VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead -0.23? 0.25? 0.27? T:tiaoxinv1 0.24? 0.25? 0.27? T:tiaoxinv2 0.28 0.29 0.29 aegis128l 0.50 0.51 0.52 aegis256 0.51 0.52 0.52 T:aegis128 -3.61? 0.65? 4.82? T:aeadaes128ocbtaglen128v1 0.65 0.66 0.67 T:morus1280128v1 0.65 0.66 0.68 T:morus1280128v2 0.65 0.66 0.67 T:morus1280256v2 0.65 0.66 0.67 T:morus1280256v1 0.71 0.72 0.75 T:aezv3 0.71 0.72 0.72 T:aes128otrcv3 0.72 0.72 0.74 T:aes128otrsv3 0.72 0.73 0.74 T:aezv4 0.73 0.74 0.76 T:aes128otrpv3 0.74 0.75 0.76 T:aezv5 0.62? 0.81? 5.02? T:aeadaes192ocbtaglen128v1 0.92 0.94 0.95 T:aes256otrcv3 0.92 0.94 0.95 T:aes256otrsv3 0.96 0.97 0.98 T:aes256otrpv3 0.96 0.98 0.99 T:deoxysi128v141 -3.19? 1.06? 5.49? T:aeadaes256ocbtaglen128v1 1.09 1.10 1.11 T:morus640128v2 1.09 1.10 1.11 T:morus640128v1 1.07 1.10 1.12 T:deoxysi256v141 1.13 1.14 1.15 T:deoxysneq128128v1 1.22 1.23 1.25 T:norx6444v3 1.27 1.29 1.31 T:deoxysneq256128v1 1.41 1.43 1.44 T:aes128gcmv1 1.67 1.69 1.70 aes256gcmv1 1.89 1.93 1.96 T:deoxysii128v141 2.13 2.15 2.17 T:norx6441v2 2.15 2.16 2.17 T:norx6441v3 2.17 2.19 2.21 T:deoxysii256v141 2.16 2.23 2.27 T:lunarkeyakv2 2.28 2.29 2.36 T:deoxyseq128128v1 2.31 2.32 2.33 T:colm0v1 2.52 2.54 2.56 T:deoxyseq256128v1 2.59 2.61 2.62 T:norx6441v1 2.89 2.92 2.96 T:seakeyakv2 2.83? 3.06? 3.48? T:oceankeyakv2 3.23 3.24 3.26 T:norx6461v2 3.23 3.25 3.27 T:norx6461v3 3.86 3.87 3.91 T:norx3241v2 3.86 3.88 3.90 T:norx3241v3 3.91 3.94 3.97 T:norx6461v1 3.96 3.98 4.00 T:norx6444v2 4.09 4.13 4.19 T:lakekeyakv1 4.43 4.45 4.47 T:lakekeyakv2 4.45 4.46 4.51 T:norx6444v1 4.54 4.56 4.57 T:aes128n12t8silcv3 4.56 4.56 4.57 T:aes128n12t8silcv2 4.56 4.57 4.57 T:aes128n8t8silcv2 4.56 4.57 4.57 T:aes128n12t8clocv3 4.56 4.57 4.57 T:aes128n12t8clocv2 4.56 4.57 4.57 T:aes128n8t8clocv2 4.69 4.71 4.73 T:norx3241v1 5.76 5.78 5.79 T:acorn128v3 5.85 5.87 5.89 T:norx3261v3 5.91 5.93 5.95 T:norx3261v2 7.19 7.21 7.23 T:ascon128av11 7.22 7.23 7.27 T:ascon96v1 7.21 7.23 7.25 ascon128av12 7.38 7.44 7.47 T:ketjemajorv2 7.48 7.50 7.52 T:norx3261v1 7.74 7.79 7.85 T:acorn128v2 9.12 9.13 9.14 T:aesjambuv1 9.35 9.43 9.52 T:ketjeminorv2 9.90 9.94 9.98 T:riverkeyakv2 10.55 10.58 10.61 T:ascon128v1 10.56 10.59 10.60 T:ascon128v11 10.55 10.60 10.67 ascon128v12 14.56 14.57 14.59 T:twine80n6t4clocv3 14.79 14.81 14.87 T:aes128otrpv1 14.88 14.93 14.95 T:aes128otrpv2 15.27 15.34 15.37 T:aes128otrsv1 15.35 15.42 15.46 T:aes128otrsv2 15.65 15.66 15.68 T:twine80n6t4clocv2 19.09 19.13 19.23 T:aes256otrsv1 19.20 19.28 19.33 T:aes256otrsv2 19.33 19.35 19.38 T:aes256otrpv1 19.58 19.60 19.63 T:aes256otrpv2 24.66 24.72 24.76 T:aes128n12clocv1 24.73 24.78 24.82 T:aes128n8clocv1 24.75 24.79 24.83 T:aeadaes128ocbtaglen64v1 24.78 24.81 24.83 T:aeadaes128ocbtaglen96v1 26.11 26.15 26.19 T:proest256otrv1 29.14 29.19 29.23 T:aeadaes192ocbtaglen96v1 29.16 29.19 29.24 T:aeadaes192ocbtaglen64v1 29.72 30.08 30.65 T:ketjesrv1 31.05 31.09 31.10 T:ketjesrv2 33.58 33.65 33.70 T:aeadaes256ocbtaglen96v1 33.58 33.66 33.73 T:aeadaes256ocbtaglen64v1 54.44 54.48 54.52 T:proest128otrv1 54.81 54.88 55.01 T:colm127v1 66.59 66.66 66.70 T:ketjejrv1 68.40 68.49 69.70 T:present80n6t4silcv3 77.29 77.86 79.69 T:deoxysneq128128v13 93.19 93.36 93.64 T:ketjejrv2 121.64 121.85 123.06 T:deoxysneq256128v13 128.33 128.39 128.53 T:led80n6t4silcv3 155.54 155.72 158.56 T:deoxyseq128128v13 178.48 178.75 179.32 T:aezv1 244.06 244.16 244.70 T:deoxyseq256128v13 335.24 336.20 338.48 T:acorn128 4075.44 4079.44 4081.43 T:led80n6silcv1 4085.20 4088.29 4092.02 T:led80n6t4silcv2 4540.84 4542.69 4545.90 T:present80n6t4silcv2 4540.17 4545.17 4547.47 T:present80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.30 0.30 0.31 aegis128l -0.10? 0.38? 0.40? T:tiaoxinv1 0.38 0.39 0.41 T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.59 0.60 aegis256 0.67 0.68 0.69 T:morus1280256v1 0.67 0.68 0.69 T:morus1280256v2 0.67 0.68 0.69 T:morus1280128v2 0.67 0.68 0.70 T:morus1280128v1 0.70 0.71 0.71 T:aezv4 0.70 0.71 0.71 T:aezv3 0.67? 0.72? 0.78? T:aeadaes128ocbtaglen128v1 0.71 0.72 0.74 T:aezv5 0.72 0.74 0.75 T:aes128otrsv3 0.73 0.74 0.75 T:aes128otrcv3 0.75 0.77 0.79 T:aes128otrpv3 -3.31? 0.84? 0.88? T:aeadaes192ocbtaglen128v1 0.94 0.95 0.97 T:aes256otrsv3 0.95 0.96 0.98 T:aes256otrcv3 0.96 0.99 1.00 T:aes256otrpv3 1.03 1.08 1.09 T:aeadaes256ocbtaglen128v1 1.09 1.11 1.11 T:morus640128v1 1.10 1.11 1.12 T:morus640128v2 1.19 1.21 1.23 T:deoxysi128v141 1.23 1.24 1.27 T:norx6444v3 1.28 1.32 1.34 T:deoxysi256v141 1.51 1.53 1.54 T:deoxysneq128128v1 1.63 1.64 1.64 T:deoxysneq256128v1 1.74 1.76 1.77 T:aes128gcmv1 1.91 1.93 1.97 T:deoxysii128v141 2.07 2.09 2.10 T:norx6441v3 2.07 2.10 2.11 T:norx6441v2 2.17 2.20 2.23 T:deoxysii256v141 2.24 2.28 2.40 T:lunarkeyakv2 2.22 2.29 2.36 T:colm0v1 2.39 2.41 2.42 aes256gcmv1 2.55 2.56 2.58 T:norx6441v1 2.96 2.99 3.04 T:seakeyakv2 3.05 3.06 3.07 T:deoxyseq128128v1 2.89? 