VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i3-6100; 2 x 3700MHz; skydell, supercop-20260330

[Page version: 20260522 07:41:06]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21 0.21 0.22 T:tiaoxinv2 0.21 0.21 0.22 T:tiaoxinv1 0.25 0.25 0.26 aegis128l 0.25 0.25 0.26 T:aegis128l 0.38 0.40 0.42 aegis256 0.41 0.41 0.42 T:aegis256 0.41 0.42 0.42 T:aegis128 0.61 0.62 0.63 T:aezv4 0.62 0.62 0.63 T:aezv5 0.62 0.62 0.63 T:aezv3 0.63 0.63 0.64 T:morus1280128v1 0.63 0.63 0.64 T:aes128otrcv3 0.63 0.63 0.65 T:morus1280256v1 0.63 0.63 0.64 T:morus1280256v2 0.63 0.64 0.65 T:morus1280128v2 0.65 0.65 0.66 T:aes128otrpv3 0.65 0.66 0.67 T:aes128otrsv3 0.66 0.66 0.67 T:aeadaes128ocbtaglen128v1 0.58? 0.75? 0.94? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.85 0.88 0.89 T:deoxysi128v141 0.87 0.88 0.88 T:aes256otrcv3 0.89 0.89 0.90 T:aes256otrpv3 0.90 0.90 0.91 T:aes256otrsv3 0.90 0.91 0.91 T:aeadaes256ocbtaglen128v1 0.99 0.99 1.00 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysi256v141 1.07 1.08 1.08 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 1.17 1.18 1.20 T:norx6444v3 1.19 1.20 1.21 T:aes128gcmv1 1.44 1.45 1.46 aes256gcmv1 1.60 1.61 1.62 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 1.77 1.78 1.80 T:deoxyseq128128v1 2.00 2.02 2.03 T:deoxysii256v141 2.01 2.02 2.04 T:deoxyseq256128v1 2.03 2.05 2.07 T:norx6441v2 2.07 2.09 2.11 T:norx6441v3 2.06 2.10 2.14 T:lunarkeyakv2 2.45 2.47 2.56 T:norx6441v1 2.75 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128n8t8clocv2 2.75 2.75 2.75 T:aes128n12t8silcv2 2.75 2.75 2.75 T:aes128n12t8silcv3 2.75 2.75 2.75 T:aes128n12t8clocv2 2.75 2.75 2.76 T:aes128n12t8clocv3 2.80 2.82 2.84 T:seakeyakv2 2.83 2.88 2.92 T:oceankeyakv2 3.09 3.12 3.15 T:norx6461v2 3.10 3.12 3.15 T:norx6461v3 3.75 3.77 3.80 T:norx6461v1 3.84 3.86 3.88 T:norx6444v2 3.87 3.88 3.89 T:norx3241v3 3.89 3.93 3.97 T:norx3241v2 4.12 4.14 4.17 T:lakekeyakv1 4.33 4.38 4.42 T:norx6444v1 4.39 4.40 4.42 T:lakekeyakv2 4.66 4.70 4.73 T:norx3241v1 5.59 5.62 5.64 T:acorn128v3 5.83 5.84 5.84 T:aesjambuv1 5.79 5.85 5.88 T:norx3261v3 6.01 6.04 6.07 T:norx3261v2 6.80 6.84 6.87 T:acorn128v2 7.23 7.25 7.26 T:norx3261v1 7.29 7.37 7.48 T:ketjemajorv2 7.38 7.40 7.42 T:ascon96v1 7.44 7.50 7.54 T:ascon128av11 7.55 7.58 7.62 ascon128av12 9.82 9.85 9.88 T:riverkeyakv2 10.24 10.47 10.50 T:ketjeminorv2 10.87 10.90 10.92 ascon128v12 10.87 10.91 10.93 T:ascon128v11 10.89 10.91 10.93 T:ascon128v1 13.49 13.53 13.56 T:aes128otrsv1 13.53 13.57 13.59 T:aes128otrpv2 13.56 13.58 13.60 T:aes128otrsv2 13.72 13.75 13.90 T:aes128otrpv1 14.62 14.63 14.64 T:twine80n6t4clocv3 15.60 15.62 15.67 T:twine80n6t4clocv2 17.47 17.50 17.52 T:aes256otrsv1 17.51 17.55 17.60 T:aes256otrpv1 17.67 17.70 17.73 T:aes256otrsv2 17.82 17.88 17.98 T:aes256otrpv2 23.08 23.12 23.16 T:aes128n12clocv1 23.14 23.17 23.21 T:aes128n8clocv1 24.65 24.67 24.72 T:aeadaes128ocbtaglen96v1 24.65 24.68 24.69 T:aeadaes128ocbtaglen64v1 27.08 27.11 27.13 T:proest256otrv1 29.04 29.07 29.09 T:aeadaes192ocbtaglen64v1 29.06 29.07 29.09 T:aeadaes192ocbtaglen96v1 31.33 31.41 31.67 T:ketjesrv1 32.23 32.34 32.52 T:ketjesrv2 33.45 33.48 33.51 T:aeadaes256ocbtaglen64v1 33.47 33.49 33.51 T:aeadaes256ocbtaglen96v1 50.51 50.55 50.59 T:proest128otrv1 54.48 54.53 54.56 T:colm127v1 59.06 59.10 59.12 T:ketjejrv1 70.59 70.64 71.01 T:present80n6t4silcv3 79.99 80.03 80.06 T:deoxysneq128128v13 92.73 92.88 93.34 T:ketjejrv2 111.90 111.98 112.08 T:deoxysneq256128v13 124.87 124.96 125.02 T:led80n6t4silcv3 158.33 158.69 159.04 T:aezv1 159.36 159.45 159.54 T:deoxyseq128128v13 223.27 224.01 230.16 T:deoxyseq256128v13 324.38 327.38 327.79 T:acorn128 4021.68 4023.34 4025.18 T:led80n6silcv1 4028.57 4035.89 4061.27 T:led80n6t4silcv2 4343.81 4344.28 4347.17 T:present80n6silcv1 4344.54 4345.16 4345.71 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.24 0.25 0.25 aegis128l 0.25 0.25 0.26 T:aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.37 0.37 0.37 T:tiaoxinv2 0.40 0.40 0.41 T:aegis256 0.45 0.46 0.46 T:aegis128 0.49 0.50 0.50 aegis256 0.61 0.62 0.62 T:aezv4 0.61 0.62 0.62 T:aezv5 0.62 0.62 0.62 T:aezv3 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v2 0.64 0.66 0.67 T:morus1280256v2 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.69 T:aes128otrcv3 0.69 0.70 0.71 T:aes128otrsv3 0.69 0.70 0.71 T:aes128otrpv3 0.57? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.91 0.92 0.93 T:aes256otrsv3 0.92 0.92 0.93 T:aes256otrcv3 0.92 0.93 0.94 T:aes256otrpv3 0.98 0.99 0.99 T:aeadaes256ocbtaglen128v1 1.04 1.05 1.06 T:aes128gcmv1 1.07 1.08 1.09 T:morus640128v1 1.07 1.09 1.10 T:morus640128v2 1.13 1.15 1.17 T:deoxysi128v141 1.15 1.17 1.18 T:norx6444v3 1.20 1.21 1.22 T:deoxysneq128128v1 1.29 1.30 1.31 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.45 1.46 1.48 aes256gcmv1 1.68 1.69 1.70 T:colm0v1 1.75 1.76 1.76 T:deoxysii128v141 1.98 2.00 2.02 T:norx6441v3 2.00 2.01 2.02 T:deoxysii256v141 2.00 2.02 2.05 T:norx6441v2 2.12 2.17 2.22 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.42 2.45 2.49 T:norx6441v1 2.52 2.53 2.53 T:deoxyseq256128v1 2.72 2.72 2.73 T:aes128n12t8clocv3 2.71 2.72 2.73 T:aes128n12t8silcv2 2.72 2.72 2.73 T:aes128n12t8clocv2 2.72 2.72 2.74 T:aes128n8t8silcv2 2.71 2.72 2.73 T:aes128n12t8silcv3 2.71 2.72 2.74 T:aes128n8t8clocv2 2.87 2.90 2.93 T:seakeyakv2 2.90 2.95 2.99 T:oceankeyakv2 3.06 3.09 3.12 T:norx6461v3 3.07 3.10 3.13 T:norx6461v2 3.72 3.74 3.77 T:norx3241v2 3.73 3.75 3.79 T:norx6461v1 3.74 3.76 3.77 T:norx3241v3 3.83 3.86 3.89 T:norx6444v2 4.22 4.23 4.25 T:lakekeyakv1 4.30 4.34 4.37 T:norx6444v1 4.36 4.38 4.40 T:lakekeyakv2 4.50 4.53 4.55 T:norx3241v1 5.65 5.69 5.73 T:norx3261v3 5.85 5.88 5.90 T:norx3261v2 5.99 5.99 5.99 T:aesjambuv1 6.90 6.97 7.08 T:ketjemajorv2 6.89 6.97 7.04 T:acorn128v2 7.07 7.08 7.10 T:norx3261v1 7.21 7.23 7.25 T:acorn128v3 7.38 7.40 7.43 ascon128av12 7.55 7.58 7.61 T:ascon96v1 7.56 7.61 7.64 T:ascon128av11 9.94 9.97 10.00 T:riverkeyakv2 10.23 10.30 10.33 T:ketjeminorv2 10.59 10.62 10.65 T:ascon128v1 10.58 10.62 10.67 T:ascon128v11 10.86 10.88 10.91 ascon128v12 14.04 14.08 14.12 T:aes128otrpv1 14.19 14.22 14.26 T:aes128otrpv2 14.25 14.29 14.31 T:aes128otrsv2 14.51 14.54 14.57 T:aes128otrsv1 14.62 14.63 14.64 T:twine80n6t4clocv3 15.47 15.49 15.50 T:twine80n6t4clocv2 18.08 18.12 18.16 T:aes256otrpv2 18.10 18.21 18.24 T:aes256otrsv2 18.47 18.52 18.55 T:aes256otrsv1 18.50 18.53 18.56 T:aes256otrpv1 22.20 22.24 22.27 T:aes128n12clocv1 22.58 22.64 22.68 T:aes128n8clocv1 27.03 27.07 27.11 T:proest256otrv1 32.08 32.14 32.23 T:ketjesrv2 32.10 32.15 32.41 T:ketjesrv1 33.35 33.40 33.45 T:aeadaes128ocbtaglen96v1 33.40 33.48 33.61 T:aeadaes128ocbtaglen64v1 39.77 39.89 39.95 T:aeadaes192ocbtaglen96v1 39.89 39.94 39.98 T:aeadaes192ocbtaglen64v1 46.31 46.38 46.43 T:aeadaes256ocbtaglen64v1 46.33 46.39 46.43 