acorn128v2 5.97 6.01 6.05 T:acorn128v3 6.02 6.06 6.08 T:ascon128av11 6.05 6.07 6.08 ascon128av12 7.11 7.12 7.14 T:norx3261v1 8.32 8.37 8.42 T:ketjemajorv2 8.95 8.97 9.00 T:ascon128v1 8.97 8.97 8.98 T:ascon128v11 9.06 9.08 9.13 ascon128v12 9.68 9.80 9.83 T:ketjeminorv2 10.17 10.18 10.20 T:riverkeyakv2 14.53 14.53 14.56 T:twine80n6t4clocv3 15.17 15.23 15.28 T:oceankeyakv1 15.08 15.26 15.38 T:seakeyakv1 15.34 15.37 15.47 T:aes128otrpv2 15.32 15.39 15.45 T:twine80n6t4clocv2 15.35 15.47 15.53 T:aes128otrsv1 15.36 15.48 15.55 T:aes128otrsv2 15.34 15.49 15.51 T:aes128otrpv1 19.00 19.02 19.14 T:aes256otrpv1 19.02 19.09 19.16 T:aes256otrpv2 19.07 19.11 19.14 T:aes256otrsv1 19.03 19.16 19.21 T:aes256otrsv2 19.38 19.41 19.45 T:proest256otrv1 23.71 23.74 23.79 T:aes128n8clocv1 23.76 23.78 23.80 T:aes128n12clocv1 25.43 25.48 25.51 T:aes128n8silcv1 25.46 25.48 25.51 T:aes128n12silcv1 31.62 31.90 32.54 T:riverkeyakv1 33.18 33.22 33.48 T:aeadaes128ocbtaglen96v1 33.24 33.28 33.30 T:aeadaes128ocbtaglen64v1 32.11? 34.17? 38.80? T:ketjesrv1 35.55 35.57 39.29 T:ketjesrv2 39.39 39.46 39.50 T:aeadaes192ocbtaglen64v1 39.38 39.46 39.68 T:aeadaes192ocbtaglen96v1 45.43 45.47 45.60 T:aeadaes256ocbtaglen64v1 44.65? 45.59? 59.04? T:aeadaes256ocbtaglen96v1 54.56 54.76 55.30 T:proest128otrv1 57.85 58.84 58.95 T:ketjejrv1 71.31 71.33 71.40 T:present80n6t4silcv3 74.52 74.55 74.76 T:colm127v1 103.77 104.06 104.28 T:deoxysneq128128v13 106.70 106.88 107.30 T:ketjejrv2 121.76 121.86 123.92 T:led80n6t4silcv3 123.68 123.76 123.90 T:twine80n6clocv1 145.61 147.28 155.15 T:deoxysneq256128v13 153.47 153.60 153.73 T:deoxyseq128128v13 171.47 171.59 171.69 T:aezv1 230.52 231.38 232.36 T:deoxyseq256128v13 507.58? 571.85? 803.17? T:acorn128 4087.17 4087.89 4088.73 T:present80n6t4silcv2 4105.17 4107.35 4113.89 T:present80n6silcv1 7832.06 7838.45 7839.82 T:led80n6t4silcv2 7887.08 7900.27 7915.70 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.15? 0.17? 0.19? T:tiaoxinv2 0.15? 0.17? 0.19? T:tiaoxinv1 0.17? 0.18? 0.20? aegis128l 0.17? 0.19? 0.21? T:aegis128l 0.31? 0.32? 0.35? T:aezv3 0.31 0.33 0.34 T:aezv4 0.31 0.33 0.34 T:aegis128 0.33? 0.35? 0.37? T:aezv5 0.34 0.36 0.37 aegis256 0.42? 0.45? 0.47? T:aeadaes128ocbtaglen128v1 0.40? 0.48? 0.58? T:aeadaes192ocbtaglen128v1 0.50 0.51 0.52 T:aes128otrpv3 0.52 0.53 0.53 T:aes128otrcv3 0.63 0.64 0.65 T:aes256otrpv3 0.66 0.67 0.67 T:aes256otrcv3 0.63 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.75 0.78 0.80 T:deoxysneq128128v1 0.77 0.78 0.82 T:deoxysi128v141 0.84 0.85 0.87 T:morus1280128v1 0.83? 0.88? 1.10? T:deoxysneq256128v1 0.87 0.88 0.89 T:morus1280128v2 0.86 0.90 0.93 T:deoxysi256v141 0.93 0.93 0.94 T:morus1280256v1 0.93 0.94 0.95 T:morus1280256v2 0.97 1.00 1.01 T:morus640128v2 0.98 1.00 1.02 T:morus640128v1 1.04 1.04 1.04 T:aes128gcmv1 1.08 1.12 1.14 T:colm0v1 1.14 1.15 1.16 aes256gcmv1 1.15 1.18 1.21 T:deoxysii128v141 1.20 1.22 1.25 T:deoxyseq128128v1 1.27 1.32 1.33 T:deoxyseq256128v1 1.30 1.33 1.36 T:deoxysii256v141 1.57 1.57 1.58 T:aes128otrsv3 2.14 2.15 2.15 T:aes256otrsv3 2.23 2.28 2.30 T:norx6444v3 2.32 2.34 2.36 T:norx6441v3 2.33 2.34 2.36 T:norx6441v2 2.67 2.67 2.67 T:aes128n8t8clocv2 2.67 2.67 2.70 T:aes128n8t8silcv2 2.65 2.68 2.70 T:seakeyakv2 2.69 2.69 2.69 T:aes128n12t8silcv2 2.67 2.69 2.70 T:aes128n12t8silcv3 2.67 2.70 2.70 T:aes128n12t8clocv2 2.67 2.70 2.71 T:aes128n12t8clocv3 2.72 2.80 2.91 T:oceankeyakv2 2.82 2.84 2.86 T:norx6441v1 3.34 3.37 3.39 T:lunarkeyakv2 3.43 3.44 3.48 T:norx3241v2 3.41 3.47 3.48 T:norx3241v3 3.46 3.48 3.51 T:norx6461v2 3.48 3.49 3.50 T:norx6461v3 3.75 3.77 3.78 T:norx6444v2 3.89 3.91 3.95 T:lakekeyakv1 3.90 3.97 4.24 T:lakekeyakv2 4.13 4.15 4.16 T:norx3241v1 4.22 4.26 4.30 T:norx6461v1 4.34 4.35 4.35 T:norx6444v1 5.13 5.14 5.20 T:norx3261v3 5.13 5.14 5.18 T:norx3261v2 5.34 5.36 5.39 T:aesjambuv1 5.84 5.88 5.90 T:acorn128v3 5.88 5.92 5.95 T:acorn128v2 5.91 5.96 5.96 T:ascon96v1 6.01 6.02 6.08 T:ascon128av11 6.28 6.29 6.30 ascon128av12 6.95 6.97 7.01 T:riverkeyakv2 7.26 7.27 7.30 T:norx3261v1 7.42 7.48 7.51 T:ketjemajorv2 8.84 8.85 8.86 T:ascon128v11 8.84 8.85 8.86 T:ascon128v1 8.99 9.00 9.01 ascon128v12 9.98 9.99 9.99 T:ketjeminorv2 13.62 13.64 13.68 T:aes128otrsv2 13.64 13.66 13.68 T:aes128otrsv1 14.10 14.12 14.15 T:aes128otrpv2 14.08 14.12 14.25 T:aes128otrpv1 14.36 14.37 14.41 T:twine80n6t4clocv3 14.89 14.93 14.96 T:oceankeyakv1 14.92 14.95 14.98 T:seakeyakv1 15.07 15.09 15.13 T:twine80n6t4clocv2 16.92 16.93 16.94 T:aes128n12clocv1 16.97 16.97 16.98 T:aes128n8clocv1 17.25 17.29 17.32 T:aes256otrsv1 17.28 17.31 17.33 T:aes256otrsv2 17.76 17.80 17.85 T:aes256otrpv2 17.77 17.81 17.83 T:aes256otrpv1 18.93 18.96 18.98 T:aes128n8silcv1 18.95 18.97 18.98 T:aes128n12silcv1 19.36 19.39 19.47 T:proest256otrv1 24.35 24.39 24.47 T:aeadaes128ocbtaglen96v1 24.31 24.41 24.45 T:aeadaes128ocbtaglen64v1 28.65 28.77 29.16 T:ketjesrv2 28.74 28.80 28.90 T:aeadaes192ocbtaglen64v1 28.74 28.86 28.96 T:aeadaes192ocbtaglen96v1 29.50 29.80 31.79 T:riverkeyakv1 30.40? 30.98? 34.78? T:ketjesrv1 32.91 33.00 33.77 T:aeadaes256ocbtaglen96v1 33.04 33.11 33.14 T:aeadaes256ocbtaglen64v1 44.06 44.11 44.12 T:colm127v1 54.51 54.60 54.70 T:ketjejrv1 54.77 55.27 55.48 T:proest128otrv1 70.64 70.77 70.77 T:present80n6t4silcv3 75.58 75.68 75.77 T:deoxysneq128128v13 93.52 93.57 93.80 T:twine80n6clocv1 100.38 101.06 101.73 T:ketjejrv2 113.33 113.41 113.46 T:aezv1 113.81 114.58 119.66 T:deoxysneq256128v13 114.80 114.81 114.86 T:deoxyseq128128v13 121.92 122.27 123.33 T:led80n6t4silcv3 172.03 173.14 173.23 T:deoxyseq256128v13 538.73? 576.60? 809.70? T:acorn128 3064.82 3065.92 3068.78 T:present80n6t4silcv2 3080.82 3080.88 3081.67 T:present80n6silcv1 5868.23 5870.53 5873.45 T:led80n6t4silcv2 5884.89 5893.01 5901.61 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.19 0.20 0.21 aegis128l 0.19? 0.21? 0.22? T:aegis128l 0.19? 0.21? 0.26? T:tiaoxinv1 0.22? 0.24? 0.25? T:tiaoxinv2 0.30? 0.32? 0.34? T:aezv4 0.30? 0.32? 0.35? T:aezv3 0.33? 0.34? 0.37? T:aegis128 0.33 0.35 0.36 T:aezv5 0.33? 0.35? 