3.07? 3.55? T:oceankeyakv2 3.16 3.18 3.20 T:norx6461v3 3.16 3.19 3.21 T:norx6461v2 3.27 3.30 3.31 T:deoxyseq256128v1 3.75 3.78 3.80 T:norx3241v2 3.78 3.79 3.80 T:norx3241v3 3.85 3.88 3.89 T:norx6461v1 3.98 4.00 4.04 T:norx6444v2 4.16 4.21 4.26 T:lakekeyakv1 4.40 4.44 4.50 T:norx6444v1 4.43 4.48 4.50 T:lakekeyakv2 4.45 4.50 4.51 T:aes128n12t8silcv2 4.45 4.50 4.51 T:aes128n8t8silcv2 4.49 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv3 4.56 4.57 4.58 T:norx3241v1 5.80 5.83 5.86 T:norx3261v3 5.83 5.86 5.88 T:norx3261v2 6.76 6.79 6.83 T:acorn128v3 7.27 7.28 7.30 ascon128av12 7.31 7.34 7.36 T:ascon128av11 7.33 7.35 7.39 T:ascon96v1 7.37 7.38 7.40 T:norx3261v1 7.35 7.42 7.47 T:ketjemajorv2 8.01 8.07 8.10 T:acorn128v2 9.43 9.43 9.44 T:aesjambuv1 10.08 10.14 10.16 T:riverkeyakv2 10.22 10.27 10.37 T:ketjeminorv2 10.49 10.53 10.56 T:ascon128v1 10.51 10.55 10.59 T:ascon128v11 10.60 10.63 10.70 ascon128v12 14.74 14.78 14.82 T:twine80n6t4clocv3 15.07 15.12 15.16 T:aes128otrpv1 15.27 15.36 15.42 T:aes128otrpv2 15.53 15.55 15.60 T:twine80n6t4clocv2 15.61 15.67 15.74 T:aes128otrsv2 15.68 15.72 15.77 T:aes128otrsv1 19.60 19.63 19.71 T:aes256otrsv2 19.64 19.69 19.72 T:aes256otrpv1 19.70 19.75 19.80 T:aes256otrpv2 19.78 19.83 19.89 T:aes256otrsv1 23.62 23.67 23.78 T:aes128n12clocv1 24.21 24.25 24.34 T:aes128n8clocv1 25.84 25.97 26.04 T:proest256otrv1 30.55 30.57 30.64 T:ketjesrv2 31.06 31.34 31.90 T:ketjesrv1 33.45 33.51 33.60 T:aeadaes128ocbtaglen96v1 33.44 33.54 33.61 T:aeadaes128ocbtaglen64v1 39.88 39.94 39.99 T:aeadaes192ocbtaglen96v1 39.87 39.95 40.12 T:aeadaes192ocbtaglen64v1 46.21 46.32 46.44 T:aeadaes256ocbtaglen64v1 46.26 46.33 46.41 T:aeadaes256ocbtaglen96v1 54.70 54.74 54.79 T:proest128otrv1 61.33 66.58 66.63 T:ketjejrv1 68.48 68.62 69.84 T:present80n6t4silcv3 72.40 72.50 72.66 T:colm127v1 95.36 95.42 95.50 T:ketjejrv2 109.42 109.61 111.50 T:deoxysneq128128v13 129.50 129.61 129.67 T:led80n6t4silcv3 155.55 155.75 158.47 T:deoxyseq128128v13 157.62 157.80 158.88 T:deoxysneq256128v13 178.31 178.96 179.85 T:aezv1 243.98 244.28 244.72 T:deoxyseq256128v13 378.95 379.26 383.31 T:acorn128 4075.97 4078.69 4080.58 T:led80n6silcv1 4084.23 4087.51 4091.41 T:led80n6t4silcv2 4541.35 4542.06 4544.31 T:present80n6t4silcv2 4539.95 4543.78 4546.19 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.27 0.28 0.28 T:aezv4 0.23? 0.28? 0.33? T:aezv3 0.28 0.28 0.29 T:aezv5 0.29 0.29 0.31 aegis128l -0.10? 0.39? 0.40? T:tiaoxinv1 0.38 0.39 0.41 T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.60 0.60 aegis256 0.66 0.68 0.68 T:morus1280256v1 0.67 0.68 0.69 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v2 0.68 0.69 0.69 T:morus1280128v1 -3.48? 0.72? 4.94? T:aeadaes128ocbtaglen128v1 0.73 0.74 0.75 T:aes128otrcv3 0.73 0.74 0.75 T:aes128otrsv3 0.75 0.75 0.77 T:aes128otrpv3 0.83? 0.84? 5.09? T:aeadaes192ocbtaglen128v1 0.95 0.96 0.96 T:aes256otrcv3 0.95 0.96 0.97 T:aes256otrsv3 0.96 0.97 0.98 T:aes256otrpv3 1.05 1.09 1.10 T:aeadaes256ocbtaglen128v1 1.10 1.11 1.12 T:morus640128v1 1.11 1.11 1.13 T:morus640128v2 1.18 1.21 1.24 T:deoxysi128v141 1.23 1.24 1.25 T:norx6444v3 1.28 1.30 1.36 T:deoxysi256v141 1.52 1.53 1.56 T:deoxysneq128128v1 1.63 1.64 1.68 T:deoxysneq256128v1 1.75 1.76 1.76 T:aes128gcmv1 1.91 1.94 1.96 T:deoxysii128v141 2.08 2.09 2.11 T:norx6441v3 2.08 2.10 2.11 T:norx6441v2 2.19 2.21 2.24 T:deoxysii256v141 2.27 2.31 2.37 T:lunarkeyakv2 2.25 2.34 2.35 T:colm0v1 2.40 2.41 2.42 aes256gcmv1 2.55 2.56 2.57 T:norx6441v1 2.98 3.01 3.06 T:seakeyakv2 3.03 3.07 3.10 T:deoxyseq128128v1 2.90? 3.11? 3.58? T:oceankeyakv2 3.17 3.18 3.19 T:norx6461v2 3.17 3.19 3.20 T:norx6461v3 3.24 3.30 3.33 T:deoxyseq256128v1 3.76 3.79 3.80 T:norx3241v2 3.78 3.80 3.81 T:norx3241v3 3.85 3.86 3.88 T:norx6461v1 4.01 4.02 4.06 T:norx6444v2 4.20 4.24 4.28 T:lakekeyakv1 4.43 4.46 4.51 T:norx6444v1 4.42 4.46 4.49 T:lakekeyakv2 4.49 4.50 4.50 T:aes128n12t8silcv2 4.49 4.50 4.50 T:aes128n12t8silcv3 4.45 4.50 4.51 T:aes128n8t8clocv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.45 4.50 4.51 T:aes128n12t8clocv3 4.50 4.51 4.51 T:aes128n12t8clocv2 4.55 4.56 4.57 T:norx3241v1 5.79 5.81 5.84 T:norx3261v3 5.85 5.86 5.88 T:norx3261v2 6.78 6.80 6.82 T:acorn128v3 7.27 7.29 7.31 ascon128av12 7.31 7.33 7.35 T:ascon96v1 7.31 7.35 7.38 T:ascon128av11 7.36 7.38 7.39 T:norx3261v1 7.36 7.44 7.49 T:ketjemajorv2 8.02 8.07 8.09 T:acorn128v2 9.43 9.44 9.44 T:aesjambuv1 10.11 10.15 10.18 T:riverkeyakv2 10.25 10.29 10.39 T:ketjeminorv2 10.52 10.55 10.57 T:ascon128v1 10.52 10.56 10.57 T:ascon128v11 10.60 10.65 10.68 ascon128v12 14.75 14.78 14.80 T:twine80n6t4clocv3 15.12 15.16 15.20 T:aes128otrpv1 15.23 15.29 15.43 T:aes128otrpv2 15.51 15.53 15.56 T:twine80n6t4clocv2 15.67 15.71 15.76 T:aes128otrsv2 15.69 15.76 15.80 T:aes128otrsv1 19.58 19.67 19.71 T:aes256otrsv2 19.69 