T:aeadaes256ocbtaglen96v1 50.92 50.97 51.02 T:proest128otrv1 60.01 60.05 60.08 T:ketjejrv1 70.57 70.64 70.97 T:present80n6t4silcv3 72.45 72.64 72.81 T:colm127v1 93.95 94.04 94.45 T:ketjejrv2 107.48 107.62 107.71 T:deoxysneq128128v13 124.88 124.96 125.04 T:led80n6t4silcv3 150.95 151.21 151.67 T:deoxysneq256128v13 158.64 159.07 159.42 T:aezv1 159.27 159.52 159.57 T:deoxyseq128128v13 223.11 223.89 230.10 T:deoxyseq256128v13 347.87 349.18 349.55 T:acorn128 4021.38 4022.01 4022.70 T:led80n6silcv1 4026.52 4032.57 4065.68 T:led80n6t4silcv2 4344.09 4344.69 4346.41 T:present80n6t4silcv2 4344.28 4347.16 4347.94 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.24 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.26 T:aegis128l 0.27 0.27 0.28 aegis128l 0.36 0.37 0.37 T:tiaoxinv1 0.37 0.37 0.38 T:tiaoxinv2 0.40 0.40 0.41 T:aegis256 0.45 0.46 0.46 T:aegis128 0.50 0.50 0.50 aegis256 0.63 0.64 0.65 T:morus1280256v1 0.64 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280128v1 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 0.68 0.68 0.69 T:aes128otrcv3 0.69 0.70 0.70 T:aes128otrpv3 0.69 0.70 0.70 T:aes128otrsv3 0.65? 0.75? 0.94? T:aeadaes192ocbtaglen128v1 0.92 0.92 0.92 T:aes256otrcv3 0.92 0.92 0.93 T:aes256otrsv3 0.92 0.93 0.93 T:aes256otrpv3 0.98 0.99 0.99 T:aeadaes256ocbtaglen128v1 1.04 1.05 1.06 T:aes128gcmv1 1.07 1.07 1.09 T:morus640128v1 1.09 1.11 1.12 T:morus640128v2 1.14 1.15 1.16 T:deoxysi128v141 1.15 1.17 1.18 T:norx6444v3 1.20 1.21 1.22 T:deoxysneq128128v1 1.30 1.30 1.31 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.45 1.46 1.48 aes256gcmv1 1.67 1.69 1.70 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 2.00 2.01 2.02 T:deoxysii256v141 1.99 2.01 2.04 T:norx6441v3 2.00 2.01 2.03 T:norx6441v2 2.17 2.20 2.23 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.43 2.45 2.47 T:norx6441v1 2.52 2.52 2.53 T:deoxyseq256128v1 2.70 2.72 2.73 T:aes128n8t8clocv2 2.71 2.72 2.72 T:aes128n12t8clocv2 2.71 2.72 2.73 T:aes128n12t8clocv3 2.72 2.72 2.73 T:aes128n8t8silcv2 2.72 2.72 2.73 T:aes128n12t8silcv3 2.71 2.72 2.73 T:aes128n12t8silcv2 2.90 2.94 2.96 T:seakeyakv2 2.93 2.97 3.01 T:oceankeyakv2 3.07 3.09 3.11 T:norx6461v2 3.07 3.10 3.15 T:norx6461v3 3.71 3.74 3.77 T:norx6461v1 3.72 3.75 3.77 T:norx3241v2 3.74 3.75 3.77 T:norx3241v3 3.85 3.88 3.91 T:norx6444v2 4.24 4.25 4.27 T:lakekeyakv1 4.32 4.36 4.39 T:norx6444v1 4.39 4.40 4.42 T:lakekeyakv2 4.51 4.53 4.55 T:norx3241v1 5.66 5.69 5.74 T:norx3261v3 5.85 5.88 5.90 T:norx3261v2 5.99 5.99 5.99 T:aesjambuv1 6.89 6.98 7.06 T:acorn128v2 7.06 7.08 7.09 T:norx3261v1 7.00 7.08 7.20 T:ketjemajorv2 7.22 7.24 7.26 T:acorn128v3 7.38 7.41 7.43 ascon128av12 7.55 7.57 7.60 T:ascon96v1 7.56 7.61 7.66 T:ascon128av11 9.97 10.01 10.04 T:riverkeyakv2 10.29 10.32 10.36 T:ketjeminorv2 10.59 10.62 10.67 T:ascon128v1 10.59 10.62 10.64 T:ascon128v11 10.86 10.89 10.91 ascon128v12 14.06 14.09 14.13 T:aes128otrpv1 14.19 14.23 14.27 T:aes128otrpv2 14.28 14.31 14.34 T:aes128otrsv2 14.53 14.56 14.59 T:aes128otrsv1 14.62 14.63 14.64 T:twine80n6t4clocv3 15.47 15.48 15.49 T:twine80n6t4clocv2 18.11 18.14 18.17 T:aes256otrpv2 18.21 18.24 18.26 T:aes256otrsv2 18.52 18.54 18.57 T:aes256otrpv1 18.51 18.55 18.58 T:aes256otrsv1 22.19 22.22 22.25 T:aes128n12clocv1 22.60 22.63 22.68 T:aes128n8clocv1 27.02 27.05 27.10 T:proest256otrv1 32.13 32.17 32.41 T:ketjesrv1 32.08 32.23 32.44 T:ketjesrv2 33.36 33.39 33.43 T:aeadaes128ocbtaglen96v1 33.38 33.46 33.61 T:aeadaes128ocbtaglen64v1 39.79 39.90 39.96 T:aeadaes192ocbtaglen96v1 39.87 39.93 39.98 T:aeadaes192ocbtaglen64v1 46.34 46.36 46.41 T:aeadaes256ocbtaglen64v1 46.35 46.40 46.44 T:aeadaes256ocbtaglen96v1 50.93 50.97 51.02 T:proest128otrv1 60.02 60.06 60.10 T:ketjejrv1 70.58 70.62 71.06 T:present80n6t4silcv3 71.30 71.54 71.64 T:colm127v1 93.95 94.02 94.40 T:ketjejrv2 107.51 107.66 107.77 T:deoxysneq128128v13 124.88 124.95 125.02 T:led80n6t4silcv3 151.13 151.32 151.69 T:deoxysneq256128v13 158.52 158.84 159.30 T:aezv1 159.37 159.47 159.56 T:deoxyseq128128v13 223.07 223.81 230.07 T:deoxyseq256128v13 347.86 349.20 349.55 T:acorn128 4021.04 4021.94 4022.59 T:led80n6silcv1 4027.25 4032.46 4065.51 T:led80n6t4silcv2 4343.88 4344.34 4346.80 T:present80n6silcv1 4344.31 4344.71 4345.28 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.20 0.20 0.20 T:tiaoxinv2 0.20 0.20 0.20 T:tiaoxinv1 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aegis128l 0.40 0.41 0.41 aegis256 0.42 0.43 0.43 T:aegis256 0.43 0.43 0.44 T:aezv5 0.43 0.43 0.44 T:aezv4 0.43 0.44 0.44 T:aezv3 0.44 0.44 0.44 T:aegis128 0.61 0.61 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.62 T:morus1280128v1 0.61 0.62 0.62 T:morus1280128v2 0.63 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.65 0.65 0.65 T:aes128otrpv3 0.65 0.65 0.66 T:aes128otrcv3 0.64? 0.75? 0.83? T:aeadaes192ocbtaglen128v1 0.80 0.81 0.82 T:aes128gcmv1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.88 0.88 T:deoxysi128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.89 0.89 T:aes256otrpv3 0.89 0.90 0.90 T:aes256otrcv3 0.93 0.93 0.94 aes256gcmv1 0.99 1.00 1.00 T:deoxysneq256128v1 1.00 1.01 1.02 T:deoxysi256v141 1.04 1.04 1.05 T:morus640128v2 1.04 1.04 1.05 T:morus640128v1 1.12 1.12 1.12 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.32 1.33 1.34 T:deoxyseq128128v1 1.50 1.51 1.52 T:deoxysii256v141 1.50 1.51 1.52 T:deoxyseq256128v1 1.62 1.64 1.65 T:norx6444v3 1.69 1.69 1.69 T:aes128otrsv3 2.04 2.06 2.08 T:norx6441v2 2.08 2.09 2.11 T:norx6441v3 2.30 2.31 2.31 T:aes256otrsv3 2.32 2.34 2.35 T:seakeyakv2 2.38 2.40 2.42 T:oceankeyakv2 2.46 2.49 2.58 T:norx6441v1 2.73 2.73 2.74 T:aes128n8t8clocv2 2.73 2.74 2.74 T:aes128n12t8clocv3 2.73 2.74 2.74 T:aes128n12t8clocv2 2.72 2.74 2.75 T:aes128n8t8silcv2 2.72 2.74 2.75 T:aes128n12t8silcv2 2.72 2.75 2.75 T:aes128n12t8silcv3 2.86 2.88 2.90 T:lunarkeyakv2 3.14 3.15 3.17 T:norx6461v3 3.16 3.18 3.20 T:norx6461v2 3.56 3.58 3.59 T:norx6444v2 3.72 3.74 3.75 T:norx6461v1 3.89 3.90 3.91 T:norx3241v3 3.90 3.91 3.92 T:lakekeyakv1 3.95 3.96 3.97 T:lakekeyakv2 3.94 3.98 4.00 T:norx3241v2 4.28 4.34 4.37 T:norx6444v1 4.69 4.71 4.73 T:norx3241v1 5.79 5.79 5.80 T:aesjambuv1 5.87 5.90 6.00 T:norx3261v3 5.95 5.97 5.99 T:norx3261v2 6.48 6.53 6.59 T:ketjemajorv2 6.54 6.56 6.57 T:acorn128v3 7.02 7.05 7.08 T:acorn128v2 7.14 7.16 7.17 T:riverkeyakv2 7.23 7.25 7.26 T:norx3261v1 7.32 7.33 7.35 T:ascon96v1 7.37 7.44 7.48 T:ascon128av11 7.46 7.48 7.50 ascon128av12 9.04 9.14 9.15 T:ketjeminorv2 10.86 10.88 10.90 T:ascon128v11 10.86 10.89 10.90 T:ascon128v1 10.88 10.90 10.93 ascon128v12 12.71 12.73 12.74 T:aes128otrsv1 12.76 12.79 12.81 T:aes128otrsv2 12.91 12.94 12.97 T:aes128otrpv2 12.98 13.03 13.09 T:aes128otrpv1 14.38 14.40 14.42 T:twine80n6t4clocv3 15.33 15.36 15.38 T:twine80n6t4clocv2 16.76 16.78 16.80 T:aes256otrsv1 16.85 16.88 16.90 T:aes256otrsv2 16.87 16.93 17.00 T:aes256otrpv1 