0.37? aegis256 0.43 0.45 0.47 T:aeadaes128ocbtaglen128v1 0.39? 0.47? 0.57? T:aeadaes192ocbtaglen128v1 0.50 0.51 0.52 T:aes128otrpv3 0.52 0.52 0.53 T:aes128otrcv3 0.63 0.64 0.64 T:aes256otrpv3 0.65 0.66 0.66 T:aes256otrcv3 0.65 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.75 0.76 0.76 T:morus1280256v1 0.75 0.77 0.77 T:morus1280256v2 0.75 0.78 0.79 T:deoxysneq128128v1 0.80 0.81 0.83 T:deoxysi128v141 0.84? 0.84? 1.16? T:morus1280128v1 0.86 0.88 0.89 T:morus1280128v2 0.85 0.88 0.89 T:deoxysneq256128v1 0.87? 0.92? 1.16? T:deoxysi256v141 1.02 1.02 1.03 T:morus640128v2 1.02 1.03 1.03 T:morus640128v1 1.06 1.10 1.13 T:colm0v1 1.10 1.11 1.12 T:aes128gcmv1 1.14 1.14 1.15 aes256gcmv1 1.15 1.19 1.22 T:deoxysii128v141 1.22 1.26 1.27 T:deoxyseq128128v1 1.30 1.31 1.34 T:deoxysii256v141 1.28 1.34 1.37 T:deoxyseq256128v1 1.57 1.58 1.58 T:aes128otrsv3 2.14 2.14 2.15 T:aes256otrsv3 2.25 2.27 2.30 T:norx6444v3 2.35 2.36 2.36 T:norx6441v2 2.35 2.36 2.41 T:norx6441v3 2.62 2.62 2.63 T:aes128n12t8silcv2 2.60 2.62 2.63 T:aes128n8t8clocv2 2.62 2.63 2.63 T:aes128n12t8clocv2 2.60 2.63 2.63 T:aes128n12t8clocv3 2.59 2.63 2.63 T:aes128n12t8silcv3 2.62 2.63 2.63 T:aes128n8t8silcv2 2.71 2.75 2.77 T:seakeyakv2 2.78 2.80 2.81 T:norx6441v1 2.79 2.89 2.95 T:oceankeyakv2 3.38 3.41 3.45 T:lunarkeyakv2 3.46 3.47 3.50 T:norx3241v3 3.48 3.49 3.50 T:norx6461v2 3.47 3.49 3.53 T:norx3241v2 3.47 3.51 3.54 T:norx6461v3 3.74 3.76 3.78 T:norx6444v2 3.92 3.94 3.98 T:lakekeyakv1 3.92 3.98 4.22 T:lakekeyakv2 4.15 4.18 4.21 T:norx3241v1 4.18 4.19 4.21 T:norx6461v1 4.33 4.35 4.36 T:norx6444v1 5.14 5.18 5.19 T:norx3261v3 5.18 5.19 5.22 T:norx3261v2 5.64 5.66 5.66 T:aesjambuv1 5.80? 5.82? 9.21? T:acorn128v2 5.92 5.93 5.94 T:acorn128v3 5.95 5.96 5.97 T:ascon96v1 5.95 5.99 6.00 T:ascon128av11 5.97 6.00 6.01 ascon128av12 6.85 6.89 6.94 T:riverkeyakv2 7.10 7.14 7.19 T:ketjemajorv2 7.20 7.21 7.21 T:norx3261v1 8.92 8.92 8.93 T:ascon128v11 8.92 8.93 8.94 T:ascon128v1 8.92 8.93 8.95 ascon128v12 9.36 9.37 9.38 T:ketjeminorv2 13.72 13.76 13.80 T:aes128otrsv2 13.75 13.79 13.82 T:aes128otrsv1 14.19 14.22 14.27 T:aes128otrpv2 14.19 14.28 14.30 T:aes128otrpv1 14.32 14.32 14.33 T:twine80n6t4clocv3 14.97 15.03 15.10 T:oceankeyakv1 14.85 15.08 15.12 T:seakeyakv1 15.05 15.08 15.10 T:twine80n6t4clocv2 17.41 17.42 17.46 T:aes256otrsv1 17.44 17.48 17.50 T:aes256otrsv2 17.57 17.58 17.59 T:aes128n12clocv1 17.58 17.62 17.65 T:aes128n8clocv1 17.92 17.96 17.99 T:aes256otrpv1 17.92 17.96 18.11 T:aes256otrpv2 19.05 19.05 19.05 T:aes128n12silcv1 19.03 19.05 19.06 T:aes128n8silcv1 19.53 19.55 19.65 T:proest256otrv1 28.38 28.39 28.41 T:aeadaes128ocbtaglen64v1 28.39 28.41 28.47 T:aeadaes128ocbtaglen96v1 29.47 29.80 32.07 T:riverkeyakv1 30.36? 30.98? 35.48? T:ketjesrv1 30.57 32.17 32.33 T:ketjesrv2 33.74 33.81 33.86 T:aeadaes192ocbtaglen64v1 33.81 33.82 33.85 T:aeadaes192ocbtaglen96v1 38.90 38.94 38.98 T:aeadaes256ocbtaglen64v1 38.18? 39.48? 45.63? T:aeadaes256ocbtaglen96v1 51.02 51.05 51.19 T:colm127v1 54.76 55.00 55.48 T:proest128otrv1 55.31 55.48 55.61 T:ketjejrv1 70.60 70.69 70.73 T:present80n6t4silcv3 89.92 90.02 90.09 T:deoxysneq128128v13 93.18 93.26 93.34 T:twine80n6clocv1 101.58 102.58 103.31 T:ketjejrv2 113.29 113.36 113.52 T:aezv1 114.89 114.98 115.07 T:deoxyseq128128v13 121.85 122.23 122.99 T:led80n6t4silcv3 130.38 133.19 135.05 T:deoxysneq256128v13 172.78 173.58 174.61 T:deoxyseq256128v13 552.14? 586.03? 775.65? T:acorn128 3065.41 3066.37 3069.60 T:present80n6t4silcv2 3080.90 3081.52 3083.98 T:present80n6silcv1 5875.43 5881.46 5887.98 T:led80n6t4silcv2 5906.78 5908.54 5910.44 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.14? 0.16? 0.20? T:aezv4 0.17? 0.18? 0.22? T:aezv3 0.18? 0.19? 0.22? T:aezv5 0.20 0.20 0.21 aegis128l 0.20 0.21 0.22 T:aegis128l 0.21? 0.23? 0.25? T:tiaoxinv1 0.23? 0.24? 0.26? T:tiaoxinv2 0.33? 0.34? 0.37? T:aegis128 0.36? 0.40? 0.40? aegis256 0.45 0.46 0.47 T:aeadaes128ocbtaglen128v1 0.48 0.49 0.50 T:aeadaes192ocbtaglen128v1 0.50 0.50 0.51 T:aes128otrpv3 0.52 0.53 0.53 T:aes128otrcv3 0.63 0.64 0.64 T:aes256otrpv3 0.65 0.66 0.66 T:aes256otrcv3 0.66 0.67 0.68 T:aeadaes256ocbtaglen128v1 0.76 0.77 0.79 T:deoxysneq128128v1 0.77 0.77 0.77 T:morus1280256v2 0.77 0.77 0.77 T:morus1280256v1 0.81 0.81 0.83 T:deoxysi128v141 0.86? 0.86? 1.16? T:morus1280128v1 0.84 0.88 0.90 T:deoxysneq256128v1 0.88 0.89 0.89 T:morus1280128v2 0.90? 0.91? 1.16? T:deoxysi256v141 1.02 1.02 1.03 T:morus640128v2 1.02 1.02 1.03 T:morus640128v1 1.06 1.09 1.11 T:colm0v1 1.10 1.11 1.12 T:aes128gcmv1 1.13 1.14 1.15 aes256gcmv1 1.16 1.16 1.18 T:deoxysii128v141 1.21 1.25 1.26 T:deoxyseq128128v1 1.29 1.30 1.31 T:deoxysii256v141 1.30 1.32 1.33 T:deoxyseq256128v1 1.57 1.58 1.58 T:aes128otrsv3 2.14 2.15 2.15 T:aes256otrsv3 2.25 2.26 2.30 T:norx6444v3 2.35 2.35 2.37 T:norx6441v2 2.36 2.36 2.41 T:norx6441v3 2.60 2.62 2.63 T:aes128n12t8clocv2 2.59 2.62 2.63 T:aes128n12t8silcv2 2.59 2.63 2.63 T:aes128n12t8silcv3 2.60 2.63 2.63 T:aes128n12t8clocv3 2.60 2.63 2.63 T:aes128n8t8clocv2 2.59 2.63 2.63 T:aes128n8t8silcv2 2.77 2.78 2.78 T:seakeyakv2 2.79 2.80 2.82 T:norx6441v1 2.81 2.88 2.97 T:oceankeyakv2 3.40 3.44 3.46 T:lunarkeyakv2 3.49 3.49 3.49 T:norx3241v3 3.48 3.50 3.51 T:norx6461v2 3.48 3.50 3.52 T:norx6461v3 3.49 3.51 3.51 T:norx3241v2 3.78 3.78 3.80 T:norx6444v2 3.97 3.98 3.99 T:lakekeyakv1 3.94 4.00 4.24 T:lakekeyakv2 4.16 4.19 4.23 T:norx3241v1 4.18 4.19 4.21 T:norx6461v1 4.36 4.38 4.39 T:norx6444v1 5.18 5.19 5.19 T:norx3261v2 5.15 5.19 5.19 T:norx3261v3 5.66 5.66 5.66 T:aesjambuv1 5.82? 5.82? 9.22? T:acorn128v2 5.92 5.93 5.95 T:acorn128v3 5.94 5.97 5.97 T:ascon96v1 5.98 5.99 6.00 T:ascon128av11 5.99 6.00 6.01 ascon128av12 6.90 6.91 6.92 T:riverkeyakv2 7.17 7.21 7.21 T:norx3261v1 7.23 7.29 7.38 T:ketjemajorv2 8.93 8.94 8.95 ascon128v12 8.93 8.94 8.95 T:ascon128v1 8.94 8.94 8.95 T:ascon128v11 9.37 9.38 9.40 T:ketjeminorv2 13.76 13.78 13.82 T:aes128otrsv1 13.74 13.80 13.82 T:aes128otrsv2 14.22 14.23 14.28 T:aes128otrpv2 14.29 14.30 14.32 T:aes128otrpv1 14.32 14.39 14.40 T:twine80n6t4clocv3 14.95 14.97 15.00 T:seakeyakv1 14.94 15.02 15.11 T:oceankeyakv1 15.06 15.07 15.09 T:twine80n6t4clocv2 17.48 17.53 17.56 T:aes256otrsv2 17.48 17.53 17.55 T:aes256otrsv1 17.57 17.60 17.64 T:aes128n8clocv1 17.60 17.63 17.63 T:aes128n12clocv1 17.94 18.00 18.04 T:aes256otrpv2 17.99 18.00 18.03 T:aes256otrpv1 19.03 19.05 19.07 T:aes128n8silcv1 19.05 19.05 19.05 T:aes128n12silcv1 19.51 19.54 19.58 T:proest256otrv1 28.39 28.41 28.42 T:aeadaes128ocbtaglen64v1 28.33 28.44 28.46 T:aeadaes128ocbtaglen96v1 29.56 29.92 31.85 T:riverkeyakv1 30.05? 