19.73 19.75 T:aes256otrpv1 19.72 19.75 19.81 T:aes256otrpv2 19.80 19.88 19.95 T:aes256otrsv1 23.60 23.70 23.79 T:aes128n12clocv1 24.23 24.27 24.30 T:aes128n8clocv1 25.97 26.04 26.09 T:proest256otrv1 30.56 30.59 30.66 T:ketjesrv2 31.02 31.31 31.83 T:ketjesrv1 33.45 33.50 33.56 T:aeadaes128ocbtaglen96v1 33.44 33.56 33.60 T:aeadaes128ocbtaglen64v1 39.92 39.95 39.98 T:aeadaes192ocbtaglen96v1 39.94 40.03 40.16 T:aeadaes192ocbtaglen64v1 46.32 46.36 46.41 T:aeadaes256ocbtaglen96v1 46.32 46.42 46.48 T:aeadaes256ocbtaglen64v1 54.73 54.77 54.82 T:proest128otrv1 66.14 66.61 66.69 T:ketjejrv1 68.52 68.61 69.84 T:present80n6t4silcv3 71.25 71.30 71.41 T:colm127v1 95.39 95.47 95.55 T:ketjejrv2 109.39 109.65 111.51 T:deoxysneq128128v13 127.71 129.55 129.70 T:led80n6t4silcv3 155.57 155.73 158.54 T:deoxyseq128128v13 157.59 157.75 158.85 T:deoxysneq256128v13 177.79 177.96 178.85 T:aezv1 244.03 244.20 244.73 T:deoxyseq256128v13 378.95 379.75 380.77 T:acorn128 4075.90 4078.93 4080.99 T:led80n6silcv1 4085.18 4086.70 4090.29 T:led80n6t4silcv2 4540.46 4542.47 4546.10 T:present80n6t4silcv2 4542.76 4544.14 4546.21 T:present80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.20? 0.22? 0.23? T:tiaoxinv2 0.20? 0.22? 0.24? T:tiaoxinv1 0.26 0.27 0.28 aegis128l 0.49 0.51 0.51 T:aezv3 0.49 0.51 0.52 aegis256 0.49 0.52 0.53 T:aezv4 0.53 0.54 0.56 T:aezv5 0.54 0.54 0.55 T:aegis128 0.63 0.64 0.64 T:morus1280256v1 0.62 0.64 0.65 T:morus1280256v2 0.63 0.64 0.65 T:morus1280128v2 0.64 0.64 0.64 T:morus1280128v1 -1.51? 0.65? 2.77? T:aeadaes128ocbtaglen128v1 0.73 0.73 0.74 T:aes128otrcv3 0.66? 0.78? 0.87? T:aeadaes192ocbtaglen128v1 0.80 0.81 0.82 T:aes128otrpv3 0.94 0.95 0.96 T:aes256otrcv3 0.92 0.96 0.96 T:deoxysi128v141 0.97 1.01 1.05 T:aeadaes256ocbtaglen128v1 1.03 1.06 1.06 T:aes128gcmv1 1.05 1.06 1.06 T:aes256otrpv3 1.06 1.08 1.08 T:morus640128v2 1.07 1.08 1.09 T:morus640128v1 1.08 1.10 1.12 T:deoxysi256v141 1.13 1.14 1.15 T:deoxysneq128128v1 1.14 1.17 1.19 aes256gcmv1 1.25 1.26 1.27 T:deoxysneq256128v1 1.42 1.45 1.46 T:deoxysii128v141 1.59 1.62 1.65 T:deoxysii256v141 1.61 1.63 1.63 T:colm0v1 1.68 1.69 1.70 T:norx6444v3 1.72 1.75 1.78 T:deoxyseq128128v1 1.89 1.90 1.92 T:deoxyseq256128v1 2.14 2.15 2.16 T:norx6441v2 2.15 2.16 2.17 T:norx6441v3 2.46 2.49 2.53 T:seakeyakv2 2.56 2.57 2.59 T:oceankeyakv2 2.57 2.59 2.61 T:norx6441v1 2.60 2.61 2.61 T:aes128otrsv3 3.05 3.08 3.11 T:lunarkeyakv2 3.24 3.26 3.28 T:norx6461v3 3.26 3.27 3.29 T:norx6461v2 3.58 3.59 3.60 T:aes256otrsv3 3.69 3.71 3.73 T:norx6444v2 3.87 3.89 3.89 T:norx3241v3 3.87 3.89 3.90 T:norx3241v2 3.88 3.89 3.91 T:norx6461v1 3.90 3.95 3.99 T:lakekeyakv1 3.94 3.95 3.96 T:lakekeyakv2 4.38 4.39 4.41 T:norx6444v1 4.53 4.53 4.54 T:aes128n8t8silcv2 4.53 4.53 4.54 T:aes128n12t8silcv3 4.53 4.53 4.54 T:aes128n12t8silcv2 4.53 4.53 4.54 T:aes128n12t8clocv2 4.53 4.53 4.54 T:aes128n8t8clocv2 4.53 4.54 4.54 T:aes128n12t8clocv3 4.69 4.70 4.71 T:norx3241v1 5.84 5.85 5.87 T:norx3261v3 5.86 5.87 5.89 T:norx3261v2 6.36 6.37 6.39 T:acorn128v3 6.56 6.59 6.61 T:ketjemajorv2 7.11 7.12 7.15 T:ascon128av11 7.11 7.13 7.17 T:ascon96v1 7.19 7.22 7.23 ascon128av12 7.21 7.24 7.40 T:riverkeyakv2 7.31 7.34 7.37 T:acorn128v2 7.48 7.49 7.51 T:norx3261v1 8.53 8.57 8.68 T:ketjeminorv2 9.06 9.07 9.07 T:aesjambuv1 10.54 10.55 10.57 T:ascon128v1 10.53 10.56 10.57 T:ascon128v11 10.60 10.62 10.67 ascon128v12 13.89 13.92 13.96 T:aes128otrsv1 13.90 13.93 13.97 T:aes128otrsv2 14.18 14.21 14.24 T:aes128otrpv1 14.30 14.33 14.44 T:aes128otrpv2 14.36 14.38 14.39 T:twine80n6t4clocv3 15.39 15.41 15.43 T:twine80n6t4clocv2 17.78 17.81 17.86 T:aes256otrsv1 17.84 17.91 17.98 T:aes256otrsv2 18.69 18.71 18.73 T:aes256otrpv1 18.83 18.85 18.89 T:aes256otrpv2 18.89 18.92 18.95 T:aes128n12clocv1 18.91 18.94 18.99 T:aes128n8clocv1 24.48 24.51 24.54 T:aeadaes128ocbtaglen64v1 24.47 24.51 24.53 T:aeadaes128ocbtaglen96v1 26.34 26.35 26.39 T:proest256otrv1 26.58 26.86 27.16 T:ketjesrv1 28.41 28.43 28.46 T:ketjesrv2 28.87 28.89 28.93 T:aeadaes192ocbtaglen64v1 28.86 28.89 28.93 T:aeadaes192ocbtaglen96v1 33.33 33.35 33.37 T:aeadaes256ocbtaglen96v1 33.32 33.37 33.39 T:aeadaes256ocbtaglen64v1 40.32 40.35 40.51 T:colm127v1 54.94 54.98 54.99 T:proest128otrv1 61.85 61.87 61.89 T:ketjejrv1 67.81 67.92 69.12 T:present80n6t4silcv3 77.96 78.20 79.76 T:deoxysneq128128v13 90.45 90.57 90.76 T:ketjejrv2 116.23 116.46 116.72 T:deoxyseq128128v13 116.70 117.02 117.07 T:aezv1 121.47 121.64 122.95 T:deoxysneq256128v13 127.88 127.94 127.99 T:led80n6t4silcv3 182.39 182.57 182.72 T:deoxyseq256128v13 331.06 331.36 332.67 T:acorn128 3058.89 3059.33 3060.58 T:led80n6silcv1 3063.99 3064.63 3065.12 T:led80n6t4silcv2 3405.18 3406.85 3408.06 T:present80n6silcv1 3407.35 3408.91 3410.64 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.27 0.28 0.28 aegis128l 0.27 0.29 0.30 T:tiaoxinv2 0.28 0.29 0.30 T:tiaoxinv1 0.49 0.50 0.51 T:aezv3 0.49 0.50 0.52 T:aezv4 0.51 0.52 0.53 T:aezv5 0.54 0.54 0.54 T:aegis128 0.54 0.55 0.55 aegis256 0.64 0.65 0.66 T:morus1280128v1 0.64 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.64 0.65 0.66 T:morus1280128v2 0.54? 