17.13 17.16 17.26 T:aes256otrpv2 17.53 17.59 17.62 T:aes128n12clocv1 17.61 17.65 17.68 T:aes128n8clocv1 24.43 24.45 24.48 T:aeadaes128ocbtaglen96v1 24.44 24.46 24.47 T:aeadaes128ocbtaglen64v1 27.28 27.30 27.32 T:proest256otrv1 28.38 28.44 28.57 T:ketjesrv1 28.82 28.82 28.84 T:aeadaes192ocbtaglen96v1 28.82 28.84 28.86 T:aeadaes192ocbtaglen64v1 29.60 29.68 29.73 T:ketjesrv2 33.25 33.26 33.27 T:aeadaes256ocbtaglen64v1 33.25 33.26 33.28 T:aeadaes256ocbtaglen96v1 40.18 40.21 40.23 T:colm127v1 51.01 51.05 51.09 T:proest128otrv1 53.23 53.34 53.48 T:ketjejrv1 70.05 70.09 70.44 T:present80n6t4silcv3 79.57 79.60 79.64 T:deoxysneq128128v13 89.79 89.86 90.37 T:ketjejrv2 104.68 104.91 105.00 T:aezv1 111.63 111.71 111.80 T:deoxysneq256128v13 118.95 119.03 119.13 T:deoxyseq128128v13 124.45 124.49 124.53 T:led80n6t4silcv3 166.81 167.37 172.13 T:deoxyseq256128v13 317.93 321.85 322.27 T:acorn128 3017.28 3018.57 3019.11 T:led80n6silcv1 3022.35 3025.47 3046.62 T:led80n6t4silcv2 3257.47 3257.64 3257.83 T:present80n6silcv1 3257.52 3257.71 3258.60 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.28 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.43 0.43 0.44 T:aezv4 0.43 0.43 0.44 T:aezv5 0.43 0.43 0.44 T:aezv3 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.61 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280256v1 0.62 0.63 0.63 T:morus1280128v2 0.62 0.63 0.63 T:morus1280128v1 0.63 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.67 0.67 0.67 T:aes128otrpv3 0.67 0.68 0.69 T:aes128otrcv3 0.73 0.74 0.74 T:aes128gcmv1 0.67? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.92 0.92 T:aes256otrcv3 0.92 0.92 0.93 T:aeadaes256ocbtaglen128v1 0.93 0.94 0.95 aes256gcmv1 1.00 1.01 1.02 T:deoxysi128v141 1.03 1.03 1.04 T:morus640128v1 1.03 1.04 1.04 T:morus640128v2 1.03 1.04 1.04 T:deoxysneq128128v1 1.14 1.15 1.16 T:deoxysi256v141 1.15 1.15 1.16 T:deoxysneq256128v1 1.16 1.19 1.19 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.62 1.63 1.64 T:norx6444v3 1.64 1.65 1.65 T:deoxyseq128128v1 1.71 1.71 1.71 T:aes128otrsv3 1.76 1.77 1.78 T:deoxyseq256128v1 2.02 2.05 2.06 T:norx6441v3 2.04 2.05 2.07 T:norx6441v2 2.31 2.31 2.31 T:aes256otrsv3 2.39 2.41 2.43 T:seakeyakv2 2.42 2.44 2.47 T:oceankeyakv2 2.45 2.48 2.54 T:norx6441v1 2.69 2.70 2.71 T:aes128n8t8silcv2 2.70 2.71 2.73 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.73 T:aes128n12t8clocv3 2.70 2.72 2.73 T:aes128n12t8silcv3 2.90 2.92 2.94 T:lunarkeyakv2 3.11 3.13 3.14 T:norx6461v3 3.12 3.14 3.16 T:norx6461v2 3.59 3.61 3.62 T:norx6444v2 3.66 3.67 3.69 T:norx6461v1 3.84 3.87 3.88 T:norx3241v3 3.86 3.89 3.92 T:norx3241v2 3.93 3.94 3.96 T:lakekeyakv2 3.94 3.95 3.96 T:lakekeyakv1 4.28 4.32 4.34 T:norx6444v1 4.60 4.61 4.63 T:norx3241v1 5.81 5.83 5.91 T:norx3261v3 5.86 5.86 5.87 T:aesjambuv1 5.85 5.87 5.88 T:norx3261v2 6.28 6.33 6.39 T:ketjemajorv2 7.17 7.18 7.19 T:norx3261v1 7.21 7.23 7.25 T:acorn128v2 7.21 7.24 7.27 T:riverkeyakv2 7.36 7.37 7.39 T:acorn128v3 7.37 7.39 7.42 ascon128av12 7.40 7.42 7.45 T:ascon96v1 7.41 7.43 7.46 T:ascon128av11 9.04 9.06 9.09 T:ketjeminorv2 10.75 10.77 10.78 T:ascon128v1 10.76 10.77 10.79 T:ascon128v11 10.84 10.87 10.89 ascon128v12 13.10 13.14 13.17 T:aes128otrsv2 13.15 13.19 13.21 T:aes128otrpv1 13.22 13.25 13.26 T:aes128otrsv1 13.22 13.26 13.28 T:aes128otrpv2 14.38 14.40 14.42 T:twine80n6t4clocv3 15.25 15.27 15.28 T:twine80n6t4clocv2 17.01 17.05 17.08 T:aes256otrsv2 17.16 17.19 17.21 T:aes128n12clocv1 17.20 17.23 17.27 T:aes256otrpv2 17.23 17.24 17.27 T:aes256otrsv1 17.30 17.35 17.38 T:aes128n8clocv1 17.32 17.37 17.47 T:aes256otrpv1 27.26 27.29 27.31 T:proest256otrv1 28.81 28.83 28.86 T:aeadaes128ocbtaglen96v1 28.78 28.84 28.92 T:ketjesrv1 28.82 28.85 28.94 T:aeadaes128ocbtaglen64v1 29.55 29.58 29.61 T:ketjesrv2 34.19 34.25 34.30 T:aeadaes192ocbtaglen96v1 34.25 34.28 34.30 T:aeadaes192ocbtaglen64v1 39.70 39.74 39.76 T:aeadaes256ocbtaglen96v1 39.74 39.77 39.81 T:aeadaes256ocbtaglen64v1 49.17 49.27 49.33 T:colm127v1 51.23 51.26 51.30 T:proest128otrv1 53.72 53.82 54.00 T:ketjejrv1 70.03 70.10 70.46 T:present80n6t4silcv3 90.45 90.50 90.88 T:ketjejrv2 93.39 93.44 93.49 T:deoxysneq128128v13 104.89 105.17 105.41 T:aezv1 118.95 119.06 119.19 T:deoxyseq128128v13 124.44 124.48 124.55 T:led80n6t4silcv3 131.14 131.33 131.66 T:deoxysneq256128v13 166.86 167.32 172.24 T:deoxyseq256128v13 337.40 339.62 339.94 T:acorn128 3016.36 3017.03 3017.64 T:led80n6silcv1 3020.99 3025.23 3048.41 T:led80n6t4silcv2 3257.43 3257.67 3257.99 T:present80n6silcv1 3257.58 3257.86 3258.79 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.24 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv5 0.24 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.26 0.26 0.26 aegis128l 0.27 0.28 0.28 T:tiaoxinv1 0.27 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.40 T:aegis256 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.61 0.62 0.62 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v2 0.62 0.62 0.63 T:morus1280256v2 0.62 0.63 0.63 T:morus1280128v1 0.63 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.67 0.67 0.67 T:aes128otrpv3 0.67 0.68 0.69 T:aes128otrcv3 0.73 0.74 0.74 T:aes128gcmv1 0.66? 0.75? 0.80? T:aeadaes192ocbtaglen128v1 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.92 0.92 T:aes256otrcv3 0.92 0.93 0.93 T:aeadaes256ocbtaglen128v1 0.93 0.93 0.95 aes256gcmv1 1.00 1.01 1.02 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v1 1.03 1.04 1.04 T:morus640128v2 1.04 1.04 1.04 T:deoxysneq128128v1 1.14 1.15 1.15 T:deoxysi256v141 1.15 1.16 1.16 T:deoxysneq256128v1 1.16 1.19 1.19 T:colm0v1 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.62 1.62 1.63 T:norx6444v3 1.64 1.65 1.66 T:deoxyseq128128v1 1.71 1.71 1.71 T:aes128otrsv3 1.76 1.76 1.77 T:deoxyseq256128v1 2.03 2.05 2.07 T:norx6441v3 2.04 2.05 2.07 T:norx6441v2 2.31 2.31 2.31 T:aes256otrsv3 2.41 2.42 2.44 T:seakeyakv2 2.43 2.46 2.47 T:oceankeyakv2 2.45 2.47 2.55 T:norx6441v1 2.69 2.70 2.73 T:aes128n8t8silcv2 2.69 2.70 2.72 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.70 2.72 2.73 T:aes128n12t8silcv3 2.92 2.94 2.96 T:lunarkeyakv2 3.11 3.12 3.14 T:norx6461v3 3.13 3.14 3.15 T:norx6461v2 3.60 3.62 3.63 T:norx6444v2 3.65 3.67 3.69 T:norx6461v1 3.84 3.86 3.88 T:norx3241v3 3.87 3.89 3.91 T:norx3241v2 3.95 3.96 3.97 T:lakekeyakv2 3.95 3.97 3.98 T:lakekeyakv1 4.29 4.33 4.34 T:norx6444v1 4.59 4.61 4.63 T:norx3241v1 5.81 5.84 5.90 T:norx3261v3 5.86 5.86 5.89 T:aesjambuv1 5.86 5.87 5.88 T:norx3261v2 6.29 6.35 6.40 T:ketjemajorv2 7.17 7.18 7.19 T:norx3261v1 7.19 7.24 7.26 T:acorn128v2 7.24 7.26 7.29 T:riverkeyakv2 7.36 7.37 7.39 T:acorn128v3 7.37 7.39 7.40 ascon128av12 7.39 7.41 7.43 T:ascon96v1 7.40 7.43 7.46 T:ascon128av11 9.06 9.09 9.11 T:ketjeminorv2 10.75 10.77 10.78 T:ascon128v11 10.76 10.78 10.79 T:ascon128v1 10.85 10.87 10.89 ascon128v12 13.14 13.17 