30.50? 35.53? T:ketjesrv1 30.49 30.61 30.62 T:ketjesrv2 33.79 33.82 33.87 T:aeadaes192ocbtaglen64v1 33.81 33.84 33.90 T:aeadaes192ocbtaglen96v1 38.93 38.95 38.97 T:aeadaes256ocbtaglen64v1 38.23? 39.78? 52.57? T:aeadaes256ocbtaglen96v1 50.41 50.49 50.61 T:colm127v1 54.85 54.91 55.22 T:proest128otrv1 54.99 55.48 55.62 T:ketjejrv1 70.61 70.66 70.73 T:present80n6t4silcv3 89.72 89.89 89.92 T:deoxysneq128128v13 93.18 93.21 93.26 T:twine80n6clocv1 102.18 102.65 103.13 T:ketjejrv2 113.26 113.29 113.36 T:aezv1 114.93 114.97 115.46 T:deoxyseq128128v13 122.00 122.75 123.89 T:led80n6t4silcv3 129.81 133.28 134.42 T:deoxysneq256128v13 172.06 172.36 173.03 T:deoxyseq256128v13 548.30? 581.76? 795.45? T:acorn128 3065.60 3066.24 3066.43 T:present80n6t4silcv2 3081.03 3081.20 3083.41 T:present80n6silcv1 5873.52 5876.04 5877.31 T:led80n6t4silcv2 5907.20 5908.52 5921.63 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.12? 0.13? 0.16? T:tiaoxinv2 0.12? 0.13? 0.15? T:tiaoxinv1 0.14? 0.16? 0.19? T:aegis128l 0.15? 0.16? 0.17? aegis128l 0.17? 0.18? 0.20? T:aezv5 0.18? 0.19? 0.21? T:aezv4 0.18? 0.20? 0.21? T:aezv3 0.30 0.31 0.32 T:aegis128 0.30? 0.34? 0.34? aegis256 0.43 0.44 0.46 T:aeadaes128ocbtaglen128v1 0.43? 0.47? 0.67? T:aeadaes192ocbtaglen128v1 0.46 0.48 0.49 T:aes128otrpv3 0.51 0.52 0.52 T:aes128otrcv3 0.52 0.53 0.55 T:aes128gcmv1 0.53 0.55 0.57 aes256gcmv1 0.59 0.61 0.63 T:aes256otrpv3 0.58? 0.63? 0.65? T:colm0v1 0.65 0.65 0.66 T:aes256otrcv3 0.70 0.74 0.76 T:deoxysneq128128v1 0.74 0.76 0.76 T:aeadaes256ocbtaglen128v1 0.75 0.76 0.77 T:deoxysi128v141 0.75 0.78 0.79 T:deoxysii128v141 0.78 0.80 0.81 T:morus1280128v1 0.80 0.82 0.82 T:morus1280128v2 0.81 0.83 0.84 T:deoxysneq256128v1 0.85 0.86 0.88 T:deoxysi256v141 0.83 0.87 0.88 T:deoxyseq128128v1 0.86 0.89 0.91 T:deoxyseq256128v1 0.87 0.89 0.90 T:deoxysii256v141 0.89 0.90 0.91 T:morus1280256v1 0.89 0.90 0.91 T:morus1280256v2 0.97 0.98 0.99 T:morus640128v1 0.95 1.00 1.00 T:morus640128v2 1.99? 2.17? 2.41? T:oceankeyakv2 2.18 2.25 2.30 T:lunarkeyakv2 2.33 2.34 2.37 T:norx6441v3 2.34 2.35 2.37 T:norx6441v2 2.35 2.38 2.41 T:norx6444v3 2.56 2.59 2.62 T:seakeyakv2 2.62 2.62 2.63 T:aes128n8t8silcv2 2.62 2.62 2.63 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.62 2.63 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n8t8clocv2 2.63 2.63 2.63 T:aes128n12t8silcv3 2.81 2.90 2.92 T:norx6441v1 3.40 3.41 3.43 T:norx3241v2 3.41 3.45 3.47 T:norx3241v3 3.46 3.48 3.52 T:norx6461v2 3.49 3.50 3.52 T:norx6461v3 3.50 3.56 3.59 T:lakekeyakv2 3.57 3.62 3.69 T:lakekeyakv1 3.62 3.62 3.63 T:aes256otrsv3 3.68 3.71 3.74 T:norx6444v2 4.11 4.15 4.15 T:norx3241v1 4.18 4.25 4.33 T:norx6461v1 4.26 4.28 4.29 T:norx6444v1 5.01 5.02 5.07 T:norx3261v2 5.16 5.19 5.19 T:norx3261v3 5.41 5.44 5.44 T:aesjambuv1 5.80 5.83 5.88 T:acorn128v2 5.80 5.85 5.90 T:acorn128v3 5.92 5.94 5.95 T:ascon96v1 5.89 5.98 6.09 T:ketjemajorv2 5.98 6.00 6.01 ascon128av12 6.03 6.04 6.05 T:ascon128av11 6.38 6.45 6.46 T:riverkeyakv2 7.22 7.30 7.31 T:norx3261v1 7.60 7.60 7.63 T:ketjeminorv2 8.91 8.92 8.93 T:ascon128v1 8.92 8.92 8.92 T:ascon128v11 8.95 8.95 8.97 ascon128v12 11.40 11.42 11.44 T:aes128n12clocv1 11.42 11.44 11.46 T:aes128n8clocv1 12.14 12.16 12.21 T:aes128otrsv1 12.15 12.17 12.21 T:aes128otrsv2 12.62 12.63 12.63 T:aes128n12silcv1 12.60 12.65 12.65 T:aes128n8silcv1 13.07 13.09 13.13 T:aes128otrpv1 13.08 13.11 13.13 T:aes128otrpv2 14.12 14.12 14.25 T:twine80n6t4clocv3 14.74 14.75 14.77 T:twine80n6t4clocv2 14.73 14.86 14.89 T:seakeyakv1 14.80 14.86 14.89 T:oceankeyakv1 15.82 15.85 15.90 T:aes256otrsv2 15.86 15.88 15.92 T:aes256otrsv1 16.81 16.84 16.88 T:aes256otrpv1 16.79 16.84 16.97 T:aes256otrpv2 19.65 19.69 19.73 T:proest256otrv1 23.39 23.44 23.52 T:aeadaes128ocbtaglen64v1 23.40 23.45 23.49 T:aeadaes128ocbtaglen96v1 25.36 25.50 25.69 T:ketjesrv2 26.95 26.98 27.04 T:colm127v1 26.00? 27.15? 31.96? T:ketjesrv1 27.55? 27.92? 31.57? T:riverkeyakv1 27.92 27.98 28.10 T:aeadaes192ocbtaglen96v1 27.94 28.14 28.22 T:aeadaes192ocbtaglen64v1 32.26 32.30 32.49 T:aeadaes256ocbtaglen64v1 32.17 32.31 33.71 T:aeadaes256ocbtaglen96v1 52.14 52.36 52.47 T:ketjejrv1 54.98 55.03 55.15 T:aezv1 55.31 56.06 56.28 T:proest128otrv1 62.64 62.71 62.76 T:twine80n6clocv1 69.96 70.06 70.10 T:present80n6t4silcv3 75.81 75.90 75.98 T:deoxysneq128128v13 76.18 76.27 76.36 T:deoxyseq128128v13 97.98 98.78 99.69 T:ketjejrv2 113.37 114.24 119.91 T:deoxysneq256128v13 114.20 114.49 115.17 T:deoxyseq256128v13 120.23 120.47 120.48 T:led80n6t4silcv3 521.41? 574.97? 809.30? T:acorn128 2043.74 2044.07 2044.22 T:present80n6t4silcv2 2053.72 2053.89 2054.06 T:present80n6silcv1 3911.08 3912.31 3914.94 T:led80n6t4silcv2 3927.49 3929.61 3930.81 T:led80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.07? 0.12? 0.16? T:tiaoxinv2 0.09? 0.12? 0.15? T:tiaoxinv1 0.14? 0.16? 0.16? aegis128l 0.14? 0.17? 0.18? T:aegis128l 0.17 0.17 0.18 T:aezv5 0.17? 0.18? 0.19? T:aezv4 0.18? 0.19? 0.20? T:aezv3 0.29? 0.31? 0.40? T:aegis128 0.26? 0.31? 0.37? aegis256 0.44 0.44 0.46 T:aeadaes128ocbtaglen128v1 0.45 0.47 0.47 T:aes128otrpv3 0.29? 0.48? 0.49? T:aeadaes192ocbtaglen128v1 0.51 0.52 0.53 T:aes128otrcv3 0.53 0.54 0.55 T:aes128gcmv1 0.54 0.57 0.58 aes256gcmv1 0.61 0.61 0.62 T:aes256otrpv3 0.62 0.64 0.65 T:colm0v1 0.66 0.66 0.66 T:aes256otrcv3 0.71 0.72 0.73 T:morus1280256v2 0.71 0.72 0.73 T:morus1280256v1 0.73 0.74 0.77 T:aeadaes256ocbtaglen128v1 0.75 0.76 0.81 T:deoxysi128v141 0.75 0.76 0.77 T:deoxysneq128128v1 0.78 0.79 0.81 T:deoxysii128v141 0.78 0.80 0.80 T:morus1280128v1 0.78 0.81 0.82 T:morus1280128v2 0.82 0.83 0.88 T:deoxysi256v141 0.83 0.84 0.85 T:deoxysneq256128v1 0.86 0.87 0.88 T:deoxysii256v141 0.87 0.88 0.89 T:deoxyseq128128v1 0.90 0.90 0.91 T:deoxyseq256128v1 0.97 0.98 1.00 T:morus640128v1 0.97 0.98 1.00 T:morus640128v2 1.97? 