0.67? 0.73? T:aeadaes128ocbtaglen128v1 0.75 0.75 0.76 T:aes128otrcv3 0.74? 0.79? 0.89? T:aeadaes192ocbtaglen128v1 0.82 0.83 0.84 T:aes128otrpv3 0.96 0.96 0.97 T:aes256otrcv3 -1.07? 1.04? 3.20? T:aeadaes256ocbtaglen128v1 1.06 1.07 1.08 T:morus640128v2 1.05 1.07 1.08 T:aes256otrpv3 1.07 1.08 1.08 T:morus640128v1 1.06 1.08 1.09 T:deoxysi128v141 1.18 1.21 1.22 T:deoxysi256v141 1.20 1.22 1.24 T:aes128gcmv1 1.32 1.34 1.35 T:deoxysneq128128v1 1.42 1.43 1.44 T:deoxysneq256128v1 1.42 1.43 1.44 T:deoxysii128v141 1.52 1.55 1.55 aes256gcmv1 1.60 1.63 1.64 T:deoxysii256v141 1.57 1.64 1.64 T:colm0v1 1.69 1.70 1.71 T:norx6444v3 2.10 2.12 2.13 T:norx6441v3 2.11 2.12 2.14 T:norx6441v2 2.12 2.13 2.13 T:deoxyseq128128v1 2.27 2.29 2.29 T:deoxyseq256128v1 2.49 2.51 2.53 T:seakeyakv2 2.56 2.57 2.58 T:norx6441v1 2.62 2.62 2.63 T:aes128otrsv3 2.59 2.63 2.65 T:oceankeyakv2 3.09 3.11 3.15 T:lunarkeyakv2 3.21 3.22 3.23 T:norx6461v3 3.22 3.23 3.25 T:norx6461v2 3.60 3.60 3.61 T:aes256otrsv3 3.69 3.71 3.74 T:norx6444v2 3.83 3.85 3.86 T:norx3241v3 3.84 3.86 3.87 T:norx3241v2 3.84 3.86 3.87 T:norx6461v1 3.94 3.96 3.99 T:lakekeyakv2 3.94 3.97 4.02 T:lakekeyakv1 4.36 4.37 4.41 T:norx6444v1 4.49 4.50 4.51 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.49 4.50 4.53 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.51 4.53 T:aes128n12t8clocv3 4.50 4.53 4.53 T:aes128n12t8clocv2 4.62 4.63 4.65 T:norx3241v1 5.83 5.85 5.86 T:norx3261v2 5.83 5.85 5.87 T:norx3261v3 6.56 6.58 6.61 T:ketjemajorv2 6.87 6.89 6.90 T:acorn128v3 7.15 7.16 7.24 T:ascon128av11 7.20 7.22 7.24 ascon128av12 7.22 7.24 7.26 T:ascon96v1 7.26 7.28 7.46 T:riverkeyakv2 7.42 7.43 7.44 T:norx3261v1 7.42 7.53 7.55 T:acorn128v2 8.93 8.97 9.08 T:ketjeminorv2 9.22 9.22 9.22 T:aesjambuv1 10.38 10.45 10.47 T:ascon128v1 10.43 10.48 10.50 T:ascon128v11 10.62 10.65 10.66 ascon128v12 14.08 14.11 14.15 T:aes128otrsv1 14.08 14.12 14.15 T:aes128otrsv2 14.30 14.34 14.36 T:aes128otrpv1 14.46 14.49 14.50 T:twine80n6t4clocv3 14.41 14.58 14.70 T:aes128otrpv2 15.31 15.33 15.36 T:twine80n6t4clocv2 18.01 18.13 18.18 T:aes256otrsv2 18.14 18.18 18.27 T:aes256otrsv1 18.37 18.44 18.53 T:aes128n12clocv1 18.67 18.70 18.74 T:aes128n8clocv1 18.85 18.87 18.90 T:aes256otrpv1 18.89 18.91 18.94 T:aes256otrpv2 26.27 26.28 26.31 T:proest256otrv1 27.19 27.54 27.75 T:ketjesrv1 28.19 28.22 28.23 T:ketjesrv2 28.82 28.85 28.94 T:aeadaes128ocbtaglen96v1 28.83 28.88 28.92 T:aeadaes128ocbtaglen64v1 34.27 34.30 34.32 T:aeadaes192ocbtaglen96v1 34.24 34.35 34.37 T:aeadaes192ocbtaglen64v1 39.68 39.72 39.76 T:aeadaes256ocbtaglen64v1 39.69 39.73 39.77 T:aeadaes256ocbtaglen96v1 49.17 49.24 49.27 T:colm127v1 55.09 55.12 55.15 T:proest128otrv1 61.62 61.66 61.88 T:ketjejrv1 67.89 67.98 69.21 T:present80n6t4silcv3 91.47 91.53 91.60 T:ketjejrv2 94.01 94.23 96.36 T:deoxysneq128128v13 116.14 116.41 116.60 T:deoxyseq128128v13 116.85 117.16 117.53 T:aezv1 127.47 127.55 127.60 T:led80n6t4silcv3 139.32 139.53 140.86 T:deoxysneq256128v13 182.39 182.50 182.65 T:deoxyseq256128v13 357.40 357.56 357.96 T:acorn128 3058.17 3059.32 3060.43 T:led80n6silcv1 3064.40 3065.51 3066.81 T:led80n6t4silcv2 3405.76 3406.29 3407.77 T:present80n6silcv1 3407.40 3407.92 3408.93 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.27 0.28 0.28 aegis128l 0.26? 0.28? 0.29? T:aezv3 0.28 0.29 0.29 T:aezv4 0.28 0.29 0.30 T:tiaoxinv2 0.28 0.29 0.29 T:tiaoxinv1 0.30 0.30 0.31 T:aezv5 0.54 0.54 0.54 T:aegis128 0.55 0.55 0.55 aegis256 0.64 0.65 0.65 T:morus1280128v1 0.65 0.65 0.65 T:morus1280256v2 0.64 0.65 0.66 T:morus1280128v2 0.65 0.65 0.66 T:morus1280256v1 -1.48? 0.67? 2.84? T:aeadaes128ocbtaglen128v1 0.75 0.76 0.76 T:aes128otrcv3 -1.37? 0.80? 3.01? T:aeadaes192ocbtaglen128v1 0.83 0.83 0.83 T:aes128otrpv3 0.96 0.96 0.97 T:aes256otrcv3 -1.07? 1.03? 3.18? T:aeadaes256ocbtaglen128v1 1.06 1.07 1.07 T:morus640128v2 1.06 1.07 1.07 T:aes256otrpv3 1.07 1.08 1.08 T:morus640128v1 1.07 1.09 1.09 T:deoxysi128v141 1.18 1.21 1.23 T:deoxysi256v141 1.19 1.22 1.23 T:aes128gcmv1 1.32 1.34 1.35 T:deoxysneq128128v1 1.42 1.44 1.45 T:deoxysii128v141 1.43 1.44 1.44 T:deoxysneq256128v1 1.54 1.54 1.55 aes256gcmv1 1.58 1.61 1.64 T:colm0v1 1.61 1.63 1.65 T:deoxysii256v141 1.69 1.70 1.70 T:norx6444v3 2.11 2.12 2.13 T:norx6441v2 2.11 2.12 2.13 T:norx6441v3 2.12 2.13 2.14 T:deoxyseq128128v1 2.26 2.29 2.30 T:deoxyseq256128v1 2.51 2.53 2.56 T:seakeyakv2 2.56 2.57 2.57 T:norx6441v1 2.62 2.62 2.63 T:aes128otrsv3 2.61 2.63 2.65 T:oceankeyakv2 3.11 3.13 3.15 T:lunarkeyakv2 3.20 3.21 3.23 T:norx6461v3 3.21 3.22 3.23 T:norx6461v2 3.60 3.60 3.61 T:aes256otrsv3 3.70 3.73 3.74 T:norx6444v2 3.83 