13.21 T:aes128otrsv2 13.17 13.20 13.23 T:aes128otrpv1 13.23 13.25 13.27 T:aes128otrsv1 13.24 13.26 13.30 T:aes128otrpv2 14.38 14.40 14.43 T:twine80n6t4clocv3 15.26 15.28 15.31 T:twine80n6t4clocv2 17.07 17.10 17.12 T:aes256otrsv2 17.15 17.17 17.20 T:aes128n12clocv1 17.24 17.26 17.28 T:aes256otrsv1 17.24 17.26 17.29 T:aes256otrpv2 17.35 17.39 17.41 T:aes128n8clocv1 17.35 17.40 17.51 T:aes256otrpv1 27.27 27.29 27.31 T:proest256otrv1 28.79 28.82 28.86 T:ketjesrv1 28.81 28.84 28.86 T:aeadaes128ocbtaglen96v1 28.82 28.86 28.93 T:aeadaes128ocbtaglen64v1 29.55 29.58 29.61 T:ketjesrv2 34.20 34.26 34.30 T:aeadaes192ocbtaglen96v1 34.25 34.27 34.31 T:aeadaes192ocbtaglen64v1 39.71 39.74 39.76 T:aeadaes256ocbtaglen96v1 39.73 39.76 39.79 T:aeadaes256ocbtaglen64v1 48.62 48.72 48.78 T:colm127v1 51.24 51.27 51.30 T:proest128otrv1 53.71 53.76 53.95 T:ketjejrv1 70.05 70.09 70.42 T:present80n6t4silcv3 90.44 90.47 90.91 T:ketjejrv2 93.38 93.41 93.48 T:deoxysneq128128v13 104.88 105.06 105.21 T:aezv1 118.94 119.05 119.12 T:deoxyseq128128v13 124.44 124.50 124.55 T:led80n6t4silcv3 131.16 131.36 131.68 T:deoxysneq256128v13 166.80 167.37 172.14 T:deoxyseq256128v13 337.42 339.63 339.98 T:acorn128 3016.22 3016.84 3017.50 T:led80n6silcv1 3021.68 3025.37 3048.51 T:led80n6t4silcv2 3257.37 3257.53 3257.70 T:present80n6silcv1 3257.60 3257.90 3258.84 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv1 0.19 0.19 0.19 T:tiaoxinv2 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.26 T:aezv3 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.40 0.41 0.41 aegis256 0.41 0.42 0.43 T:aes128gcmv1 0.42 0.42 0.43 aes256gcmv1 0.45 0.45 0.46 T:aegis256 0.46 0.46 0.47 T:aegis128 0.59 0.59 0.60 T:morus1280128v2 0.59 0.60 0.60 T:morus1280256v2 0.59 0.60 0.60 T:morus1280128v1 0.59 0.60 0.61 T:morus1280256v1 0.62 0.62 0.63 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.66 T:aes128otrpv3 0.67 0.68 0.69 T:aes128otrcv3 0.61? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.86 0.87 0.88 T:deoxyseq128128v1 0.87 0.87 0.88 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.89 0.89 0.91 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.91 0.92 0.92 T:aes256otrcv3 0.98 0.99 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxyseq256128v1 0.98 1.00 1.02 T:deoxysii256v141 1.00 1.00 1.01 T:morus640128v1 1.00 1.01 1.01 T:morus640128v2 1.00 1.01 1.02 T:deoxysi256v141 1.83 1.87 1.90 T:oceankeyakv2 1.86 1.89 1.91 T:lunarkeyakv2 2.06 2.07 2.09 T:norx6441v2 2.05 2.07 2.10 T:norx6441v3 2.06 2.09 2.11 T:norx6444v3 2.28 2.31 2.33 T:seakeyakv2 2.45 2.48 2.59 T:norx6441v1 2.69 2.69 2.71 T:aes128n8t8silcv2 2.69 2.69 2.72 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128otrsv3 2.72 2.72 2.72 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.69 2.72 2.74 T:aes128n12t8silcv3 3.16 3.19 3.22 T:norx6461v3 3.22 3.25 3.29 T:norx6461v2 3.26 3.28 3.30 T:norx6444v2 3.62 3.64 3.65 T:lakekeyakv2 3.70 3.71 3.72 T:aes256otrsv3 3.71 3.75 3.78 T:lakekeyakv1 3.72 3.75 3.78 T:norx6461v1 3.90 3.93 3.95 T:norx3241v3 3.95 4.00 4.04 T:norx3241v2 4.24 4.28 4.30 T:norx6444v1 4.69 4.72 4.75 T:norx3241v1 5.57 5.70 5.76 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.86 5.88 5.91 T:norx3261v2 5.93 5.95 6.08 T:norx3261v3 6.76 6.79 6.82 T:riverkeyakv2 7.18 7.22 7.26 T:acorn128v2 7.24 7.25 7.26 T:norx3261v1 7.25 7.27 7.29 T:ascon96v1 7.35 7.37 7.39 ascon128av12 7.27 7.37 7.42 T:ascon128av11 7.48 7.50 7.52 T:acorn128v3 7.93 7.96 8.00 T:ketjeminorv2 10.82 10.84 10.87 T:ascon128v11 10.83 10.86 10.88 T:ascon128v1 10.78 10.88 10.91 ascon128v12 11.90 11.93 11.96 T:aes128otrsv2 11.92 11.94 11.96 T:aes128otrsv1 12.16 12.18 12.20 T:aes128n12clocv1 12.16 12.19 12.20 T:aes128n8clocv1 12.22 12.26 12.30 T:aes128otrpv1 12.25 12.28 12.32 T:aes128otrpv2 14.22 14.28 14.30 T:twine80n6t4clocv3 15.06 15.08 15.10 T:twine80n6t4clocv2 16.02 16.04 16.06 T:aes256otrsv1 16.02 16.05 16.06 T:aes256otrsv2 16.28 16.34 16.42 T:aes256otrpv1 16.45 16.47 16.49 T:aes256otrpv2 24.20 24.22 24.25 T:aeadaes128ocbtaglen64v1 24.21 24.23 24.24 T:aeadaes128ocbtaglen96v1 25.41 25.44 25.48 T:ketjesrv1 25.88 25.90 25.93 T:colm127v1 26.98 27.02 27.05 T:ketjesrv2 27.47 27.49 27.50 T:proest256otrv1 28.58 28.59 28.61 T:aeadaes192ocbtaglen96v1 28.58 28.60 28.64 T:aeadaes192ocbtaglen64v1 33.03 33.04 33.05 T:aeadaes256ocbtaglen64v1 33.02 33.06 33.11 T:aeadaes256ocbtaglen96v1 47.46 47.63 47.78 T:ketjejrv1 50.80 50.96 51.06 T:aezv1 51.50 51.54 51.59 T:proest128otrv1 69.48 69.60 69.91 T:present80n6t4silcv3 78.46 78.51 78.64 T:deoxyseq128128v13 79.07 79.13 79.20 T:deoxysneq128128v13 86.91 86.98 87.40 T:ketjejrv2 110.24 110.60 114.14 T:deoxyseq256128v13 111.28 111.43 111.58 T:deoxysneq256128v13 123.95 123.99 124.07 T:led80n6t4silcv3 311.04 316.32 317.16 T:acorn128 2011.40 2011.90 2012.80 T:led80n6silcv1 2016.14 2018.97 2035.70 T:led80n6t4silcv2 2170.63 2170.78 2171.00 T:present80n6silcv1 2170.79 2170.97 2171.20 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.19 0.19 0.19 T:tiaoxinv1 0.19 0.19 0.19 T:tiaoxinv2 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aezv4 0.40 0.40 0.41 T:aegis256 0.40 0.41 0.41 aegis256 0.41 0.41 0.42 T:aegis128 0.41 0.42 0.43 T:aes128gcmv1 0.41 0.42 0.43 aes256gcmv1 0.60 0.60 0.61 T:morus1280128v1 0.59 0.60 0.61 T:morus1280128v2 0.59 0.60 0.61 T:morus1280256v2 0.59 0.60 0.61 T:morus1280256v1 0.63 0.64 0.64 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.67 0.68 0.69 T:aes128otrcv3 0.65? 0.75? 0.85? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.87 0.89 T:deoxysi128v141 0.87 0.88 0.89 T:deoxysii128v141 0.89 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.91 0.91 0.92 T:aes256otrcv3 0.98 0.99 1.01 T:deoxysneq256128v1 0.99 1.00 1.01 T:deoxysi256v141 0.99 1.00 1.01 T:morus640128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.01 T:morus640128v2 0.99 1.00 1.02 T:deoxyseq256128v1 1.82 1.86 1.89 T:oceankeyakv2 1.85 1.90 1.92 T:lunarkeyakv2 2.06 2.08 2.10 T:norx6441v2 2.05 2.08 2.11 T:norx6441v3 2.07 2.09 2.12 T:norx6444v3 2.29 2.32 2.33 T:seakeyakv2 2.45 2.50 2.60 T:norx6441v1 2.69 2.69 2.70 T:aes128n8t8silcv2 2.69 2.69 2.71 T:aes128n12t8silcv3 2.69 2.71 2.74 T:aes128n12t8silcv2 2.72 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.73 T:aes128n12t8clocv3 2.72 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128otrsv3 3.13 3.14 3.16 T:norx6461v3 3.16 3.18 3.21 T:norx6461v2 3.34 3.36 3.38 T:norx6444v2 3.62 3.63 3.65 T:lakekeyakv2 3.63 3.67 3.69 T:norx6461v1 3.70 3.70 3.71 T:aes256otrsv3 3.72 3.74 3.76 T:lakekeyakv1 3.95 3.96 3.97 T:norx3241v3 3.98 4.02 4.05 T:norx3241v2 4.24 4.29 4.31 T:norx6444v1 4.70 4.72 4.74 T:norx3241v1 5.56 5.65 5.76 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 5.85 5.87 5.89 T:norx3261v2 5.96 5.98 6.08 T:norx3261v3 6.75 6.78 6.82 T:riverkeyakv2 7.24 7.26 7.29 T:ascon128av11 7.24 7.27 7.30 T:ascon96v1 7.27 7.29 