2.17? 2.40? T:oceankeyakv2 2.18 2.20 2.24 T:lunarkeyakv2 2.33 2.34 2.36 T:norx6441v2 2.33 2.34 2.36 T:norx6441v3 2.38 2.39 2.45 T:norx6444v3 2.59 2.60 2.62 T:seakeyakv2 2.56 2.62 2.69 T:aes128n12t8clocv3 2.62 2.62 2.63 T:aes128n12t8silcv3 2.56 2.62 2.69 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128otrsv3 2.62 2.62 2.63 T:aes128n8t8clocv2 2.56 2.63 2.69 T:aes128n12t8silcv2 2.62 2.63 2.63 T:aes128n8t8silcv2 2.76 2.79 2.81 T:norx6441v1 3.40 3.43 3.48 T:norx3241v2 3.44 3.45 3.48 T:norx6461v3 3.44 3.47 3.51 T:norx6461v2 3.44 3.49 3.49 T:norx3241v3 3.51 3.56 3.59 T:lakekeyakv2 3.62 3.62 3.63 T:aes256otrsv3 3.64 3.66 3.69 T:lakekeyakv1 3.69 3.72 3.74 T:norx6444v2 4.11 4.12 4.15 T:norx3241v1 4.13 4.16 4.22 T:norx6461v1 4.24 4.28 4.30 T:norx6444v1 5.11 5.17 5.18 T:norx3261v2 5.10 5.17 5.19 T:norx3261v3 5.41 5.44 5.44 T:aesjambuv1 5.61 5.63 5.64 T:acorn128v2 5.81 5.84 5.85 T:acorn128v3 5.89 5.92 5.98 T:ascon128av11 5.90 5.92 5.94 ascon128av12 5.94 5.98 5.99 T:ascon96v1 6.08 6.08 6.12 T:ketjemajorv2 6.43 6.44 6.47 T:riverkeyakv2 7.22 7.30 7.30 T:norx3261v1 7.60 7.62 7.64 T:ketjeminorv2 8.86 8.88 8.91 ascon128v12 8.89 8.92 8.93 T:ascon128v11 8.92 8.93 8.93 T:ascon128v1 11.39 11.42 11.44 T:aes128n12clocv1 11.43 11.46 11.50 T:aes128n8clocv1 12.13 12.17 12.21 T:aes128otrsv2 12.13 12.17 12.20 T:aes128otrsv1 12.62 12.63 12.65 T:aes128n8silcv1 12.60 12.64 12.64 T:aes128n12silcv1 13.04 13.07 13.15 T:aes128otrpv1 13.06 13.09 13.12 T:aes128otrpv2 14.08 14.13 14.24 T:twine80n6t4clocv3 14.70 14.75 14.76 T:twine80n6t4clocv2 14.75 14.86 14.90 T:oceankeyakv1 14.80 14.89 14.94 T:seakeyakv1 15.84 15.86 15.89 T:aes256otrsv1 15.82 15.87 15.93 T:aes256otrsv2 16.79 16.84 16.91 T:aes256otrpv2 16.83 16.87 17.04 T:aes256otrpv1 19.71 19.75 19.79 T:proest256otrv1 23.46 23.54 23.75 T:aeadaes128ocbtaglen64v1 23.52 23.55 23.58 T:aeadaes128ocbtaglen96v1 25.35 25.64 25.68 T:ketjesrv2 26.87 26.95 26.99 T:colm127v1 26.17? 27.34? 32.19? T:ketjesrv1 27.49? 27.89? 31.56? T:riverkeyakv1 27.98 28.02 28.22 T:aeadaes192ocbtaglen96v1 28.10 28.12 28.25 T:aeadaes192ocbtaglen64v1 32.29 32.31 32.33 T:aeadaes256ocbtaglen64v1 32.36 32.49 33.58 T:aeadaes256ocbtaglen96v1 52.25 52.41 52.51 T:ketjejrv1 55.07 55.14 55.20 T:aezv1 54.54 55.76 55.82 T:proest128otrv1 62.63 62.73 62.75 T:twine80n6clocv1 69.91 70.06 70.10 T:present80n6t4silcv3 75.76 75.85 75.94 T:deoxysneq128128v13 76.19 76.32 76.62 T:deoxyseq128128v13 98.16 99.17 100.02 T:ketjejrv2 114.21 114.51 115.02 T:deoxyseq256128v13 113.34 114.57 120.15 T:deoxysneq256128v13 120.29 122.51 122.68 T:led80n6t4silcv3 545.89? 601.87? 823.68? T:acorn128 2043.63 2043.79 2044.07 T:present80n6t4silcv2 2053.63 2053.98 2054.07 T:present80n6silcv1 3911.31 3916.25 3918.13 T:led80n6t4silcv2 3926.52 3929.85 3931.25 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.08? 0.12? 0.17? T:tiaoxinv2 0.09? 0.12? 0.14? T:tiaoxinv1 0.16 0.16 0.16 aegis128l 0.17 0.18 0.18 T:aezv5 0.17 0.18 0.18 T:aegis128l 0.17? 0.18? 0.19? T:aezv4 0.18? 0.19? 0.20? T:aezv3 0.30? 0.31? 0.34? T:aegis128 0.25? 0.31? 0.37? aegis256 0.44 0.44 0.45 T:aeadaes128ocbtaglen128v1 0.45? 0.47? 0.67? T:aeadaes192ocbtaglen128v1 0.48 0.48 0.49 T:aes128otrpv3 0.52 0.53 0.53 T:aes128otrcv3 0.53 0.53 0.54 T:aes128gcmv1 0.54 0.55 0.56 aes256gcmv1 0.61 0.62 0.62 T:aes256otrpv3 0.60 0.63 0.64 T:colm0v1 0.66 0.66 0.66 T:aes256otrcv3 0.72 0.72 0.73 T:morus1280256v1 0.72 0.73 0.73 T:morus1280256v2 0.75 0.75 0.76 T:aeadaes256ocbtaglen128v1 0.72? 0.75? 0.80? T:deoxysi128v141 0.75 0.75 0.79 T:deoxysneq128128v1 0.75 0.76 0.78 T:deoxysii128v141 0.80 0.81 0.81 T:morus1280128v1 0.81 0.82 0.82 T:morus1280128v2 0.80 0.83 0.85 T:deoxysneq256128v1 0.84 0.85 0.86 T:deoxysii256v141 0.82 0.86 0.90 T:deoxysi256v141 0.85 0.89 0.89 T:deoxyseq128128v1 0.88 0.90 0.91 T:deoxyseq256128v1 0.98 0.99 1.00 T:morus640128v1 0.98 0.99 1.00 T:morus640128v2 2.13 2.17 2.24 T:lunarkeyakv2 1.96? 2.17? 2.42? T:oceankeyakv2 2.32 2.33 2.34 T:norx6441v3 2.35 2.37 2.37 T:norx6441v2 2.37 2.39 2.41 T:norx6444v3 2.57 2.59 2.62 T:seakeyakv2 2.56 2.62 2.63 T:aes128n12t8clocv3 2.56 2.62 2.69 T:aes128n12t8silcv2 2.62 2.62 2.68 T:aes128n12t8clocv2 2.62 2.62 2.63 T:aes128otrsv3 2.54 2.63 2.71 T:aes128n8t8silcv2 2.57 2.63 2.68 T:aes128n8t8clocv2 2.54 2.63 2.63 T:aes128n12t8silcv3 2.76 2.79 2.81 T:norx6441v1 3.43 3.45 3.48 T:norx3241v2 3.45 3.47 3.51 T:norx6461v3 3.47 3.49 3.52 T:norx6461v2 3.45 3.49 3.49 T:norx3241v3 3.52 3.55 3.59 T:lakekeyakv2 3.62 3.62 3.63 T:aes256otrsv3 3.66 3.67 3.69 T:lakekeyakv1 3.68 3.73 3.74 T:norx6444v2 4.12 4.18 4.22 T:norx6461v1 4.19 4.20 4.20 T:norx3241v1 4.26 4.28 4.30 T:norx6444v1 5.01 5.16 5.17 T:norx3261v2 5.17 5.17 5.19 T:norx3261v3 5.41 5.44 5.44 T:aesjambuv1 5.62 5.63 5.64 T:acorn128v2 5.82 5.83 5.86 T:acorn128v3 5.91 5.91 5.92 ascon128av12 5.90 5.92 5.98 T:ascon128av11 5.93 5.93 5.96 T:ascon96v1 6.06 6.09 6.14 T:ketjemajorv2 6.41 6.44 6.45 T:riverkeyakv2 7.28 7.31 7.31 T:norx3261v1 7.61 7.61 7.63 T:ketjeminorv2 8.86 8.86 8.92 T:ascon128v11 8.86 8.87 8.92 T:ascon128v1 8.87 8.88 8.93 ascon128v12 11.39 11.45 11.46 T:aes128n12clocv1 11.41 11.45 11.49 T:aes128n8clocv1 12.13 12.17 12.20 T:aes128otrsv1 12.16 12.19 12.23 T:aes128otrsv2 12.59 12.63 12.65 T:aes128n8silcv1 12.61 12.63 12.65 T:aes128n12silcv1 13.07 13.08 13.10 T:aes128otrpv2 13.08 13.11 13.16 T:aes128otrpv1 14.24 14.26 14.26 T:twine80n6t4clocv3 14.74 14.75 14.76 T:twine80n6t4clocv2 14.75 14.78 14.85 T:seakeyakv1 14.75 14.83 14.84 T:oceankeyakv1 15.83 15.85 15.89 T:aes256otrsv2 15.87 15.91 15.92 T:aes256otrsv1 16.82 16.84 16.86 T:aes256otrpv2 16.80 16.84 17.08 T:aes256otrpv1 19.66 19.70 19.75 T:proest256otrv1 23.42 23.44 23.44 T:aeadaes128ocbtaglen64v1 23.42 23.46 23.51 T:aeadaes128ocbtaglen96v1 25.42 25.66 25.67 T:ketjesrv2 26.97 27.00 27.02 T:colm127v1 26.68? 27.38? 32.23? T:ketjesrv1 27.47? 27.94? 