3.85 3.86 T:norx6461v1 3.83 3.85 3.86 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 3.93 3.96 3.98 T:lakekeyakv2 3.95 3.98 4.04 T:lakekeyakv1 4.38 4.39 4.42 T:norx6444v1 4.47 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.51 T:aes128n12t8silcv3 4.50 4.50 4.53 T:aes128n12t8clocv3 4.50 4.53 4.53 T:aes128n12t8clocv2 4.52 4.53 4.53 T:aes128n8t8clocv2 4.62 4.63 4.64 T:norx3241v1 5.83 5.84 5.85 T:norx3261v3 5.84 5.84 5.85 T:norx3261v2 6.57 6.59 6.61 T:ketjemajorv2 6.87 6.88 6.89 T:acorn128v3 7.16 7.18 7.21 T:ascon128av11 7.20 7.21 7.23 ascon128av12 7.21 7.23 7.25 T:ascon96v1 7.28 7.29 7.46 T:riverkeyakv2 7.42 7.43 7.44 T:norx3261v1 7.50 7.53 7.56 T:acorn128v2 8.98 9.09 9.15 T:ketjeminorv2 9.21 9.22 9.22 T:aesjambuv1 10.40 10.43 10.48 T:ascon128v1 10.44 10.46 10.48 T:ascon128v11 10.63 10.66 10.67 ascon128v12 14.10 14.12 14.14 T:aes128otrsv1 14.10 14.12 14.15 T:aes128otrsv2 14.35 14.38 14.39 T:aes128otrpv1 14.46 14.48 14.50 T:twine80n6t4clocv3 14.43 14.54 14.68 T:aes128otrpv2 15.32 15.33 15.36 T:twine80n6t4clocv2 18.08 18.13 18.18 T:aes256otrsv2 18.15 18.18 18.21 T:aes256otrsv1 18.36 18.42 18.57 T:aes128n12clocv1 18.64 18.69 18.71 T:aes128n8clocv1 18.88 18.89 18.92 T:aes256otrpv1 18.91 18.93 18.95 T:aes256otrpv2 26.26 26.29 26.31 T:proest256otrv1 27.21 27.52 27.78 T:ketjesrv1 28.19 28.20 28.24 T:ketjesrv2 28.84 28.86 28.93 T:aeadaes128ocbtaglen96v1 28.84 28.88 28.91 T:aeadaes128ocbtaglen64v1 34.24 34.26 34.38 T:aeadaes192ocbtaglen64v1 34.28 34.29 34.32 T:aeadaes192ocbtaglen96v1 39.71 39.74 39.77 T:aeadaes256ocbtaglen64v1 39.71 39.74 39.77 T:aeadaes256ocbtaglen96v1 48.57 48.61 48.68 T:colm127v1 55.09 55.12 55.13 T:proest128otrv1 61.61 61.63 61.68 T:ketjejrv1 67.92 68.00 69.21 T:present80n6t4silcv3 91.52 91.56 91.61 T:ketjejrv2 94.03 94.23 96.36 T:deoxysneq128128v13 116.15 116.41 116.58 T:deoxyseq128128v13 116.58 116.89 117.01 T:aezv1 127.45 127.49 127.55 T:led80n6t4silcv3 139.45 139.62 140.74 T:deoxysneq256128v13 182.46 182.49 182.64 T:deoxyseq256128v13 357.41 357.56 357.66 T:acorn128 3057.86 3059.41 3059.79 T:led80n6silcv1 3064.86 3065.70 3067.21 T:led80n6t4silcv2 3405.18 3406.94 3408.43 T:present80n6silcv1 3407.07 3407.63 3408.55 T:present80n6t4silcv2

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.17? 0.19? 0.19? T:tiaoxinv1 0.17? 0.19? 0.20? T:tiaoxinv2 0.25 0.26 0.26 aegis128l 0.27 0.29 0.30 T:aezv3 0.29 0.30 0.31 T:aezv4 0.32 0.33 0.34 T:aezv5 0.49 0.50 0.50 aegis256 0.56 0.56 0.57 T:aegis128 0.61 0.61 0.62 T:morus1280128v2 0.61 0.62 0.62 T:morus1280256v2 0.61 0.62 0.63 T:morus1280128v1 0.61 0.62 0.63 T:morus1280256v1 -3.57? 0.63? 4.83? T:aeadaes128ocbtaglen128v1 0.64 0.67 0.70 aes256gcmv1 0.65 0.70 0.72 T:aes128gcmv1 0.70? 0.74? 4.89? T:aeadaes192ocbtaglen128v1 0.74 0.75 0.75 T:aes128otrcv3 0.88 0.90 0.92 T:aes128otrpv3 0.92 0.94 0.94 T:deoxysi128v141 0.93 0.94 0.94 T:deoxysii128v141 0.93 0.94 0.95 T:colm0v1 0.95 0.96 0.97 T:aes256otrcv3 0.97 1.01 1.06 T:aeadaes256ocbtaglen128v1 1.04 1.05 1.06 T:morus640128v1 1.04 1.05 1.07 T:morus640128v2 1.03 1.07 1.09 T:deoxysii256v141 1.07 1.09 1.10 T:deoxysi256v141 1.08 1.12 1.16 T:deoxysneq128128v1 1.15 1.17 1.19 T:aes256otrpv3 1.15 1.17 1.18 T:deoxyseq128128v1 1.23 1.24 1.26 T:deoxysneq256128v1 1.24 1.26 1.27 T:deoxyseq256128v1 1.80? 1.97? 2.06? T:oceankeyakv2 1.95 1.99 2.07 T:lunarkeyakv2 2.13 2.14 2.17 T:norx6441v3 2.13 2.15 2.17 T:norx6444v3 2.14 2.15 2.16 T:norx6441v2 2.35 2.39 2.43 T:seakeyakv2 2.57 2.58 2.60 T:norx6441v1 3.24 3.26 3.29 T:norx6461v3 3.28 3.29 3.31 T:norx6461v2 3.39 3.41 3.41 T:norx6444v2 3.57 3.60 3.63 T:lakekeyakv2 3.64 3.70 3.74 T:lakekeyakv1 3.86 3.88 3.90 T:norx3241v3 3.88 3.90 3.92 T:norx3241v2 3.86 3.90 3.92 T:norx6461v1 4.31 4.33 4.35 T:norx6444v1 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.51 T:aes128n12t8silcv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.51 T:aes128n12t8silcv3 4.50 4.51 4.51 T:aes128n12t8clocv3 4.50 4.51 4.51 T:aes128n8t8silcv2 4.66 4.69 4.71 T:norx3241v1 5.69 5.74 5.79 T:ketjemajorv2 5.81 5.85 5.86 T:norx3261v2 5.84 5.86 5.88 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.83 6.86 6.87 T:riverkeyakv2 6.81 6.87 6.89 T:acorn128v2 6.95 6.96 6.99 T:acorn128v3 7.01 7.03 7.06 T:ascon128av11 6.99 7.07 7.09 T:ascon96v1 7.13 7.16 7.19 ascon128av12 7.47 7.49 7.52 T:norx3261v1 7.61 7.66 7.80 T:ketjeminorv2 9.00 9.00 9.01 T:aesjambuv1 10.50 10.53 10.56 T:ascon128v11 10.49 10.53 10.54 T:ascon128v1 10.59 10.62 10.66 ascon128v12 12.42 12.45 12.48 T:aes128otrsv2 12.47 12.51 12.53 T:aes128otrsv1 13.05 13.07 13.10 T:aes128n8clocv1 13.05 13.08 13.10 T:aes128n12clocv1 13.42 13.46 13.58 T:aes128otrpv1 13.69 13.71 13.92 T:aes128otrpv2 14.17 14.18 14.19 T:twine80n6t4clocv3 15.09 15.12 15.14 T:twine80n6t4clocv2 16.37 16.42 16.57 T:aes256otrsv2 16.39 16.45 16.50 T:aes256otrsv1 18.00 18.02 18.06 T:aes256otrpv1 18.01 18.03 18.06 