7.31 T:norx3261v1 7.34 7.37 7.42 ascon128av12 7.34 7.44 7.51 T:acorn128v2 7.49 7.51 7.53 T:acorn128v3 7.93 7.95 7.99 T:ketjeminorv2 10.81 10.83 10.86 ascon128v12 10.82 10.85 10.87 T:ascon128v1 10.82 10.85 10.87 T:ascon128v11 11.99 12.02 12.04 T:aes128otrsv1 11.97 12.04 12.07 T:aes128otrsv2 12.16 12.18 12.20 T:aes128n12clocv1 12.17 12.20 12.22 T:aes128n8clocv1 12.29 12.34 12.39 T:aes128otrpv1 12.32 12.36 12.41 T:aes128otrpv2 14.22 14.26 14.29 T:twine80n6t4clocv3 15.07 15.09 15.11 T:twine80n6t4clocv2 16.05 16.11 16.14 T:aes256otrsv2 16.09 16.14 16.17 T:aes256otrsv1 16.26 16.35 16.51 T:aes256otrpv1 16.48 16.54 16.58 T:aes256otrpv2 24.21 24.22 24.24 T:aeadaes128ocbtaglen96v1 24.24 24.28 24.30 T:aeadaes128ocbtaglen64v1 25.39 25.44 25.49 T:ketjesrv1 25.89 25.92 25.95 T:colm127v1 26.95 26.98 27.01 T:ketjesrv2 27.47 27.51 27.53 T:proest256otrv1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 28.57 28.59 28.61 T:aeadaes192ocbtaglen96v1 33.01 33.03 33.06 T:aeadaes256ocbtaglen96v1 33.02 33.04 33.06 T:aeadaes256ocbtaglen64v1 47.44 47.63 47.76 T:ketjejrv1 50.81 50.98 51.06 T:aezv1 51.51 51.56 51.61 T:proest128otrv1 69.49 69.54 69.90 T:present80n6t4silcv3 78.42 78.50 78.54 T:deoxyseq128128v13 79.11 79.18 79.26 T:deoxysneq128128v13 86.89 86.96 87.36 T:ketjejrv2 110.71 111.23 114.40 T:deoxyseq256128v13 111.16 111.32 111.58 T:deoxysneq256128v13 123.92 123.99 124.10 T:led80n6t4silcv3 326.57 330.12 330.63 T:acorn128 2010.88 2011.61 2012.71 T:led80n6silcv1 2016.68 2019.18 2031.37 T:led80n6t4silcv2 2170.58 2170.87 2171.15 T:present80n6silcv1 2170.85 2171.09 2171.49 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv1 0.19 0.19 0.19 T:tiaoxinv2 0.24 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv4 0.40 0.40 0.41 T:aegis256 0.40 0.41 0.41 aegis256 0.41 0.42 0.42 T:aegis128 0.41 0.42 0.43 aes256gcmv1 0.42 0.42 0.43 T:aes128gcmv1 0.59 0.60 0.61 T:morus1280256v1 0.59 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280128v2 0.60 0.60 0.61 T:morus1280128v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.64 T:aeadaes128ocbtaglen128v1 0.64 0.65 0.65 T:aes128otrpv3 0.67 0.68 0.69 T:aes128otrcv3 0.65? 0.75? 0.84? T:aeadaes192ocbtaglen128v1 0.86 0.86 0.87 T:deoxysneq128128v1 0.87 0.87 0.88 T:deoxyseq128128v1 0.87 0.88 0.88 T:deoxysii128v141 0.86 0.88 0.89 T:deoxysi128v141 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.91 0.91 0.92 T:aes256otrcv3 0.98 0.99 1.01 T:deoxysneq256128v1 0.99 1.00 1.00 T:morus640128v2 0.99 1.00 1.00 T:deoxysi256v141 0.99 1.00 1.02 T:deoxyseq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.00 1.01 T:morus640128v1 1.84 1.87 1.90 T:oceankeyakv2 1.86 1.89 1.92 T:lunarkeyakv2 2.05 2.06 2.08 T:norx6441v2 2.04 2.08 2.10 T:norx6441v3 2.08 2.09 2.11 T:norx6444v3 2.29 2.32 2.33 T:seakeyakv2 2.45 2.48 2.58 T:norx6441v1 2.68 2.69 2.69 T:aes128n12t8silcv3 2.69 2.69 2.74 T:aes128n8t8silcv2 2.68 2.70 2.74 T:aes128n12t8silcv2 2.71 2.72 2.72 T:aes128n8t8clocv2 2.72 2.72 2.72 T:aes128n12t8clocv3 2.71 2.72 2.72 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128otrsv3 3.12 3.14 3.17 T:norx6461v3 3.16 3.18 3.21 T:norx6461v2 3.34 3.36 3.38 T:norx6444v2 3.61 3.63 3.64 T:lakekeyakv2 3.65 3.67 3.69 T:norx6461v1 3.70 3.70 3.71 T:aes256otrsv3 3.71 3.74 3.76 T:lakekeyakv1 3.95 3.96 3.97 T:norx3241v3 3.93 4.00 4.03 T:norx3241v2 4.25 4.29 4.31 T:norx6444v1 4.70 4.72 4.74 T:norx3241v1 5.57 5.69 5.74 T:ketjemajorv2 5.75 5.75 5.81 T:aesjambuv1 5.85 5.86 5.89 T:norx3261v2 5.98 6.01 6.10 T:norx3261v3 6.76 6.79 6.82 T:riverkeyakv2 7.22 7.25 7.28 T:ascon96v1 7.24 7.27 7.29 T:ascon128av11 7.28 7.29 7.31 T:norx3261v1 7.33 7.38 7.43 ascon128av12 7.36 7.45 7.51 T:acorn128v2 7.49 7.50 7.52 T:acorn128v3 7.93 7.96 8.00 T:ketjeminorv2 10.80 10.84 10.86 T:ascon128v1 10.81 10.85 10.87 ascon128v12 10.83 10.86 10.88 T:ascon128v11 12.00 12.03 12.06 T:aes128otrsv1 11.99 12.05 12.08 T:aes128otrsv2 12.16 12.18 12.20 T:aes128n12clocv1 12.18 12.20 12.22 T:aes128n8clocv1 12.30 12.34 12.37 T:aes128otrpv1 12.32 12.37 12.41 T:aes128otrpv2 14.21 14.25 14.29 T:twine80n6t4clocv3 15.05 15.09 15.11 T:twine80n6t4clocv2 16.05 16.11 16.14 T:aes256otrsv2 16.09 16.12 16.15 T:aes256otrsv1 16.25 16.32 16.55 T:aes256otrpv1 16.45 16.54 16.57 T:aes256otrpv2 24.21 24.22 24.24 T:aeadaes128ocbtaglen96v1 24.23 24.25 24.28 T:aeadaes128ocbtaglen64v1 25.39 25.44 25.50 T:ketjesrv1 25.89 25.91 25.95 T:colm127v1 26.94 26.98 27.00 T:ketjesrv2 27.47 27.49 27.51 T:proest256otrv1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 28.59 28.61 28.66 T:aeadaes192ocbtaglen96v1 33.01 33.03 33.06 T:aeadaes256ocbtaglen96v1 33.03 33.05 33.10 T:aeadaes256ocbtaglen64v1 47.45 47.56 47.75 T:ketjejrv1 50.79 50.95 51.05 T:aezv1 51.49 51.55 51.60 T:proest128otrv1 69.50 69.55 69.89 T:present80n6t4silcv3 78.54 78.62 78.70 T:deoxyseq128128v13 79.07 79.14 79.24 T:deoxysneq128128v13 86.89 86.96 87.38 T:ketjejrv2 110.63 111.12 114.46 T:deoxyseq256128v13 111.21 111.34 111.57 T:deoxysneq256128v13 123.96 124.02 124.12 T:led80n6t4silcv3 326.54 330.10 330.70 T:acorn128 2011.49 2012.29 2013.09 T:led80n6silcv1 2016.64 2019.00 2031.71 T:led80n6t4silcv2 2170.56 2170.81 2171.06 T:present80n6silcv1 2170.78 2171.04 2171.28 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.29 T:tiaoxinv1 0.29 0.29 0.29 T:tiaoxinv2 0.31 0.31 0.32 T:aegis128l 0.31 0.31 0.31 aegis128l 0.48 0.49 0.49 aegis256 0.49 0.49 0.50 T:aegis256 0.49 0.50 0.50 T:aegis128 0.51 0.51 0.51 T:aezv5 0.51 0.51 0.52 T:aezv4 0.52 0.52 0.52 T:aezv3 0.74 0.74 0.74 T:aeadaes128ocbtaglen128v1 0.76 0.77 0.77 T:aes128otrpv3 0.77 0.77 0.78 T:morus1280128v1 0.77 0.77 0.78 T:morus1280256v1 0.78 0.78 0.79 T:morus1280128v2 0.78 0.79 0.80 T:morus1280256v2 0.84 0.84 0.85 T:aes128otrcv3 0.89? 0.89? 1.01? T:aeadaes192ocbtaglen128v1 0.96 0.96 0.97 T:aes128gcmv1 1.02 1.02 1.02 T:aeadaes256ocbtaglen128v1 1.02 1.03 1.03 T:deoxysneq128128v1 1.05 1.05 1.05 T:aes256otrpv3 1.06 1.07 1.07 T:deoxysi128v141 1.11 1.12 1.12 aes256gcmv1 1.15 1.15 1.15 T:aes256otrcv3 1.16 1.16 1.16 T:deoxysneq256128v1 1.18 1.18 1.19 T:morus640128v1 1.18 1.19 1.19 T:morus640128v2 1.21 1.22 1.23 T:deoxysi256v141 1.26 1.27 1.27 T:colm0v1 1.51 1.51 1.52 T:deoxysii128v141 1.52 1.52 1.53 T:deoxyseq128128v1 1.70 1.71 1.71 T:deoxyseq256128v1 1.75 1.75 1.76 T:deoxysii256v141 1.80 1.80 1.80 T:aes128otrsv3 2.23 2.24 2.25 T:norx6444v3 2.40 2.41 2.43 T:norx6441v2 2.43 2.44 2.45 T:norx6441v3 2.49 2.49 2.50 T:aes256otrsv3 2.79 2.82 2.89 T:norx6441v1 2.82 2.82 2.82 T:aes128n12t8clocv3 2.82 2.82 2.82 T:aes128n12t8clocv2 2.82 2.82 2.82 T:aes128n8t8clocv2 2.84 2.84 2.87 T:aes128n12t8silcv3 2.84 2.85 2.87 T:aes128n8t8silcv2 2.84 2.86 2.87 T:aes128n12t8silcv2 3.40 3.42 3.43 T:seakeyakv2 3.65 3.66 3.68 T:norx6461v3 3.68 3.69 3.71 T:norx6461v2 4.19 4.21 4.22 T:norx6461v1 4.22 4.23 4.25 T:norx3241v3 4.28 4.33 4.34 T:norx3241v2 4.35 4.35 4.36 T:lakekeyakv2 4.57 4.58 4.59 