31.53? T:riverkeyakv1 27.94 27.96 28.04 T:aeadaes192ocbtaglen64v1 28.03 28.11 28.21 T:aeadaes192ocbtaglen96v1 32.22 32.30 33.71 T:aeadaes256ocbtaglen96v1 32.26 32.37 32.55 T:aeadaes256ocbtaglen64v1 52.15 52.34 52.43 T:ketjejrv1 55.01 55.15 55.29 T:aezv1 55.42 55.62 55.99 T:proest128otrv1 62.64 62.84 62.89 T:twine80n6clocv1 69.85 69.94 70.14 T:present80n6t4silcv3 75.82 75.91 76.08 T:deoxysneq128128v13 76.28 76.39 76.46 T:deoxyseq128128v13 99.10 99.32 99.51 T:ketjejrv2 113.45 114.32 121.03 T:deoxysneq256128v13 113.86 114.90 114.98 T:deoxyseq256128v13 120.29 122.55 122.67 T:led80n6t4silcv3 536.11? 587.60? 834.45? T:acorn128 2043.64 2044.05 2050.64 T:present80n6t4silcv2 2053.58 2053.73 2053.98 T:present80n6silcv1 3915.60 3916.63 3917.73 T:led80n6t4silcv2 3928.94 3931.50 3935.12 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.23 0.24 0.25 aegis128l 0.23? 0.24? 0.27? T:tiaoxinv1 0.24 0.25 0.25 T:aegis128l 0.23? 0.25? 0.26? T:tiaoxinv2 0.37 0.37 0.37 T:aegis128 0.39 0.40 0.42 T:aezv4 0.39 0.41 0.43 T:aezv3 0.40 0.41 0.42 aegis256 0.41 0.42 0.43 T:aezv5 0.52 0.52 0.54 T:aeadaes128ocbtaglen128v1 0.62 0.63 0.64 T:aes128otrpv3 0.66 0.67 0.73 T:aeadaes192ocbtaglen128v1 0.70 0.70 0.71 T:aes128otrcv3 0.75 0.76 0.79 T:aeadaes256ocbtaglen128v1 0.80 0.80 0.81 T:aes256otrpv3 0.89 0.89 0.90 T:aes256otrcv3 0.96 0.96 0.98 T:deoxysneq128128v1 1.04 1.05 1.07 T:deoxysi128v141 1.05? 1.07? 1.29? T:deoxysneq256128v1 1.08 1.09 1.09 T:morus1280128v1 1.10 1.11 1.12 T:morus1280128v2 1.14 1.14 1.15 T:morus640128v1 1.15 1.15 1.16 T:morus640128v2 1.15 1.16 1.16 T:aes128gcmv1 1.15 1.16 1.17 T:morus1280256v1 1.19 1.19 1.20 T:morus1280256v2 1.21 1.24 1.27 T:deoxysi256v141 1.24 1.24 1.27 T:colm0v1 1.28 1.29 1.29 aes256gcmv1 1.42 1.43 1.47 T:deoxyseq128128v1 1.52 1.54 1.55 T:deoxyseq256128v1 1.53 1.55 1.57 T:deoxysii128v141 1.65 1.66 1.66 T:aes128otrsv3 1.75 1.77 1.78 T:deoxysii256v141 2.25 2.25 2.25 T:aes256otrsv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.75 T:aes128n12t8clocv3 2.72 2.72 2.75 T:aes128n12t8clocv2 2.73 2.74 2.77 T:norx6441v3 2.74 2.75 2.79 T:norx6441v2 2.76 2.76 2.79 T:aes128n12t8silcv3 2.76 2.76 2.79 T:aes128n8t8silcv2 2.77 2.77 2.77 T:aes128n12t8silcv2 3.09 3.12 3.15 T:norx6444v3 3.18 3.19 3.21 T:norx6441v1 3.73 3.73 3.75 T:norx3241v2 3.71 3.76 3.79 T:norx3241v3 3.92 3.94 3.96 T:seakeyakv2 4.06 4.07 4.12 T:norx6461v3 4.07 4.09 4.11 T:norx6461v2 4.37 4.38 4.39 T:norx3241v1 4.35 4.38 4.64 T:lakekeyakv2 4.58 4.59 4.61 T:lakekeyakv1 4.74 4.76 4.78 T:norx6461v1 5.30 5.36 5.45 T:oceankeyakv2 5.40 5.41 5.42 T:norx6444v2 5.42 5.43 5.46 T:aesjambuv1 5.53 5.57 5.63 T:norx3261v2 5.54 5.59 5.64 T:norx3261v3 6.10 6.15 6.15 T:ascon96v1 6.15 6.15 6.16 T:norx6444v1 6.17 6.17 6.22 T:ascon128av11 6.45 6.45 6.47 ascon128av12 6.86 6.87 6.89 T:acorn128v3 6.98 6.99 7.01 T:acorn128v2 7.34 7.34 7.36 T:riverkeyakv2 7.66 7.68 7.69 T:norx3261v1 9.01 9.01 9.02 T:ascon128v1 9.01 9.01 9.01 T:ascon128v11 9.08 9.10 9.12 T:lunarkeyakv2 9.12 9.14 9.16 ascon128v12 9.60 9.71 9.74 T:ketjemajorv2 11.03 11.03 11.03 T:ketjeminorv2 14.07 14.08 14.09 T:aes128otrsv1 14.09 14.09 14.11 T:aes128otrsv2 14.55 14.60 14.71 T:aes128otrpv1 14.62 14.65 14.66 T:aes128otrpv2 14.72 14.73 14.78 T:twine80n6t4clocv3 15.49 15.49 15.51 T:twine80n6t4clocv2 17.23 17.24 17.25 T:aes128n12clocv1 17.25 17.27 17.42 T:aes128n8clocv1 17.82 17.84 17.86 T:aes256otrsv2 17.82 17.84 17.90 T:aes256otrsv1 18.16 18.19 18.22 T:seakeyakv1 18.33 18.34 18.35 T:aes256otrpv2 18.38 18.39 18.46 T:aes256otrpv1 19.33 19.33 19.34 T:aes128n12silcv1 19.33 19.34 19.38 T:aes128n8silcv1 21.18 21.19 21.21 T:proest256otrv1 22.91 22.93 22.97 T:oceankeyakv1 24.97 25.02 25.12 T:aeadaes128ocbtaglen96v1 25.03 25.03 25.06 T:aeadaes128ocbtaglen64v1 29.44 29.53 29.58 T:aeadaes192ocbtaglen64v1 29.48 29.55 29.67 T:aeadaes192ocbtaglen96v1 29.67 29.78 30.11 T:ketjesrv2 30.99 31.07 33.10 T:riverkeyakv1 31.50? 31.74? 35.20? T:ketjesrv1 33.86 33.91 33.95 T:aeadaes256ocbtaglen64v1 33.85 33.91 34.43 T:aeadaes256ocbtaglen96v1 45.05 45.07 45.11 T:colm127v1 55.42 55.51 55.56 T:ketjejrv1 57.42 57.47 57.84 T:proest128otrv1 71.48 71.50 71.50 T:present80n6t4silcv3 76.07 76.13 76.17 T:deoxysneq128128v13 93.96 94.01 94.11 T:twine80n6clocv1 102.16 102.68 103.62 T:ketjejrv2 108.38 108.44 108.55 T:aezv1 114.62 115.19 120.48 T:deoxysneq256128v13 116.10 116.13 116.23 T:deoxyseq128128v13 122.70 123.81 124.84 T:led80n6t4silcv3 173.98 174.74 175.48 T:deoxyseq256128v13 641.10? 641.45? 863.35? T:acorn128 3081.57 3087.00 3090.34 T:present80n6t4silcv2 3097.22 3097.68 3097.83 T:present80n6silcv1 5898.83 5902.68 5907.03 T:led80n6t4silcv2 5921.89 5929.99 5939.66 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.25 0.25 0.25 aegis128l 0.25 0.26 0.26 T:aegis128l 0.29 0.29 0.32 T:tiaoxinv1 0.29 0.31 0.32 T:tiaoxinv2 0.37 0.40 0.40 T:aegis128 0.39 0.40 0.43 T:aezv3 0.40 0.40 0.42 T:aezv4 0.41 0.41 0.44 aegis256 0.41? 0.42? 0.46? T:aezv5 0.52 0.53 0.54 T:aeadaes128ocbtaglen128v1 0.62? 0.63? 0.74? T:aeadaes192ocbtaglen128v1 0.63 0.64 0.64 T:aes128otrpv3 0.71 0.71 0.71 T:aes128otrcv3 0.76 0.77 0.78 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.80 T:aes256otrpv3 0.90 0.90 0.91 T:aes256otrcv3 0.97 0.97 0.97 T:morus1280256v1 0.98 0.98 0.99 T:morus1280256v2 1.05 1.07 1.09 T:deoxysneq128128v1 1.10? 1.10? 1.38? T:morus1280128v1 1.09 1.10 1.15 T:deoxysneq256128v1 1.12 1.12 1.12 T:morus1280128v2 1.12 1.14 1.16 T:deoxysi128v141 1.15 1.17 1.17 T:morus640128v1 1.17 1.17 1.18 T:morus640128v2 1.23 1.24 1.24 T:aes128gcmv1 1.24 1.25 1.27 T:colm0v1 1.28 1.28 1.29 aes256gcmv1 1.29? 1.51? 