T:aes256otrpv2 23.45 23.66 23.69 T:ketjesrv1 24.18 24.20 24.24 T:aeadaes128ocbtaglen96v1 24.17 24.23 24.25 T:aeadaes128ocbtaglen64v1 25.85 25.89 25.90 T:ketjesrv2 25.92 25.95 26.05 T:colm127v1 26.53 26.59 26.62 T:proest256otrv1 28.59 28.62 28.66 T:aeadaes192ocbtaglen96v1 28.60 28.64 28.68 T:aeadaes192ocbtaglen64v1 33.01 33.05 33.08 T:aeadaes256ocbtaglen64v1 33.04 33.08 33.13 T:aeadaes256ocbtaglen96v1 55.47 55.52 55.57 T:proest128otrv1 55.86 55.97 56.12 T:aezv1 57.16 57.19 57.24 T:ketjejrv1 67.28 67.40 68.64 T:present80n6t4silcv3 76.45 76.58 77.35 T:deoxyseq128128v13 78.01 78.42 80.21 T:deoxysneq128128v13 87.64 87.68 87.76 T:ketjejrv2 120.77 120.99 121.05 T:deoxyseq256128v13 121.24 121.69 122.80 T:deoxysneq256128v13 127.38 127.46 127.53 T:led80n6t4silcv3 326.21 326.75 327.16 T:acorn128 2038.81 2039.36 2045.75 T:led80n6t4silcv2 2038.63 2041.23 2043.98 T:led80n6silcv1 2268.92 2271.51 2275.47 T:present80n6silcv1 2269.98 2272.46 2275.47 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.17? 0.19? 0.20? T:tiaoxinv2 0.18? 0.20? 0.23? T:tiaoxinv1 0.25 0.26 0.26 aegis128l 0.29 0.30 0.31 T:aezv3 0.29 0.30 0.30 T:aezv4 0.32 0.33 0.33 T:aezv5 0.49 0.50 0.50 aegis256 0.52 0.52 0.53 T:aegis128 0.59? 0.62? 0.67? T:aeadaes128ocbtaglen128v1 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.63 T:morus1280128v2 0.62 0.63 0.64 T:morus1280256v2 0.65 0.71 0.72 T:aes128gcmv1 0.66 0.71 0.72 aes256gcmv1 0.74 0.74 0.75 T:aes128otrcv3 0.72 0.74 0.76 T:aeadaes192ocbtaglen128v1 0.89 0.89 0.90 T:aes128otrpv3 0.91 0.94 0.98 T:deoxysii128v141 0.94 0.94 0.95 T:colm0v1 0.94 0.96 0.97 T:deoxysi128v141 0.96 0.96 0.96 T:aes256otrcv3 -3.42? 1.00? 5.33? T:aeadaes256ocbtaglen128v1 1.01 1.02 1.04 T:morus640128v2 1.04 1.06 1.06 T:morus640128v1 1.04 1.06 1.08 T:deoxysii256v141 1.06 1.11 1.13 T:deoxysi256v141 1.11 1.14 1.14 T:deoxysneq128128v1 1.13 1.16 1.16 T:aes256otrpv3 1.11 1.19 1.19 T:deoxyseq128128v1 1.23 1.24 1.25 T:deoxysneq256128v1 1.25 1.28 1.30 T:deoxyseq256128v1 1.78? 1.98? 2.04? T:oceankeyakv2 1.95 1.99 2.05 T:lunarkeyakv2 2.13 2.15 2.16 T:norx6444v3 2.14 2.15 2.17 T:norx6441v2 2.14 2.15 2.17 T:norx6441v3 2.37 2.41 2.46 T:seakeyakv2 2.57 2.59 2.61 T:norx6441v1 3.23 3.25 3.26 T:norx6461v3 3.25 3.27 3.28 T:norx6461v2 3.40 3.44 3.46 T:norx6444v2 3.56 3.57 3.60 T:lakekeyakv2 3.64 3.67 3.72 T:lakekeyakv1 3.84 3.86 3.89 T:norx6461v1 3.88 3.90 3.92 T:norx3241v3 3.90 3.91 3.92 T:norx3241v2 4.31 4.33 4.35 T:norx6444v1 4.48 4.50 4.50 T:aes128n8t8clocv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.49 4.50 4.50 T:aes128n12t8clocv3 4.49 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.51 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128otrsv3 4.67 4.70 4.71 T:norx3241v1 5.68 5.75 5.81 T:ketjemajorv2 5.80 5.83 5.85 T:norx3261v2 5.85 5.86 5.88 T:norx3261v3 6.25 6.25 6.26 T:aes256otrsv3 6.82 6.86 6.88 T:riverkeyakv2 6.95 6.99 7.01 T:acorn128v3 6.94 6.99 7.14 T:ascon128av11 6.96 7.00 7.03 T:acorn128v2 7.06 7.11 7.16 T:ascon96v1 7.13 7.15 7.17 ascon128av12 7.46 7.48 7.50 T:norx3261v1 7.62 7.66 7.80 T:ketjeminorv2 9.00 9.00 9.00 T:aesjambuv1 10.32 10.34 10.38 T:ascon128v1 10.33 10.35 10.38 T:ascon128v11 10.60 10.63 10.66 ascon128v12 12.42 12.46 12.50 T:aes128otrsv2 12.48 12.51 12.53 T:aes128otrsv1 13.07 13.08 13.10 T:aes128n8clocv1 13.05 13.13 13.21 T:aes128n12clocv1 13.50 13.54 13.57 T:aes128otrpv1 13.66 13.74 14.11 T:aes128otrpv2 14.14 14.17 14.20 T:twine80n6t4clocv3 15.05 15.10 15.17 T:twine80n6t4clocv2 16.40 16.44 16.52 T:aes256otrsv1 16.38 16.45 16.57 T:aes256otrsv2 17.98 18.02 18.09 T:aes256otrpv1 18.00 18.02 18.06 T:aes256otrpv2 23.35 23.61 23.69 T:ketjesrv1 24.18 24.23 24.28 T:aeadaes128ocbtaglen64v1 24.20 24.23 24.25 T:aeadaes128ocbtaglen96v1 25.85 25.88 25.93 T:ketjesrv2 25.90 25.94 25.97 T:colm127v1 26.50 26.56 26.65 T:proest256otrv1 28.60 28.62 28.64 T:aeadaes192ocbtaglen96v1 28.61 28.67 28.71 T:aeadaes192ocbtaglen64v1 32.99 33.08 33.11 T:aeadaes256ocbtaglen64v1 33.04 33.10 33.14 T:aeadaes256ocbtaglen96v1 55.47 55.50 55.57 T:proest128otrv1 55.84 55.95 55.99 T:aezv1 50.45? 57.18? 57.24? T:ketjejrv1 67.30 67.39 68.63 T:present80n6t4silcv3 76.37 76.50 77.37 T:deoxyseq128128v13 78.21 78.44 80.20 T:deoxysneq128128v13 87.71 87.75 87.86 T:ketjejrv2 120.62 120.67 120.74 T:deoxyseq256128v13 121.09 121.34 122.46 T:deoxysneq256128v13 127.37 127.47 127.54 T:led80n6t4silcv3 335.83 336.05 336.20 T:acorn128 2037.17 2039.78 2042.74 T:led80n6silcv1 2040.69 2042.80 2046.37 T:led80n6t4silcv2 2267.69 2270.47 2277.38 T:present80n6silcv1 2269.94 2272.18 2277.37 T:present80n6t4silcv2