T:lakekeyakv1 4.59 4.60 4.61 T:oceankeyakv2 4.99 5.00 5.01 T:norx3241v1 5.09 5.10 5.11 T:norx6444v2 5.93 5.94 5.94 T:aesjambuv1 6.07 6.11 6.13 T:norx6444v1 6.40 6.40 6.47 T:norx3261v3 6.43 6.44 6.46 T:norx3261v2 7.50 7.51 7.52 T:ascon96v1 7.52 7.53 7.54 T:riverkeyakv2 7.60 7.61 7.62 T:acorn128v3 7.56 7.61 7.64 T:ascon128av11 7.65 7.67 7.68 ascon128av12 7.67 7.68 7.69 T:norx3261v1 7.88 7.88 7.90 T:lunarkeyakv2 8.08 8.10 8.12 T:acorn128v2 8.46 8.49 8.54 T:ketjemajorv2 10.24 10.25 10.26 T:ketjeminorv2 11.04 11.05 11.06 T:ascon128v11 11.04 11.05 11.06 T:ascon128v1 11.06 11.08 11.09 ascon128v12 13.11 13.12 13.14 T:aes128otrsv1 13.15 13.17 13.20 T:aes128otrsv2 13.30 13.32 13.35 T:aes128otrpv2 13.41 13.44 13.50 T:aes128otrpv1 14.67 14.68 14.69 T:twine80n6t4clocv3 15.59 15.61 15.62 T:twine80n6t4clocv2 17.27 17.29 17.31 T:aes256otrsv1 17.36 17.38 17.39 T:aes256otrsv2 17.41 17.45 17.49 T:aes256otrpv1 17.65 17.68 17.75 T:aes256otrpv2 17.77 17.79 17.81 T:aes128n12clocv1 17.83 17.85 17.87 T:aes128n8clocv1 25.08 25.09 25.10 T:aeadaes128ocbtaglen64v1 25.09 25.11 25.12 T:aeadaes128ocbtaglen96v1 29.15 29.19 29.27 T:ketjesrv1 29.53 29.54 29.79 T:aeadaes192ocbtaglen96v1 29.55 29.56 29.58 T:aeadaes192ocbtaglen64v1 29.67 29.67 29.68 T:proest256otrv1 30.59 30.63 30.78 T:ketjesrv2 34.10 34.11 34.12 T:aeadaes256ocbtaglen64v1 34.10 34.11 34.15 T:aeadaes256ocbtaglen96v1 40.92 40.94 40.97 T:colm127v1 53.21 53.22 53.25 T:proest128otrv1 54.02 54.05 54.12 T:ketjejrv1 70.87 70.91 71.23 T:present80n6t4silcv3 80.02 80.06 80.11 T:deoxysneq128128v13 91.20 91.26 91.66 T:ketjejrv2 102.90 103.01 103.39 T:aezv1 112.28 112.38 112.47 T:deoxysneq256128v13 120.29 120.33 120.34 T:deoxyseq128128v13 125.54 125.60 125.64 T:led80n6t4silcv3 169.08 169.30 173.83 T:deoxyseq256128v13 358.22 361.97 362.11 T:acorn128 3033.25 3034.51 3034.86 T:led80n6silcv1 3040.56 3043.65 3062.42 T:led80n6t4silcv2 3274.75 3274.92 3275.11 T:present80n6silcv1 3274.80 3274.95 3275.21 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.32 0.32 0.32 T:aegis128l 0.32 0.32 0.32 aegis128l 0.36 0.36 0.36 T:tiaoxinv2 0.36 0.36 0.36 T:tiaoxinv1 0.47 0.47 0.48 T:aegis256 0.49 0.49 0.50 T:aegis128 0.51 0.51 0.52 T:aezv5 0.51 0.51 0.51 T:aezv4 0.52 0.52 0.52 T:aezv3 0.52 0.52 0.53 aegis256 0.75 0.76 0.76 T:aeadaes128ocbtaglen128v1 0.79 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.79 T:morus1280256v1 0.79 0.79 0.79 T:morus1280128v1 0.80 0.80 0.80 T:morus1280128v2 0.80 0.80 0.81 T:morus1280256v2 0.87 0.87 0.88 T:aes128otrcv3 0.89 0.89 0.89 T:aes128gcmv1 0.89 0.90 0.97 T:aeadaes192ocbtaglen128v1 1.06 1.07 1.07 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.11 1.12 1.13 aes256gcmv1 1.17 1.17 1.17 T:morus640128v1 1.18 1.19 1.19 T:aes256otrcv3 1.19 1.20 1.20 T:morus640128v2 1.23 1.24 1.25 T:deoxysi128v141 1.26 1.27 1.27 T:deoxysneq128128v1 1.33 1.33 1.34 T:colm0v1 1.36 1.36 1.37 T:deoxysneq256128v1 1.43 1.43 1.43 T:deoxysi256v141 1.56 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.81 T:deoxysii256v141 1.82 1.83 1.83 T:aes128otrsv3 1.91 1.91 1.91 T:deoxyseq128128v1 2.02 2.03 2.03 T:deoxyseq256128v1 2.23 2.24 2.25 T:norx6444v3 2.38 2.40 2.42 T:norx6441v3 2.39 2.40 2.41 T:norx6441v2 2.52 2.52 2.52 T:aes256otrsv3 2.81 2.81 2.81 T:aes128n12t8clocv2 2.80 2.81 2.81 T:aes128n12t8clocv3 2.78 2.81 2.87 T:norx6441v1 2.81 2.81 2.81 T:aes128n8t8clocv2 2.82 2.83 2.83 T:aes128n8t8silcv2 2.82 2.83 2.84 T:aes128n12t8silcv3 2.83 2.83 2.85 T:aes128n12t8silcv2 3.46 3.48 3.49 T:seakeyakv2 3.62 3.63 3.65 T:norx6461v3 3.64 3.65 3.67 T:norx6461v2 4.14 4.16 4.17 T:norx6461v1 4.18 4.19 4.20 T:norx3241v3 4.19 4.23 4.24 T:norx3241v2 4.33 4.34 4.36 T:lakekeyakv2 4.61 4.62 4.63 T:lakekeyakv1 4.62 4.63 4.65 T:oceankeyakv2 4.89 4.90 4.91 T:norx3241v1 5.13 5.14 5.17 T:norx6444v2 6.01 6.01 6.01 T:aesjambuv1 6.07 6.09 6.11 T:norx6444v1 6.32 6.35 6.43 T:norx3261v3 6.34 6.36 6.37 T:norx3261v2 7.56 7.57 7.59 ascon128av12 7.57 7.59 7.60 T:ascon96v1 7.59 7.61 7.62 T:ascon128av11 7.60 7.61 7.62 T:norx3261v1 7.62 7.65 7.69 T:riverkeyakv2 7.92 7.93 7.95 T:lunarkeyakv2 8.27 8.29 8.32 T:acorn128v2 8.29 8.30 8.32 T:ketjemajorv2 8.40 8.41 8.43 T:acorn128v3 10.16 10.17 10.20 T:ketjeminorv2 10.92 10.94 10.95 T:ascon128v1 10.92 10.94 10.95 T:ascon128v11 11.02 11.04 11.05 ascon128v12 13.54 13.56 13.59 T:aes128otrsv2 13.59 13.61 13.63 T:aes128otrpv1 13.63 13.64 13.66 T:aes128otrsv1 13.65 13.66 13.68 T:aes128otrpv2 14.67 14.69 14.70 T:twine80n6t4clocv3 15.53 15.54 15.55 T:twine80n6t4clocv2 17.37 17.39 17.40 T:aes128n12clocv1 17.55 17.56 17.58 T:aes128n8clocv1 17.58 17.64 17.66 T:aes256otrsv2 17.81 17.82 17.84 T:aes256otrsv1 17.82 17.84 17.86 T:aes256otrpv2 17.91 17.96 18.06 T:aes256otrpv1 29.52 29.57 29.66 T:ketjesrv1 29.60 29.62 29.65 T:aeadaes128ocbtaglen96v1 29.62 29.66 29.78 T:aeadaes128ocbtaglen64v1 29.72 29.73 29.75 T:proest256otrv1 30.57 30.60 30.63 T:ketjesrv2 35.08 35.15 35.43 T:aeadaes192ocbtaglen96v1 35.14 35.16 35.18 T:aeadaes192ocbtaglen64v1 40.75 40.78 40.81 T:aeadaes256ocbtaglen64v1 40.76 40.79 40.82 T:aeadaes256ocbtaglen96v1 49.89 49.99 50.05 T:colm127v1 53.47 53.49 53.52 T:proest128otrv1 54.53 54.61 54.89 T:ketjejrv1 70.84 70.89 71.23 T:present80n6t4silcv3 91.83 91.88 92.23 T:ketjejrv2 93.85 93.90 94.05 T:deoxysneq128128v13 103.26 103.48 103.78 T:aezv1 120.26 120.35 120.40 T:deoxyseq128128v13 125.54 125.58 125.62 T:led80n6t4silcv3 131.94 132.05 132.44 T:deoxysneq256128v13 169.14 169.33 173.87 T:deoxyseq256128v13 377.89 380.08 380.16 T:acorn128 3032.05 3032.51 3033.07 T:led80n6silcv1 3038.55 3040.84 3062.66 T:led80n6t4silcv2 3274.81 3274.95 3275.08 T:present80n6silcv1 3274.78 3275.01 3275.22 T:present80n6t4silcv2

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.31 0.31 0.31 T:aegis128l 0.31 0.32 0.32 T:aezv5 0.32 0.32 0.32 T:aezv4 0.32 0.32 0.32 T:aezv3 0.33 0.33 0.33 aegis128l 0.36 0.36 0.36 T:tiaoxinv2 0.36 0.36 0.36 T:tiaoxinv1 0.47 0.47 0.47 T:aegis256 0.49 0.49 0.49 T:aegis128 0.52 0.52 0.53 aegis256 0.75 0.76 0.76 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.79 T:morus1280256v1 0.79 0.79 0.79 T:aes128otrpv3 0.79 0.79 0.79 T:morus1280128v1 0.80 0.80 0.80 T:morus1280128v2 0.80 0.81 0.81 T:morus1280256v2 0.87 0.87 0.88 T:aes128otrcv3 0.88 0.89 0.89 T:aes128gcmv1 0.89? 0.90? 