1.57? T:deoxysi256v141 1.54 1.57 1.58 T:deoxyseq128128v1 1.59 1.60 1.62 T:deoxyseq256128v1 1.60 1.62 1.64 T:deoxysii128v141 1.66 1.66 1.67 T:aes128otrsv3 1.79 1.82 1.85 T:deoxysii256v141 2.26 2.26 2.27 T:aes256otrsv3 2.68 2.68 2.68 T:aes128n12t8clocv2 2.68 2.68 2.71 T:aes128n8t8clocv2 2.68 2.68 2.71 T:aes128n12t8clocv3 2.71 2.71 2.71 T:aes128n12t8silcv2 2.71 2.71 2.76 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n8t8silcv2 2.73 2.75 2.75 T:norx6441v3 2.75 2.75 2.76 T:norx6441v2 3.09 3.11 3.12 T:norx6444v3 3.16 3.17 3.18 T:norx6441v1 3.77 3.77 3.80 T:norx3241v3 3.77 3.79 3.80 T:norx3241v2 3.98 3.99 4.02 T:seakeyakv2 4.07 4.08 4.09 T:norx6461v2 4.10 4.10 4.20 T:norx6461v3 4.37 4.41 4.63 T:lakekeyakv2 4.43 4.43 4.44 T:norx3241v1 4.62 4.64 4.67 T:lakekeyakv1 4.72 4.73 4.74 T:norx6461v1 5.33 5.37 5.48 T:oceankeyakv2 5.39 5.40 5.41 T:norx6444v2 5.56 5.61 5.62 T:norx3261v3 5.60 5.61 5.63 T:norx3261v2 5.70 5.71 5.73 T:aesjambuv1 6.13 6.14 6.14 T:ascon96v1 6.13 6.14 6.15 T:norx6444v1 6.14 6.14 6.15 T:ascon128av11 6.15 6.17 6.18 ascon128av12 6.86? 6.87? 10.04? T:acorn128v2 6.95 6.96 6.97 T:acorn128v3 7.29 7.32 7.34 T:riverkeyakv2 7.57 7.61 7.63 T:norx3261v1 9.07 9.07 9.09 T:ascon128v11 9.07 9.07 9.10 T:ascon128v1 9.08 9.08 9.10 ascon128v12 9.15 9.16 9.20 T:lunarkeyakv2 9.33 9.35 9.39 T:ketjemajorv2 10.41 10.42 10.42 T:ketjeminorv2 14.24 14.25 14.28 T:aes128otrsv2 14.25 14.27 14.29 T:aes128otrsv1 14.68 14.71 14.75 T:aes128otrpv1 14.74 14.74 14.74 T:twine80n6t4clocv3 14.65 14.74 14.75 T:aes128otrpv2 15.44 15.45 15.46 T:twine80n6t4clocv2 17.89 17.90 17.91 T:aes128n12clocv1 17.88 17.90 17.95 T:aes128n8clocv1 18.01 18.04 18.10 T:aes256otrsv2 18.04 18.05 18.07 T:aes256otrsv1 18.25 18.31 18.36 T:seakeyakv1 18.56 18.57 18.58 T:aes256otrpv1 18.58 18.61 18.62 T:aes256otrpv2 19.40 19.40 19.43 T:aes128n12silcv1 19.40 19.40 19.42 T:aes128n8silcv1 21.38 21.41 21.45 T:proest256otrv1 22.95 22.99 23.05 T:oceankeyakv1 29.21 29.23 29.28 T:aeadaes128ocbtaglen64v1 29.21 29.25 29.26 T:aeadaes128ocbtaglen96v1 31.11 31.16 33.21 T:riverkeyakv1 31.12? 31.57? 35.86? T:ketjesrv1 31.77 33.27 33.41 T:ketjesrv2 34.57 34.58 34.75 T:aeadaes192ocbtaglen64v1 34.63 34.65 34.72 T:aeadaes192ocbtaglen96v1 39.90 40.02 40.14 T:aeadaes256ocbtaglen64v1 39.89? 40.69? 46.28? T:aeadaes256ocbtaglen96v1 51.82 51.85 51.94 T:colm127v1 56.42 56.51 56.55 T:ketjejrv1 57.18 57.62 57.84 T:proest128otrv1 71.44 71.46 71.50 T:present80n6t4silcv3 90.21 90.27 90.36 T:deoxysneq128128v13 93.74 93.77 93.85 T:twine80n6clocv1 103.46 104.36 104.64 T:ketjejrv2 108.58 108.70 108.88 T:aezv1 116.34 116.36 116.39 T:deoxyseq128128v13 122.95 123.15 123.76 T:led80n6t4silcv3 129.98 134.25 134.58 T:deoxysneq256128v13 174.28 174.33 175.01 T:deoxyseq256128v13 651.91? 657.01? 844.06? T:acorn128 3082.28 3082.36 3082.78 T:present80n6t4silcv2 3096.44 3096.99 3097.47 T:present80n6silcv1 5904.46 5905.70 5909.33 T:led80n6t4silcv2 5938.64 5939.31 5946.72 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.23 0.23 0.23 T:aezv3 0.24? 0.24? 0.27? T:aezv4 0.24? 0.24? 0.27? T:aezv5 0.25 0.25 0.25 aegis128l 0.25 0.26 0.26 T:aegis128l 0.29 0.29 0.31 T:tiaoxinv2 0.29 0.30 0.31 T:tiaoxinv1 0.37 0.38 0.40 T:aegis128 0.45 0.45 0.46 aegis256 0.54 0.54 0.54 T:aeadaes128ocbtaglen128v1 0.62 0.62 0.62 T:aeadaes192ocbtaglen128v1 0.63 0.63 0.63 T:aes128otrpv3 0.71 0.71 0.71 T:aes128otrcv3 0.76 0.76 0.77 T:aeadaes256ocbtaglen128v1 0.79 0.79 0.80 T:aes256otrpv3 0.90 0.90 0.90 T:aes256otrcv3 0.97 0.97 0.98 T:morus1280256v1 0.98 0.98 0.98 T:morus1280256v2 1.03 1.03 1.05 T:deoxysneq128128v1 1.08 1.09 1.11 T:deoxysneq256128v1 1.10? 1.10? 1.38? T:morus1280128v1 1.11 1.11 1.14 T:deoxysi128v141 1.12 1.12 1.12 T:morus1280128v2 1.15 1.16 1.17 T:morus640128v1 1.17 1.17 1.18 T:morus640128v2 1.22 1.22 1.23 T:aes128gcmv1 1.24 1.24 1.27 T:colm0v1 1.27 1.28 1.28 aes256gcmv1 1.31? 1.50? 1.55? T:deoxysi256v141 1.52 1.53 1.55 T:deoxyseq128128v1 1.55 1.55 1.57 T:deoxysii128v141 1.58 1.59 1.60 T:deoxyseq256128v1 1.66 1.66 1.67 T:aes128otrsv3 1.75 1.76 1.76 T:deoxysii256v141 2.26 2.26 2.26 T:aes256otrsv3 2.67 2.67 2.67 T:aes128n12t8clocv2 2.67 2.67 2.67 T:aes128n8t8clocv2 2.67 2.67 2.67 T:aes128n12t8clocv3 2.71 2.71 2.74 T:aes128n12t8silcv2 2.71 2.71 2.76 T:aes128n12t8silcv3 2.71 2.71 2.71 T:aes128n8t8silcv2 2.75 2.76 2.76 T:norx6441v2 2.76 2.76 2.78 T:norx6441v3 3.08 3.10 3.11 T:norx6444v3 3.15 3.15 3.18 T:norx6441v1 3.76 3.78 3.79 T:norx3241v3 3.78 3.79 3.79 T:norx3241v2 4.01 4.01 4.02 T:seakeyakv2 4.07 4.08 4.08 T:norx6461v2 4.09 4.10 4.17 T:norx6461v3 4.39 4.40 4.64 T:lakekeyakv2 4.40 4.43 4.43 T:norx3241v1 4.65 4.66 4.68 T:lakekeyakv1 4.69 4.71 4.73 T:norx6461v1 5.34 5.35 5.44 T:oceankeyakv2 5.43 5.43 5.44 T:norx6444v2 5.60 5.61 5.62 T:norx3261v3 5.60 5.61 5.62 T:norx3261v2 5.71 5.72 5.73 T:aesjambuv1 6.13 6.14 6.14 T:ascon96v1 6.13 6.14 6.15 T:ascon128av11 6.16 6.16 6.17 T:norx6444v1 6.15 6.17 6.18 ascon128av12 6.86? 6.87? 10.04? T:acorn128v2 6.94 6.95 6.96 T:acorn128v3 7.29 7.30 7.31 T:riverkeyakv2 7.60 7.62 7.63 T:norx3261v1 9.10 9.10 9.10 T:ascon128v1 9.10 9.10 9.11 ascon128v12 9.10 9.10 9.10 T:ascon128v11 9.12 9.13 9.14 T:lunarkeyakv2 9.21 9.49 9.53 T:ketjemajorv2 10.44 10.44 10.45 T:ketjeminorv2 14.25 14.27 14.30 T:aes128otrsv2 14.28 14.29 14.30 T:aes128otrsv1 14.69 14.73 14.78 T:aes128otrpv1 14.70 14.73 14.80 T:aes128otrpv2 14.68 14.74 14.75 T:twine80n6t4clocv3 15.44 15.44 15.45 T:twine80n6t4clocv2 17.87 17.88 17.91 T:aes128n8clocv1 17.88 17.90 17.90 T:aes128n12clocv1 18.03 18.05 18.09 T:aes256otrsv2 18.03 18.06 18.13 T:aes256otrsv1 18.24 18.32 18.34 T:seakeyakv1 18.53 18.57 18.57 T:aes256otrpv1 18.55 18.59 18.64 T:aes256otrpv2 19.40 19.40 19.42 T:aes128n8silcv1 19.40 19.40 19.41 T:aes128n12silcv1 21.35 21.39 21.45 T:proest256otrv1 22.97 23.01 23.02 T:oceankeyakv1 29.20 29.23 29.26 T:aeadaes128ocbtaglen96v1 29.20 29.24 29.32 T:aeadaes128ocbtaglen64v1 31.11 31.15 33.24 T:riverkeyakv1 31.60 31.85 33.32 T:ketjesrv2 31.31? 31.92? 35.89? T:ketjesrv1 34.65 34.68 34.70 T:aeadaes192ocbtaglen64v1 34.61 34.68 34.72 T:aeadaes192ocbtaglen96v1 39.97 39.98 40.04 T:aeadaes256ocbtaglen64v1 40.15? 40.57? 46.31? T:aeadaes256ocbtaglen96v1 51.67 51.87 52.02 T:colm127v1 56.31 56.41 56.53 T:ketjejrv1 57.25 57.55 57.96 T:proest128otrv1 71.35 71.40 71.44 T:present80n6t4silcv3 90.35 90.41 90.52 T:deoxysneq128128v13 93.66 93.69 93.87 T:twine80n6clocv1 104.60 104.83 105.84 T:ketjejrv2 108.55 108.66 108.86 T:aezv1 116.20 116.27 116.40 T:deoxyseq128128v13 122.10 123.16 124.78 T:led80n6t4silcv3 130.35 134.23 134.29 T:deoxysneq256128v13 174.56 174.74 175.50 T:deoxyseq256128v13 649.00? 