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.17? 0.19? 0.20? T:tiaoxinv1 0.16? 0.19? 0.22? T:tiaoxinv2 0.25 0.26 0.26 aegis128l 0.29 0.30 0.30 T:aezv4 0.29 0.30 0.30 T:aezv3 0.32 0.33 0.34 T:aezv5 0.49 0.50 0.51 aegis256 0.52 0.52 0.52 T:aegis128 0.62 0.62 0.63 T:morus1280128v2 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280256v1 0.62 0.63 0.64 T:morus1280256v2 -3.55? 0.64? 4.89? T:aeadaes128ocbtaglen128v1 0.66 0.68 0.71 T:aes128gcmv1 0.68 0.70 0.72 aes256gcmv1 -3.43? 0.74? 0.76? T:aeadaes192ocbtaglen128v1 0.74 0.74 0.75 T:aes128otrcv3 0.89 0.89 0.90 T:aes128otrpv3 0.91 0.96 0.97 T:deoxysii128v141 0.96 0.96 0.96 T:aes256otrcv3 0.93 0.97 1.00 T:deoxysi128v141 0.89? 0.98? 0.99? T:colm0v1 -3.24? 1.00? 5.36? T:aeadaes256ocbtaglen128v1 1.02 1.02 1.03 T:morus640128v2 1.05 1.05 1.06 T:morus640128v1 1.05 1.06 1.08 T:deoxysii256v141 1.08 1.11 1.13 T:deoxysi256v141 1.12 1.13 1.15 T:deoxysneq128128v1 1.15 1.16 1.16 T:aes256otrpv3 1.17 1.18 1.20 T:deoxyseq128128v1 1.23 1.26 1.28 T:deoxysneq256128v1 1.27 1.29 1.30 T:deoxyseq256128v1 1.94 2.00 2.06 T:lunarkeyakv2 1.79? 2.00? 2.03? T:oceankeyakv2 2.14 2.15 2.17 T:norx6441v2 2.14 2.15 2.16 T:norx6444v3 2.14 2.15 2.17 T:norx6441v3 2.38 2.42 2.44 T:seakeyakv2 2.57 2.59 2.61 T:norx6441v1 3.23 3.25 3.25 T:norx6461v3 3.26 3.27 3.28 T:norx6461v2 3.37 3.42 3.46 T:norx6444v2 3.55 3.57 3.60 T:lakekeyakv2 3.62 3.69 3.71 T:lakekeyakv1 3.84 3.86 3.88 T:norx6461v1 3.90 3.91 3.92 T:norx3241v3 3.90 3.91 3.93 T:norx3241v2 4.32 4.34 4.36 T:norx6444v1 4.45 4.49 4.51 T:aes128n12t8clocv3 4.44 4.50 4.50 T:aes128n12t8silcv3 4.49 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128otrsv3 4.44 4.50 4.50 T:aes128n12t8silcv2 4.48 4.50 4.52 T:aes128n12t8clocv2 4.49 4.50 4.50 T:aes128n8t8silcv2 4.68 4.70 4.72 T:norx3241v1 5.69 5.75 5.79 T:ketjemajorv2 5.81 5.83 5.86 T:norx3261v2 5.83 5.86 5.88 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.81 6.84 6.89 T:riverkeyakv2 6.97 6.98 7.17 T:ascon128av11 6.96 6.99 7.01 T:acorn128v3 6.84 7.02 7.05 T:acorn128v2 7.05 7.10 7.13 T:ascon96v1 7.13 7.15 7.16 ascon128av12 7.46 7.48 7.50 T:norx3261v1 7.63 7.68 7.80 T:ketjeminorv2 9.00 9.00 9.01 T:aesjambuv1 10.29 10.33 10.47 T:ascon128v1 10.32 10.36 10.38 T:ascon128v11 10.61 10.63 10.65 ascon128v12 12.43 12.47 12.50 T:aes128otrsv2 12.47 12.50 12.53 T:aes128otrsv1 13.01 13.07 13.24 T:aes128n12clocv1 13.06 13.09 13.09 T:aes128n8clocv1 13.51 13.55 13.59 T:aes128otrpv1 13.69 13.71 14.12 T:aes128otrpv2 14.14 14.16 14.20 T:twine80n6t4clocv3 15.05 15.07 15.12 T:twine80n6t4clocv2 16.40 16.43 16.57 T:aes256otrsv2 16.37 16.45 16.49 T:aes256otrsv1 17.99 18.02 18.03 T:aes256otrpv2 18.01 18.04 18.07 T:aes256otrpv1 23.34 23.61 23.66 T:ketjesrv1 24.17 24.24 24.26 T:aeadaes128ocbtaglen64v1 24.22 24.25 24.30 T:aeadaes128ocbtaglen96v1 25.86 25.89 25.94 T:ketjesrv2 25.91 25.95 25.97 T:colm127v1 26.51 26.54 26.59 T:proest256otrv1 28.62 28.63 28.64 T:aeadaes192ocbtaglen96v1 28.63 28.66 28.68 T:aeadaes192ocbtaglen64v1 33.00 33.08 33.12 T:aeadaes256ocbtaglen64v1 33.07 33.11 33.13 T:aeadaes256ocbtaglen96v1 55.46 55.51 55.54 T:proest128otrv1 55.87 55.94 56.02 T:aezv1 57.14 57.19 57.25 T:ketjejrv1 67.30 67.37 68.63 T:present80n6t4silcv3 76.34 76.49 77.32 T:deoxyseq128128v13 78.13 78.42 80.15 T:deoxysneq128128v13 87.68 87.74 87.84 T:ketjejrv2 120.65 120.95 121.09 T:deoxyseq256128v13 121.28 121.47 122.51 T:deoxysneq256128v13 127.34 127.41 127.60 T:led80n6t4silcv3 335.77 336.07 336.28 T:acorn128 2039.28 2041.09 2043.69 T:led80n6silcv1 2040.11 2041.87 2046.22 T:led80n6t4silcv2 2268.56 2270.85 2275.28 T:present80n6silcv1 2270.08 2272.40 2276.91 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.30 0.30 0.30 T:tiaoxinv2 0.30 0.30 0.31 T:tiaoxinv1 0.33 0.33 0.34 aegis128l 0.57 0.59 0.60 aegis256 0.58 0.59 0.59 T:aegis128 0.60 0.60 0.60 T:aezv4 0.61 0.61 0.63 T:aezv3 0.62 0.63 0.63 T:aezv5 0.79 0.79 0.80 T:morus1280128v1 0.79 0.80 0.80 T:morus1280256v1 0.79? 0.80? 3.51? T:aeadaes128ocbtaglen128v1 0.80 0.81 0.81 T:morus1280128v2 0.80 0.81 0.81 T:morus1280256v2 0.94 0.95 1.04 T:aeadaes192ocbtaglen128v1 0.96 0.96 0.97 T:aes128otrpv3 1.01 1.01 1.02 T:aes128otrcv3 1.14 1.15 1.18 T:deoxysi128v141 1.18 1.19 1.20 T:aes128gcmv1 1.19 1.20 1.27 T:aeadaes256ocbtaglen128v1 1.20 1.21 1.21 T:morus640128v1 1.21 1.21 1.22 T:morus640128v2 1.27 1.28 1.29 T:aes256otrpv3 1.30 1.31 1.33 T:deoxysneq128128v1 1.33 1.34 1.35 aes256gcmv1 1.33 1.35 1.36 T:deoxysi256v141 1.34 1.35 1.35 T:aes256otrcv3 1.44 1.45 1.46 T:deoxysneq256128v1 1.62 1.63 1.67 T:deoxysii128v141 1.82 1.82 1.82 T:colm0v1 1.87 1.88 1.89 T:deoxysii256v141 1.94 1.96 1.97 T:deoxyseq128128v1 2.14 2.15 2.16 T:deoxyseq256128v1 2.30 2.31 2.33 T:norx6444v3 2.49 2.50 2.51 T:norx6441v2 2.49 2.50 2.52 T:norx6441v3 2.74 2.74 2.75 T:aes128otrsv3 2.91 2.92 2.93 T:norx6441v1 3.61 3.62 3.64 T:seakeyakv2 3.75 3.76 3.77 T:norx6461v3 3.77 3.77 3.78 T:norx6461v2 3.78 3.79 3.79 T:aes256otrsv3 4.19 4.19 4.21 T:norx3241v3 4.19 4.20 4.21 T:norx3241v2 4.32 4.32 4.34 T:lakekeyakv2 4.37 4.38 4.40 T:norx6461v1 4.58 4.59 4.61 T:lakekeyakv1 4.59 4.59 4.60 T:aes128n8t8clocv2 4.59 4.59 4.60 T:aes128n12t8clocv2 4.59 4.60 4.60 T:aes128n12t8clocv3 