1.01? T:aeadaes192ocbtaglen128v1 1.07 1.07 1.07 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.07 T:aes256otrpv3 1.11 1.12 1.13 aes256gcmv1 1.17 1.17 1.17 T:morus640128v1 1.18 1.18 1.19 T:aes256otrcv3 1.19 1.20 1.20 T:morus640128v2 1.23 1.23 1.24 T:deoxysi128v141 1.26 1.26 1.26 T:deoxysneq128128v1 1.33 1.33 1.34 T:colm0v1 1.35 1.36 1.36 T:deoxysneq256128v1 1.43 1.43 1.43 T:deoxysi256v141 1.56 1.56 1.56 T:deoxysii128v141 1.80 1.80 1.81 T:deoxysii256v141 1.82 1.82 1.83 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.02 2.03 2.03 T:deoxyseq256128v1 2.24 2.24 2.25 T:norx6444v3 2.40 2.41 2.42 T:norx6441v3 2.40 2.41 2.42 T:norx6441v2 2.52 2.52 2.52 T:aes256otrsv3 2.80 2.80 2.81 T:aes128n12t8clocv3 2.80 2.80 2.80 T:aes128n12t8clocv2 2.80 2.80 2.81 T:aes128n8t8clocv2 2.79 2.81 2.86 T:norx6441v1 2.82 2.83 2.83 T:aes128n12t8silcv2 2.82 2.83 2.85 T:aes128n8t8silcv2 2.82 2.85 2.85 T:aes128n12t8silcv3 3.48 3.49 3.50 T:seakeyakv2 3.63 3.64 3.65 T:norx6461v3 3.64 3.65 3.67 T:norx6461v2 4.14 4.15 4.17 T:norx6461v1 4.18 4.18 4.20 T:norx3241v3 4.18 4.24 4.25 T:norx3241v2 4.35 4.36 4.37 T:lakekeyakv2 4.63 4.64 4.64 T:lakekeyakv1 4.63 4.65 4.66 T:oceankeyakv2 4.89 4.90 4.91 T:norx3241v1 5.14 5.16 5.17 T:norx6444v2 6.01 6.01 6.03 T:aesjambuv1 6.07 6.10 6.12 T:norx6444v1 6.34 6.35 6.37 T:norx3261v2 6.36 6.37 6.42 T:norx3261v3 7.56 7.58 7.59 ascon128av12 7.57 7.58 7.60 T:ascon96v1 7.59 7.61 7.63 T:ascon128av11 7.60 7.61 7.62 T:norx3261v1 7.65 7.67 7.69 T:riverkeyakv2 7.95 7.96 7.98 T:lunarkeyakv2 8.26 8.28 8.30 T:acorn128v2 8.33 8.36 8.39 T:ketjemajorv2 8.39 8.40 8.41 T:acorn128v3 10.17 10.19 10.21 T:ketjeminorv2 10.93 10.94 10.95 T:ascon128v11 10.93 10.95 10.96 T:ascon128v1 11.02 11.04 11.05 ascon128v12 13.55 13.57 13.59 T:aes128otrsv2 13.61 13.64 13.67 T:aes128otrpv1 13.64 13.66 13.67 T:aes128otrsv1 13.66 13.68 13.70 T:aes128otrpv2 14.66 14.68 14.69 T:twine80n6t4clocv3 15.53 15.54 15.55 T:twine80n6t4clocv2 17.37 17.39 17.41 T:aes128n12clocv1 17.56 17.58 17.60 T:aes128n8clocv1 17.66 17.68 17.70 T:aes256otrsv2 17.82 17.83 17.85 T:aes256otrsv1 17.83 17.86 17.89 T:aes256otrpv2 17.93 17.97 18.06 T:aes256otrpv1 29.54 29.57 29.66 T:ketjesrv1 29.63 29.64 29.65 T:aeadaes128ocbtaglen96v1 29.62 29.65 29.76 T:aeadaes128ocbtaglen64v1 29.72 29.73 29.75 T:proest256otrv1 30.57 30.59 30.62 T:ketjesrv2 35.08 35.15 35.44 T:aeadaes192ocbtaglen96v1 35.15 35.17 35.19 T:aeadaes192ocbtaglen64v1 40.76 40.78 40.81 T:aeadaes256ocbtaglen64v1 40.76 40.79 40.85 T:aeadaes256ocbtaglen96v1 49.90 49.98 50.03 T:colm127v1 53.45 53.47 53.50 T:proest128otrv1 54.65 54.74 54.92 T:ketjejrv1 70.84 70.87 71.18 T:present80n6t4silcv3 91.88 91.91 92.29 T:ketjejrv2 93.90 93.95 94.04 T:deoxysneq128128v13 103.16 103.30 103.70 T:aezv1 120.33 120.38 120.44 T:deoxyseq128128v13 125.54 125.60 125.64 T:led80n6t4silcv3 131.99 132.07 132.44 T:deoxysneq256128v13 169.16 169.33 173.95 T:deoxyseq256128v13 377.87 380.09 380.18 T:acorn128 3032.38 3032.97 3033.56 T:led80n6silcv1 3039.59 3041.10 3062.66 T:led80n6t4silcv2 3274.74 3274.88 3275.04 T:present80n6silcv1 3274.86 3275.06 3275.26 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.74 1.74 1.79 T:aegis128l 1.74 1.74 1.76 T:aegis128 1.74 1.75 1.76 aegis128l 2.01 2.03 2.05 T:aegis256 2.22 2.25 2.26 T:aezv5 2.28 2.30 2.35 T:aezv3 2.29 2.31 2.40 T:aezv4 2.30 2.31 2.34 aegis256 2.30 2.32 2.38 T:tiaoxinv2 2.32 2.33 2.38 T:tiaoxinv1 3.03 3.04 3.09 T:aeadaes128ocbtaglen128v1 3.45 3.47 3.49 T:aes128otrpv3 3.91 3.97 4.07 T:deoxysneq128128v1 3.94 3.97 4.03 T:aeadaes256ocbtaglen128v1 4.15 4.19 4.21 T:aes128otrsv3 4.28 4.34 4.38 T:morus640128v1 4.31 4.35 4.43 T:morus1280128v1 4.23? 4.40? 6.87? T:aeadaes192ocbtaglen128v1 4.38 4.40 4.49 T:morus1280256v1 4.45 4.48 4.51 T:colm0v1 4.50 4.52 4.60 T:morus640128v2 4.54 4.55 4.58 T:aes256otrpv3 4.62 4.65 4.74 T:deoxysneq256128v1 4.59 4.67 4.75 T:morus1280128v2 4.73 4.74 4.76 T:aes128otrcv3 4.75 4.77 4.79 T:aes128n12t8clocv2 4.76 4.78 4.80 T:aes128n8t8clocv2 4.76 4.79 4.86 T:aes128n12t8clocv3 4.80 4.83 4.87 T:morus1280256v2 4.89 4.92 4.96 T:deoxysi128v141 5.61 5.63 5.64 T:aes128n8t8silcv2 5.63 5.63 5.63 T:aes128n12t8silcv2 5.62 5.63 5.64 T:aes128n12t8silcv3 5.74 5.80 5.91 T:deoxysi256v141 5.93 5.96 6.02 T:aes128gcmv1 6.11 6.14 6.17 T:aes256otrcv3 6.18 6.22 6.25 T:aes256otrsv3 6.48 6.53 6.59 T:deoxyseq128128v1 6.80 6.85 6.91 aes256gcmv1 7.75 7.82 7.89 T:deoxyseq256128v1 8.29 8.33 8.38 T:deoxysii128v141 8.32 8.41 8.52 T:norx6441v2 8.32 8.42 8.54 T:norx6441v1 8.36 8.47 8.57 T:norx6441v3 9.27 9.28 9.30 T:aesjambuv1 9.83 9.94 10.17 T:deoxysii256v141 10.50 10.57 10.67 T:norx3241v1 10.52 10.62 10.66 T:norx3241v3 10.67 10.74 10.83 T:norx3241v2 11.35 11.42 11.56 T:ascon96v1 11.50 11.62 11.79 T:ascon128av11 11.62 11.71 12.04 ascon128av12 12.08 12.23 12.31 T:norx6461v1 12.12 12.24 12.41 T:norx6461v2 12.21 12.28 12.42 T:norx6461v3 14.67 14.75 14.94 T:ascon128v11 14.66 14.76 14.90 T:norx6444v3 14.71 14.79 15.00 ascon128v12 14.72 14.80 14.99 T:ascon128v1 15.09 15.18 15.44 T:lakekeyakv1 15.59 15.72 15.84 T:norx3261v2 16.00 16.10 16.19 T:norx3261v3 16.33 16.37 16.48 T:norx3261v1 17.56 17.63 17.86 T:riverkeyakv2 18.85 18.91 18.98 T:lakekeyakv2 20.62 20.69 20.77 T:twine80n6t4clocv3 21.54 21.58 21.63 T:twine80n6t4clocv2 21.63 21.70 21.84 T:aes128n8clocv1 21.68 21.75 21.90 T:aes128n12clocv1 22.10 22.21 22.39 T:aes128otrsv1 22.18 22.29 22.44 T:aes128otrpv2 22.23 22.29 22.48 T:aes128otrsv2 22.79 22.87 23.00 T:aes128otrpv1 28.79 28.96 29.19 T:aes256otrsv1 28.92 29.01 29.17 T:aes256otrsv2 28.92 29.06 29.27 T:aes256otrpv2 29.08 29.18 29.32 T:aes256otrpv1 31.42 31.55 31.72 T:seakeyakv2 31.55 31.64 31.75 T:acorn128v3 31.55 31.88 32.31 T:acorn128v2 34.22 34.57 34.95 T:ketjeminorv2 36.50 36.63 36.89 T:norx6444v2 39.76 39.82 39.94 T:aeadaes128ocbtaglen64v1 39.88 39.92 40.02 T:aeadaes128ocbtaglen96v1 42.64 42.95 43.14 T:norx6444v1 45.83 46.02 46.25 T:ketjesrv1 46.08 46.14 46.22 T:aeadaes192ocbtaglen96v1 46.16 46.20 46.35 T:aeadaes192ocbtaglen64v1 51.41 51.69 52.01 T:oceankeyakv2 53.50 53.57 53.63 T:aeadaes256ocbtaglen96v1 53.41 53.60 53.90 T:ketjesrv2 53.59 53.61 53.69 T:aeadaes256ocbtaglen64v1 53.37 53.95 54.27 T:ketjemajorv2 59.83 59.93 60.15 T:colm127v1 71.44 71.72 72.07 T:ketjejrv1 84.97 85.06 85.27 T:proest256otrv1 88.84 89.09 89.37 T:present80n6t4silcv3 90.49 90.69 91.05 T:deoxysneq128128v13 103.00 103.24 103.49 T:proest128otrv1 119.93 120.24 120.62 T:aezv1 122.10 122.48 122.92 T:ketjejrv2 127.70 127.96 128.22 T:deoxysneq256128v13 128.92 129.16 129.40 T:lunarkeyakv2 149.51 149.62 149.88 T:deoxyseq128128v13 149.86 150.13 150.43 T:led80n6t4silcv3 211.21 211.62 217.44 T:deoxyseq256128v13 1273.25 1281.99 1283.08 T:acorn128 3397.11 3399.06 3399.80 T:led80n6silcv1 3406.97 3409.99 3428.66 T:led80n6t4silcv2 3669.79 3670.41 3671.30 T:present80n6t4silcv2 3673.04 3673.83 3675.14 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.74 1.74 1.80 T:aegis128l 1.80 1.81 1.82 T:aegis128 1.90 1.90 1.92 aegis128l 2.06 2.07 2.09 T:aegis256 2.23 2.24 2.26 T:aezv5 2.28 2.29 2.32 T:aezv3 2.30 2.32 2.39 T:tiaoxinv2 2.31 2.33 2.37 T:aezv4 2.32 2.34 2.37 T:tiaoxinv1 2.34 2.36 2.38 aegis256 3.38 3.41 3.46 T:aeadaes128ocbtaglen128v1 3.55 3.58 3.59 T:aes128otrpv3 4.23 4.24 4.28 T:aeadaes256ocbtaglen128v1 4.25 4.29 4.36 T:morus640128v1 4.38 4.38 4.39 T:aes128otrsv3 4.53 4.56 4.60 T:morus1280128v1 4.57 4.59 4.63 T:morus1280256v1 4.67 4.70 4.72 T:aes256otrpv3 4.69? 4.75? 