653.87? 855.49? T:acorn128 3082.35 3082.54 3087.56 T:present80n6t4silcv2 3094.90 3097.09 3097.27 T:present80n6silcv1 5903.76 5904.58 5905.05 T:led80n6t4silcv2 5937.94 5938.55 5952.93 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.06? 1.31? 1.60? T:aegis128 1.10? 1.45? 1.80? T:aegis128l 1.22? 1.48? 1.73? aegis128l 1.50? 1.52? 1.76? aegis256 1.61? 1.69? 1.93? T:aezv5 1.71? 1.74? 2.07? T:aezv3 1.59? 1.83? 2.34? T:tiaoxinv1 1.74? 2.02? 2.26? T:tiaoxinv2 1.95? 2.10? 2.32? T:aezv4 2.20? 2.45? 2.67? T:aeadaes128ocbtaglen128v1 2.91 2.95 3.14 T:aeadaes256ocbtaglen128v1 3.07 3.08 3.12 T:aes128otrpv3 3.31 3.34 3.35 T:aes128otrsv3 3.43 3.58 3.78 T:deoxysneq128128v1 3.73 3.76 3.91 T:aes256otrpv3 3.74 3.77 3.78 T:aes128n8t8clocv2 3.77 3.78 3.81 T:aes128n12t8clocv3 3.77 3.78 3.80 T:aes128n12t8clocv2 3.83 3.88 4.20 T:colm0v1 4.05 4.11 4.23 T:deoxysneq256128v1 4.16 4.16 4.20 T:aes256otrsv3 4.20 4.20 4.21 T:aes128otrcv3 4.23? 4.45? 4.73? T:morus640128v1 4.59 4.63 4.63 T:aes128n12t8silcv2 4.67 4.68 4.70 T:aes128n12t8silcv3 4.67 4.69 4.70 T:aes128n8t8silcv2 4.49? 4.77? 5.05? T:morus640128v2 4.77 4.83 4.96 T:deoxysi128v141 4.82? 4.95? 7.62? T:aeadaes192ocbtaglen128v1 5.23 5.24 5.30 T:aes256otrcv3 5.67 5.72 5.76 T:deoxyseq128128v1 5.66 5.77 5.87 T:deoxysi256v141 5.84 5.86 6.11 T:aes128gcmv1 5.89 5.93 6.25 aes256gcmv1 6.20 6.38 6.64 T:morus1280128v1 6.27 6.39 6.55 T:morus1280256v1 6.48 6.54 6.62 T:deoxyseq256128v1 6.23? 6.65? 6.99? T:morus1280128v2 6.82 6.88 7.09 T:morus1280256v2 7.09 7.10 7.12 T:aesjambuv1 9.16 9.16 9.21 T:norx6441v1 9.16 9.21 9.56 T:norx3241v1 9.28 9.32 9.37 T:norx6441v2 9.44 9.44 9.45 T:norx3241v2 9.38 9.47 9.51 T:norx6441v3 9.48 9.51 9.65 T:norx3241v3 9.53 9.77 10.05 T:ascon128av11 10.02 10.23 10.80 ascon128av12 10.12 10.27 10.42 T:ascon96v1 10.05 10.30 10.56 T:deoxysii128v141 11.55 11.72 11.99 T:deoxysii256v141 12.27 12.59 13.01 ascon128v12 12.05 12.60 12.77 T:ascon128v1 12.34 12.81 12.95 T:ascon128v11 13.59 13.59 13.75 T:norx6461v1 13.66 13.69 14.50 T:norx6461v2 13.66 13.70 13.70 T:norx6461v3 13.95 14.00 14.01 T:norx3261v3 13.96 14.05 14.07 T:norx3261v2 15.87 15.87 15.90 T:norx3261v1 16.02 16.16 16.46 T:lakekeyakv1 17.94 18.16 18.30 T:riverkeyakv2 19.01 20.15 21.00 T:lakekeyakv2 20.12 20.20 20.34 T:norx6444v3 22.77 22.83 22.87 T:twine80n6t4clocv3 23.65 23.70 24.09 T:aes128n8clocv1 23.86 23.92 24.05 T:aes128otrsv1 23.77 23.98 24.52 T:aes128n12clocv1 23.92 24.02 24.30 T:aes128otrsv2 23.88 24.07 24.50 T:twine80n6t4clocv2 24.48 24.62 25.18 T:aes128otrpv1 24.53 24.62 24.73 T:aes128otrpv2 27.57 27.78 28.30 T:aes128n8silcv1 27.68 27.83 28.09 T:aes128n12silcv1 29.23 29.78 30.51 T:acorn128v3 30.47 30.52 30.68 T:aes256otrsv2 30.40 30.62 30.94 T:aes256otrsv1 30.94 30.95 31.38 T:aes256otrpv1 30.87 31.03 31.32 T:aes256otrpv2 31.26 32.14 32.51 T:acorn128v2 35.46 35.52 35.71 T:ketjeminorv2 36.68 37.27 37.84 T:seakeyakv2 38.88 38.89 39.02 T:norx6444v2 40.81 41.03 41.52 T:aeadaes128ocbtaglen96v1 40.84 41.31 41.69 T:aeadaes128ocbtaglen64v1 43.86 43.99 44.09 T:norx6444v1 46.50 46.70 47.53 T:aeadaes192ocbtaglen64v1 46.30 46.89 47.38 T:aeadaes192ocbtaglen96v1 48.96? 49.25? 55.38? T:ketjesrv1 52.19 52.43 52.62 T:ketjesrv2 53.73 54.09 54.57 T:aeadaes256ocbtaglen64v1 54.07 54.45 54.98 T:aeadaes256ocbtaglen96v1 56.24 56.73 61.80 T:riverkeyakv1 58.27 58.91 61.88 T:oceankeyakv2 59.18 59.60 59.97 T:ketjemajorv2 62.61 62.96 63.11 T:proest256otrv1 64.68 64.73 64.96 T:colm127v1 73.71 74.05 74.56 T:ketjejrv1 86.06 86.31 86.47 T:deoxysneq128128v13 88.29 88.56 88.59 T:present80n6t4silcv3 104.12 104.30 105.03 T:twine80n6clocv1 113.34 113.57 113.94 T:proest128otrv1 116.23 117.02 117.38 T:aezv1 129.85 130.05 135.41 T:deoxysneq256128v13 137.50 137.75 138.55 T:seakeyakv1 138.99 139.72 140.16 T:ketjejrv2 144.28 144.41 144.55 T:deoxyseq128128v13 146.02 146.33 147.51 T:led80n6t4silcv3 148.13 148.77 149.60 T:lunarkeyakv2 216.87 217.41 218.08 T:deoxyseq256128v13 250.41 250.69 251.10 T:oceankeyakv1 2224.91? 2252.08? 3013.15? T:acorn128 3451.05 3451.12 3451.32 T:present80n6t4silcv2 3469.11 3469.30 3469.43 T:present80n6silcv1 6580.77 6588.91 6599.33 T:led80n6t4silcv2 6652.95 6655.20 6664.27 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.12? 1.17? 1.55? T:aegis128 1.26? 1.34? 1.86? aegis128l 1.20? 1.59? 2.08? T:aegis128l 1.61? 1.62? 1.84? T:aezv5 1.65? 1.73? 1.98? T:tiaoxinv1 1.73? 1.80? 2.34? T:tiaoxinv2 1.68? 1.91? 2.13? aegis256 1.80? 2.01? 2.80? T:aezv3 1.94? 2.02? 2.26? T:aezv4 2.47? 2.55? 2.78? T:aeadaes128ocbtaglen128v1 3.02? 3.09? 3.38? T:aeadaes256ocbtaglen128v1 3.30 3.31 3.34 T:aes128otrpv3 3.42 3.44 3.45 T:aes128otrsv3 3.76 3.80 3.95 T:aes256otrpv3 3.89 3.93 3.98 T:aes128n12t8clocv3 3.90? 3.93? 4.77? T:aes128n12t8clocv2 3.91 3.93 3.95 T:aes128n8t8clocv2 4.27 4.28 4.30 T:aes256otrsv3 4.26? 4.30? 5.38? T:colm0v1 4.30 4.35 4.49 T:aes128otrcv3 4.43? 4.61? 7.31? T:aeadaes192ocbtaglen128v1 4.64 4.66 4.70 T:aes128n12t8silcv2 4.70? 4.74? 5.84? T:aes128n12t8silcv3 4.54? 4.75? 5.10? T:morus640128v1 4.72 4.75 4.79 T:aes128n8t8silcv2 4.73 4.91 5.20 T:morus640128v2 4.99 5.07 5.45 T:deoxysneq128128v1 5.14? 5.27? 5.87? T:deoxysneq256128v1 5.34 5.36 5.39 T:aes256otrcv3 5.73 5.81 5.97 T:morus1280256v1 5.85 5.92 6.12 T:deoxysi128v141 5.87 5.93 6.18 T:morus1280256v2 5.92 5.98 6.03 aes256gcmv1 5.95 6.05 6.12 T:aes128gcmv1 6.50 6.67 7.20 T:morus1280128v2 6.59 6.78 7.20 T:morus1280128v1 7.04 7.07 7.29 T:deoxysi256v141 7.37 7.38 7.38 T:aesjambuv1 7.43 7.45 7.52 T:deoxyseq128128v1 8.09? 8.18? 9.07? T:deoxyseq256128v1 9.27 9.36 9.56 T:norx6441v1 9.47 9.51 9.52 T:norx3241v1 9.63 9.67 9.74 T:norx6441v3 9.65 9.67 9.75 T:norx3241v3 9.59 9.68 9.70 T:norx6441v2 9.67 9.70 9.73 T:norx3241v2 9.81 10.08 10.33 ascon128av12 9.66 10.17 10.38 T:ascon128av11 10.59 10.71 10.85 T:ascon96v1 11.33 11.45 11.77 T:deoxysii128v141 12.30 12.44 12.70 T:ascon128v1 12.37 12.72 13.21 T:ascon128v11 12.48 12.89 13.10 ascon128v12 13.34 13.53 13.84 T:deoxysii256v141 13.59 13.73 13.92 T:norx6461v1 13.98 14.05 14.09 T:norx6461v2 14.03 14.07 14.12 T:norx3261v3 14.07 14.07 14.20 T:norx6461v3 14.11 14.14 14.16 T:norx3261v2 15.89 15.98 16.65 T:lakekeyakv1 16.14 16.19 16.19 T:norx3261v1 17.86 18.05 18.42 T:riverkeyakv2 19.04 19.70 20.30 T:lakekeyakv2 20.05 20.12 20.15 T:norx6444v3 22.73 22.76 22.78 T:twine80n6t4clocv3 23.98 23.99 24.03 T:twine80n6t4clocv2 24.52 24.59 24.86 T:aes128otrsv2 24.50 24.65 24.86 T:aes128otrsv1 24.81 24.88 25.29 T:aes128n8clocv1 24.76 24.95 25.37 T:aes128n12clocv1 24.90 24.95 25.09 T:aes128otrpv2 24.95 25.23 25.64 T:aes128otrpv1 27.45 27.51 28.05 T:aes128n12silcv1 27.43 27.56 27.85 T:aes128n8silcv1 30.59 30.86 31.05 T:acorn128v3 30.80 30.94 31.03 T:aes256otrsv1 30.92 31.09 31.31 T:aes256otrsv2 31.16 31.21 31.57 T:acorn128v2 31.29 31.36 31.48 T:aes256otrpv2 31.30 31.48 31.80 T:aes256otrpv1 34.77 34.97 35.16 T:ketjeminorv2 36.48 36.79 37.41 T:seakeyakv2 39.23 39.48 39.58 T:norx6444v2 43.95 44.08 44.65 T:norx6444v1 48.73 48.83 49.16 T:aeadaes128ocbtaglen64v1 48.75 48.95 49.34 T:aeadaes128ocbtaglen96v1 48.88? 49.34? 55.97? T:ketjesrv1 54.30 55.12 55.58 T:ketjesrv2 55.90 55.97 56.20 T:aeadaes192ocbtaglen64v1 55.89 56.09 56.21 T:aeadaes192ocbtaglen96v1 56.41 57.04 61.90 T:riverkeyakv1 58.28 58.66 61.62 T:oceankeyakv2 59.22 59.29 59.69 T:ketjemajorv2 64.03 64.12 64.70 T:proest256otrv1 64.93 65.06 65.55 T:aeadaes256ocbtaglen64v1 65.45? 65.91? 77.73? T:aeadaes256ocbtaglen96v1 72.15 72.46 72.75 T:colm127v1 74.85 75.02 75.70 T:ketjejrv1 88.38 88.58 88.95 T:present80n6t4silcv3 100.42 100.58 100.60 T:deoxysneq128128v13 103.55 103.73 104.09 T:twine80n6clocv1 114.08 114.53 114.95 T:proest128otrv1 119.34 119.52 119.80 T:aezv1 137.12 137.17 137.30 T:seakeyakv1 140.24 140.46 141.55 T:ketjejrv2 144.47 144.59 144.91 T:deoxyseq128128v13 145.86 147.12 148.06 T:led80n6t4silcv3 148.29 148.41 148.73 T:lunarkeyakv2 145.79 150.04 150.54 T:deoxysneq256128v13 216.48 217.16 218.29 T:deoxyseq256128v13 250.39 250.66 251.10 T:oceankeyakv1 2251.01? 2255.53? 2983.20? T:acorn128 3451.59 3451.94 3461.16 T:present80n6t4silcv2 3468.59 3468.77 3469.24 T:present80n6silcv1 6577.07 6594.28 6596.80 T:led80n6t4silcv2 6649.29 6658.32 6661.94 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.13? 1.16? 1.30? T:aegis128 1.20? 1.20? 1.53? T:aegis128l 1.23? 1.27? 1.50? aegis128l 1.35? 1.36? 1.71? T:aezv5 1.34 1.44 1.44 T:aezv3 1.56? 1.73? 2.25? T:tiaoxinv2 1.57? 1.88? 2.37? T:aezv4 1.66? 1.91? 2.20? T:tiaoxinv1 2.31 2.38 2.39 T:aeadaes128ocbtaglen128v1 1.73? 2.60? 2.69? aegis256 2.96 3.04 3.08 T:aeadaes256ocbtaglen128v1 3.27 3.29 3.29 T:aes128otrpv3 3.39 3.45 3.45 T:aes128otrsv3 3.75 3.76 3.77 T:aes256otrpv3 3.77? 3.79? 4.59? T:aes128n8t8clocv2 3.76? 3.80? 4.61? T:aes128n12t8clocv3 3.78? 3.80? 4.62? T:aes128n12t8clocv2 4.26 4.28 4.30 T:aes256otrsv3 4.22 4.30 4.38 T:morus640128v1 4.27 4.30 4.30 T:aes128otrcv3 4.38? 4.43? 7.22? T:aeadaes192ocbtaglen128v1 4.56? 4.56? 5.51? T:aes128n12t8silcv2 4.55 4.58 4.65 T:morus640128v2 4.63? 4.66? 5.50? T:colm0v1 4.66 4.66 4.70 T:aes128n8t8silcv2 4.66? 4.66? 5.76? T:aes128n12t8silcv3 4.84 4.89 4.98 T:deoxysneq128128v1 4.95 4.99 5.27 T:deoxysneq256128v1 5.31 5.33 5.34 T:aes256otrcv3 5.48 5.52 5.60 T:morus1280256v1 5.80 5.87 5.98 T:morus1280256v2 5.86 5.88 5.91 T:aes128gcmv1 5.84 5.92 5.96 T:deoxysi128v141 5.92 5.97 6.00 aes256gcmv1 6.42 6.42 6.47 T:morus1280128v2 6.54 6.55 6.60 T:morus1280128v1 6.98 7.08 7.08 T:deoxysi256v141 7.36 7.37 7.39 T:aesjambuv1 7.48 8.11 8.18 T:deoxyseq128128v1 8.08 8.20 8.25 T:deoxyseq256128v1 9.34 9.34 9.46 T:norx6441v1 9.51 9.52 9.52 T:norx3241v1 9.62 9.64 9.70 T:norx3241v3 9.63 9.66 9.76 T:norx6441v3 9.59 9.68 9.70 T:norx6441v2 9.60 9.70 9.73 T:norx3241v2 9.52 9.79 10.12 T:ascon128av11 9.77 9.86 10.08 ascon128av12 9.98 10.19 10.44 T:ascon96v1 11.20 11.27 11.34 T:deoxysii128v141 12.16 12.31 12.58 T:ascon128v11 12.29 12.45 12.75 T:ascon128v1 12.56 12.62 12.75 ascon128v12 13.28 13.32 13.34 T:deoxysii256v141 13.76 13.82 13.93 T:norx6461v1 13.80 13.92 13.95 T:norx6461v2 14.05 14.06 14.19 T:norx6461v3 14.12 14.12 14.16 T:norx3261v2 14.06 14.12 14.14 T:norx3261v3 16.04 16.16 16.35 T:lakekeyakv1 16.15 16.16 16.19 T:norx3261v1 17.96 18.16 18.24 T:riverkeyakv2 19.13 19.40 20.23 T:lakekeyakv2 20.07 20.16 20.16 T:norx6444v3 22.69 22.73 22.74 T:twine80n6t4clocv3 23.85 23.88 24.55 T:twine80n6t4clocv2 24.29 24.41 24.51 T:aes128n8clocv1 24.35 24.42 25.19 T:aes128n12clocv1 24.41 24.59 24.72 T:aes128otrsv1 24.30 24.63 24.89 T:aes128otrsv2 24.94 25.09 25.60 T:aes128otrpv1 24.96 25.12 25.23 T:aes128otrpv2 27.30 27.38 27.50 T:aes128n12silcv1 27.37 27.38 27.65 T:aes128n8silcv1 29.97 30.16 30.55 T:acorn128v3 30.44 30.44 30.66 T:acorn128v2 30.90 31.02 31.23 T:aes256otrsv2 30.93 31.17 31.33 T:aes256otrsv1 31.32 31.38 31.50 T:aes256otrpv1 31.42 31.49 31.82 T:aes256otrpv2 34.96 35.02 35.36 T:ketjeminorv2 36.61 36.76 36.95 T:seakeyakv2 39.32 39.57 39.66 T:norx6444v2 43.95 44.02 44.27 T:norx6444v1 48.63 48.70 48.81 T:aeadaes128ocbtaglen64v1 48.66 48.83 49.09 T:aeadaes128ocbtaglen96v1 49.04? 49.38? 56.11? T:ketjesrv1 53.79 53.83 53.97 T:ketjesrv2 55.73 55.77 55.92 T:aeadaes192ocbtaglen64v1 55.80 55.96 56.09 T:aeadaes192ocbtaglen96v1 56.31 56.53 61.69 T:riverkeyakv1 58.09 58.29 61.61 T:oceankeyakv2 59.42 59.44 59.94 T:ketjemajorv2 61.23 61.44 61.66 T:proest256otrv1 64.70 65.00 65.12 T:aeadaes256ocbtaglen64v1 64.95? 65.15? 77.58? T:aeadaes256ocbtaglen96v1 71.85 72.05 72.28 T:colm127v1 74.75 75.09 75.27 T:ketjejrv1 88.43 88.48 88.59 T:present80n6t4silcv3 100.22 100.46 100.78 T:deoxysneq128128v13 103.70 103.77 103.95 T:twine80n6clocv1 114.08 114.36 115.15 T:proest128otrv1 119.09 119.30 119.49 T:aezv1 137.30 137.37 137.65 T:seakeyakv1 139.45 139.95 140.47 T:ketjejrv2 144.69 144.88 145.25 T:deoxyseq128128v13 145.72 146.16 147.39 T:led80n6t4silcv3 147.59 147.96 148.18 T:lunarkeyakv2 145.90 149.65 150.41 T:deoxysneq256128v13 216.24 216.45 216.72 T:deoxyseq256128v13 250.30 250.59 251.33 T:oceankeyakv1 2256.68? 2259.26? 2972.23? T:acorn128 3451.06 3451.47 3452.30 T:present80n6t4silcv2 3468.51 3468.86 3469.12 T:present80n6silcv1 6571.65 6580.15 6588.99 T:led80n6t4silcv2 6669.46 6670.09 6673.32 T:led80n6silcv1