7.64? T:aeadaes192ocbtaglen128v1 4.77 4.80 4.88 T:morus1280128v2 4.80 4.83 4.84 T:aes128n12t8clocv2 4.82 4.84 4.85 T:aes128n12t8clocv3 4.83 4.84 4.85 T:aes128n8t8clocv2 4.81 4.86 4.95 T:morus640128v2 4.95 4.96 4.98 T:aes128otrcv3 4.88 4.97 5.02 T:morus1280256v2 5.07 5.10 5.18 T:colm0v1 5.70 5.71 5.72 T:aes128n8t8silcv2 5.71 5.72 5.73 T:aes128n12t8silcv2 5.71 5.72 5.74 T:aes128n12t8silcv3 5.88 5.90 5.94 T:deoxysneq256128v1 5.91 5.94 5.99 T:deoxysneq128128v1 5.88 5.96 6.02 T:aes128gcmv1 6.38 6.46 6.52 T:deoxysi128v141 6.46 6.49 6.52 T:aes256otrcv3 6.87 6.89 6.90 T:aes256otrsv3 6.96 7.01 7.09 aes256gcmv1 8.09 8.14 8.26 T:deoxysi256v141 8.41 8.52 8.73 T:norx6441v3 8.51 8.59 8.68 T:norx6441v1 8.51 8.60 8.71 T:norx6441v2 9.14 9.18 9.25 T:deoxyseq128128v1 9.24 9.29 9.35 T:deoxysii128v141 9.31 9.36 9.45 T:deoxyseq256128v1 9.45 9.47 9.48 T:aesjambuv1 10.70 10.75 10.88 T:norx3241v3 10.72 10.81 10.90 T:norx3241v1 10.84 10.93 11.07 T:norx3241v2 11.32 11.37 11.47 T:deoxysii256v141 11.36 11.48 11.60 T:ascon96v1 11.50 11.61 11.76 T:ascon128av11 11.57 11.66 11.94 ascon128av12 12.33 12.43 12.53 T:norx6461v1 12.26 12.43 12.60 T:norx6461v3 12.35 12.44 12.56 T:norx6461v2 14.59 14.64 14.82 T:ascon128v11 14.60 14.65 14.84 T:ascon128v1 14.63 14.79 14.93 T:norx6444v3 14.78 14.87 15.19 ascon128v12 15.26 15.32 15.50 T:lakekeyakv1 15.81 15.88 16.01 T:norx3261v2 16.01 16.09 16.17 T:norx3261v3 16.39 16.44 16.51 T:norx3261v1 17.74 17.79 17.87 T:riverkeyakv2 18.72 18.79 18.87 T:lakekeyakv2 20.72 20.75 20.79 T:twine80n6t4clocv3 21.57 21.61 21.68 T:twine80n6t4clocv2 21.54 21.61 21.72 T:aes128n12clocv1 21.54 21.62 21.72 T:aes128n8clocv1 22.75 22.83 22.94 T:aes128otrpv2 22.78 22.86 22.98 T:aes128otrsv1 22.79 22.90 23.06 T:aes128otrsv2 23.23 23.31 23.41 T:aes128otrpv1 29.37 29.49 29.62 T:aes256otrpv2 29.42 29.50 29.64 T:aes256otrsv1 29.48 29.56 29.66 T:aes256otrsv2 29.74 29.86 30.01 T:aes256otrpv1 31.58 31.73 31.81 T:seakeyakv2 31.99 32.08 32.19 T:acorn128v3 31.96 32.14 33.29 T:acorn128v2 33.63 33.90 34.13 T:ketjeminorv2 36.40 36.50 36.70 T:norx6444v2 43.09 43.23 43.36 T:norx6444v1 46.31 46.53 46.80 T:ketjesrv1 47.70 47.83 48.00 T:aeadaes128ocbtaglen64v1 47.84 47.96 48.13 T:aeadaes128ocbtaglen96v1 51.62 51.83 52.27 T:oceankeyakv2 52.60 52.85 53.44 T:ketjemajorv2 53.50 53.63 54.04 T:ketjesrv2 55.46 55.56 55.65 T:aeadaes192ocbtaglen64v1 55.39 55.65 55.98 T:aeadaes192ocbtaglen96v1 64.77 64.86 65.01 T:aeadaes256ocbtaglen96v1 64.85 64.95 65.12 T:aeadaes256ocbtaglen64v1 68.88 69.11 69.33 T:colm127v1 72.16 72.38 72.71 T:ketjejrv1 85.79 85.88 86.04 T:proest256otrv1 89.03 89.21 89.52 T:present80n6t4silcv3 104.26 104.38 104.57 T:deoxysneq128128v13 104.31 104.53 104.72 T:proest128otrv1 122.99 123.25 123.61 T:ketjejrv2 124.13 124.55 125.08 T:aezv1 128.97 129.15 129.41 T:lunarkeyakv2 147.39 147.59 147.79 T:deoxysneq256128v13 149.67 149.85 150.39 T:deoxyseq128128v13 150.01 150.23 150.41 T:led80n6t4silcv3 213.03 213.67 218.96 T:deoxyseq256128v13 1302.16 1308.21 1309.29 T:acorn128 3397.09 3398.07 3399.71 T:led80n6silcv1 3404.87 3407.64 3432.39 T:led80n6t4silcv2 3670.38 3671.08 3671.98 T:present80n6t4silcv2 3673.25 3674.31 3675.42 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.73 1.74 1.76 T:aegis128l 1.79 1.80 1.82 T:aegis128 1.94 1.95 2.01 aegis128l 1.94 1.96 2.00 T:aezv5 1.97 1.98 1.99 T:aezv3 2.00 2.01 2.02 T:aezv4 2.05 2.07 2.09 T:aegis256 2.30 2.32 2.37 T:tiaoxinv2 2.34 2.35 2.42 T:tiaoxinv1 2.35 2.36 2.41 aegis256 3.41 3.43 3.49 T:aeadaes128ocbtaglen128v1 3.56 3.57 3.59 T:aes128otrpv3 4.23 4.27 4.33 T:morus640128v1 4.26 4.28 4.30 T:aeadaes256ocbtaglen128v1 4.38 4.40 4.41 T:aes128otrsv3 4.50 4.54 4.58 T:morus1280256v1 4.53 4.56 4.59 T:morus1280128v1 4.69 4.70 4.72 T:aes256otrpv3 4.70? 4.74? 6.16? T:aeadaes192ocbtaglen128v1 4.75 4.76 4.78 T:aes128n12t8clocv3 4.76 4.77 4.79 T:aes128n8t8clocv2 4.74 4.77 4.79 T:aes128n12t8clocv2 4.77 4.82 4.87 T:morus1280128v2 4.85 4.86 4.89 T:morus640128v2 4.89 4.95 4.99 T:morus1280256v2 4.94 4.96 4.97 T:aes128otrcv3 5.12 5.17 5.24 T:colm0v1 5.64 5.65 5.65 T:aes128n8t8silcv2 5.64 5.65 5.69 T:aes128n12t8silcv3 5.65 5.66 5.68 T:aes128n12t8silcv2 5.76 5.78 5.83 T:deoxysneq256128v1 5.80 5.84 5.90 T:deoxysneq128128v1 5.93 5.96 5.99 T:aes128gcmv1 6.38 6.46 6.54 T:deoxysi128v141 6.47 6.49 6.53 T:aes256otrcv3 6.87 6.89 6.93 T:aes256otrsv3 6.97 7.00 7.05 aes256gcmv1 8.11 8.14 8.23 T:deoxysi256v141 8.48 8.51 8.57 T:norx6441v3 8.51 8.56 8.63 T:norx6441v2 8.48 8.57 8.67 T:norx6441v1 9.14 9.18 9.22 T:deoxyseq128128v1 9.23 9.26 9.29 T:deoxysii128v141 9.29 9.37 9.41 T:deoxyseq256128v1 9.47 9.48 9.49 T:aesjambuv1 10.69 10.75 10.83 T:norx3241v3 10.71 10.79 10.87 T:norx3241v1 10.83 10.90 11.00 T:norx3241v2 11.32 11.39 11.46 T:deoxysii256v141 11.42 11.49 11.61 T:ascon96v1 11.48 11.56 11.65 T:ascon128av11 11.60 11.68 11.78 ascon128av12 12.30 12.43 12.52 T:norx6461v1 12.38 12.44 12.55 T:norx6461v2 12.39 12.48 12.53 T:norx6461v3 14.57 14.60 14.71 T:ascon128v11 14.56 14.60 14.72 T:ascon128v1 14.62 14.75 14.87 T:norx6444v3 14.73 14.81 14.94 ascon128v12 15.29 15.37 15.52 T:lakekeyakv1 15.91 15.97 16.08 T:norx3261v2 15.85 15.99 16.10 T:norx3261v3 16.35 16.43 16.49 T:norx3261v1 17.73 17.78 17.89 T:riverkeyakv2 18.82 18.91 19.04 T:lakekeyakv2 20.67 20.71 20.86 T:twine80n6t4clocv3 21.48 21.55 21.68 T:aes128n12clocv1 21.51 21.56 21.61 T:twine80n6t4clocv2 21.50 21.59 21.73 T:aes128n8clocv1 22.83 22.92 23.01 T:aes128otrpv2 22.89 22.96 23.09 T:aes128otrsv1 22.92 23.01 23.14 T:aes128otrsv2 23.34 23.41 23.50 T:aes128otrpv1 29.46 29.55 29.67 T:aes256otrsv1 29.48 29.60 29.74 T:aes256otrpv2 29.57 29.67 29.89 T:aes256otrsv2 29.84 29.93 30.14 T:aes256otrpv1 31.60 31.72 31.86 T:seakeyakv2 32.00 32.07 32.16 T:acorn128v3 31.96 32.19 33.06 T:acorn128v2 33.73 33.99 34.26 T:ketjeminorv2 36.36 36.50 36.66 T:norx6444v2 43.01 43.13 43.32 T:norx6444v1 46.35 46.54 46.84 T:ketjesrv1 47.70 47.79 47.95 T:aeadaes128ocbtaglen64v1 47.86 47.98 48.11 T:aeadaes128ocbtaglen96v1 51.73 51.92 52.27 T:oceankeyakv2 52.61 52.88 53.50 T:ketjemajorv2 53.53 53.62 53.90 T:ketjesrv2 55.40 55.50 55.63 T:aeadaes192ocbtaglen64v1 55.42 55.52 55.77 T:aeadaes192ocbtaglen96v1 64.73 64.83 64.99 T:aeadaes256ocbtaglen96v1 64.87 64.97 65.04 T:aeadaes256ocbtaglen64v1 68.82 68.92 69.13 T:colm127v1 73.34 73.57 73.92 T:ketjejrv1 84.18 84.27 84.50 T:proest256otrv1 88.90 89.16 89.48 T:present80n6t4silcv3 104.16 104.35 104.62 T:proest128otrv1 105.50 105.63 105.82 T:deoxysneq128128v13 124.15 124.54 124.92 T:aezv1 124.21 124.55 124.88 T:ketjejrv2 129.17 129.36 129.58 T:lunarkeyakv2 147.41 147.71 148.05 T:deoxysneq256128v13 149.92 150.24 150.47 T:led80n6t4silcv3 151.01 151.24 151.55 T:deoxyseq128128v13 213.24 213.81 219.11 T:deoxyseq256128v13 1302.43 1307.96 1309.21 T:acorn128 3396.49 3397.56 3398.66 T:led80n6silcv1 3403.83 3406.71 3430.44 T:led80n6t4silcv2 3670.06 3670.55 3671.62 T:present80n6t4silcv2 3672.97 3673.96 3675.99 T:present80n6silcv1