4.63 4.63 4.63 T:aes128n12t8silcv3 4.63 4.63 4.63 T:aes128n8t8silcv2 4.63 4.63 4.63 T:aes128n12t8silcv2 4.85 4.86 4.88 T:oceankeyakv2 4.95 4.96 4.98 T:norx3241v1 5.26 5.28 5.30 T:norx6444v2 6.18 6.19 6.22 T:norx6444v1 6.31 6.32 6.33 T:norx3261v3 6.33 6.34 6.36 T:norx3261v2 7.27 7.29 7.30 T:ascon128av11 7.28 7.30 7.31 T:ascon96v1 7.37 7.37 7.39 T:acorn128v3 7.37 7.38 7.38 ascon128av12 7.60 7.63 7.76 T:riverkeyakv2 7.90 7.91 7.93 T:norx3261v1 8.34 8.40 8.43 T:lunarkeyakv2 8.39 8.41 8.43 T:acorn128v2 8.41 8.43 8.44 T:ketjemajorv2 9.20 9.21 9.21 T:aesjambuv1 9.59 9.62 9.70 T:ketjeminorv2 10.70 10.72 10.73 T:ascon128v11 10.70 10.72 10.73 T:ascon128v1 10.77 10.81 10.83 ascon128v12 14.36 14.39 14.41 T:aes128otrsv1 14.36 14.41 14.45 T:aes128otrsv2 14.64 14.65 14.66 T:twine80n6t4clocv3 14.65 14.67 14.68 T:aes128otrpv1 14.77 14.81 14.87 T:aes128otrpv2 15.65 15.66 15.69 T:twine80n6t4clocv2 18.38 18.39 18.43 T:aes256otrsv1 18.45 18.48 18.51 T:aes256otrsv2 19.10 19.11 19.15 T:aes128n8clocv1 19.10 19.12 19.13 T:aes128n12clocv1 19.29 19.30 19.32 T:aes256otrpv1 19.42 19.42 19.43 T:aes256otrpv2 25.13 25.14 25.16 T:aeadaes128ocbtaglen96v1 25.13 25.14 25.15 T:aeadaes128ocbtaglen64v1 27.38 27.65 27.89 T:ketjesrv1 28.67 28.68 28.68 T:proest256otrv1 29.39 29.40 29.41 T:ketjesrv2 29.61 29.62 29.64 T:aeadaes192ocbtaglen96v1 29.61 29.63 29.64 T:aeadaes192ocbtaglen64v1 34.16 34.20 34.23 T:aeadaes256ocbtaglen64v1 34.19 34.21 34.23 T:aeadaes256ocbtaglen96v1 41.11 41.12 41.24 T:colm127v1 57.29 57.31 57.33 T:proest128otrv1 62.77 62.77 62.78 T:ketjejrv1 68.62 68.64 69.78 T:present80n6t4silcv3 78.54 78.65 79.79 T:deoxysneq128128v13 91.84 91.95 92.07 T:ketjejrv2 114.36 114.54 114.71 T:aezv1 117.02 117.23 118.78 T:deoxyseq128128v13 122.23 122.36 123.23 T:deoxysneq256128v13 128.92 128.95 128.99 T:led80n6t4silcv3 184.47 184.55 184.61 T:deoxyseq256128v13 371.76 371.97 372.21 T:acorn128 3074.06 3075.95 3077.13 T:led80n6silcv1 3078.74 3081.24 3082.35 T:led80n6t4silcv2 3424.67 3425.44 3426.85 T:present80n6t4silcv2 3423.98 3425.56 3426.25 T:present80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.34 0.35 0.35 aegis128l 0.37 0.37 0.37 T:tiaoxinv1 0.36 0.37 0.37 T:tiaoxinv2 0.59 0.59 0.59 T:aezv4 0.59 0.59 0.59 T:aegis128 0.60 0.60 0.61 T:aezv3 0.61 0.62 0.62 T:aezv5 0.62 0.62 0.63 aegis256 0.81 0.81 0.81 T:morus1280128v1 0.81 0.81 0.82 T:morus1280256v1 0.82 0.82 0.82 T:morus1280256v2 0.82 0.82 0.83 T:morus1280128v2 0.83 0.83 0.88 T:aeadaes128ocbtaglen128v1 0.95? 0.96? 1.06? T:aeadaes192ocbtaglen128v1 0.98 0.98 0.98 T:aes128otrpv3 1.02 1.03 1.04 T:aes128otrcv3 1.20 1.20 1.21 T:morus640128v1 1.21 1.21 1.22 T:morus640128v2 1.22? 1.24? 3.93? T:aeadaes256ocbtaglen128v1 1.28 1.28 1.28 T:aes256otrpv3 1.34 1.34 1.37 T:deoxysi128v141 1.34 1.36 1.37 T:aes128gcmv1 1.37 1.37 1.37 T:aes256otrcv3 1.52 1.54 1.55 T:deoxysi256v141 1.61 1.61 1.62 T:deoxysneq128128v1 1.68 1.68 1.69 T:deoxysii128v141 1.69 1.69 1.70 T:deoxysneq256128v1 1.72 1.72 1.73 aes256gcmv1 1.84 1.85 1.89 T:colm0v1 1.93 1.94 1.95 T:deoxysii256v141 2.32 2.32 2.33 T:norx6444v3 2.44 2.45 2.45 T:deoxyseq128128v1 2.46 2.47 2.48 T:norx6441v3 2.46 2.47 2.49 T:norx6441v2 2.59 2.60 2.62 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.89 2.90 2.91 T:norx6441v1 3.63 3.64 3.66 T:seakeyakv2 3.71 3.73 3.74 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.80 3.80 3.81 T:aes256otrsv3 4.16 4.16 4.18 T:norx3241v3 4.16 4.17 4.18 T:norx3241v2 4.34 4.35 4.36 T:norx6461v1 4.34 4.35 4.36 T:lakekeyakv2 4.57 4.57 4.60 T:aes128n8t8clocv2 4.57 4.57 4.60 T:aes128n12t8clocv2 4.57 4.57 4.60 T:aes128n12t8clocv3 4.61 4.61 4.61 T:aes128n12t8silcv2 4.61 4.61 4.61 T:aes128n8t8silcv2 4.61 4.61 4.61 T:aes128n12t8silcv3 4.62 4.65 4.70 T:lakekeyakv1 4.90 4.90 4.91 T:norx3241v1 4.91 4.93 4.96 T:oceankeyakv2 5.28 5.31 5.32 T:norx6444v2 6.17 6.17 6.22 T:norx6444v1 6.31 6.32 6.33 T:norx3261v2 6.30 6.32 6.33 T:norx3261v3 7.31 7.33 7.41 T:ascon128av11 7.38 7.39 7.40 ascon128av12 7.37 7.40 7.40 T:ascon96v1 7.67 7.68 7.88 T:riverkeyakv2 7.85 7.86 7.88 T:norx3261v1 7.86 7.88 7.88 T:acorn128v3 8.41 8.42 8.47 T:lunarkeyakv2 8.41 8.44 8.47 T:ketjemajorv2 8.53 8.58 8.61 T:acorn128v2 9.36 9.36 9.36 T:aesjambuv1 9.97 10.00 10.09 T:ketjeminorv2 10.52 10.59 10.62 T:ascon128v1 10.60 10.61 10.64 T:ascon128v11 10.78 10.80 10.82 ascon128v12 14.56 14.58 14.61 T:aes128otrsv2 14.57 14.60 14.63 T:aes128otrsv1 14.74 14.76 14.76 T:twine80n6t4clocv3 14.80 14.83 14.85 T:aes128otrpv1 14.93 15.03 15.17 T:aes128otrpv2 15.60 15.62 15.64 T:twine80n6t4clocv2 18.60 18.63 18.68 T:aes128n12clocv1 18.62 18.66 18.69 T:aes256otrsv2 18.74 18.75 18.79 T:aes256otrsv1 18.87 18.88 18.90 T:aes128n8clocv1 19.48 19.49 19.57 T:aes256otrpv1 19.51 19.53 19.57 T:aes256otrpv2 28.00 28.23 28.45 T:ketjesrv1 28.66 28.67 28.68 T:proest256otrv1 29.15 29.17 29.19 T:ketjesrv2 29.59 29.66 29.71 T:aeadaes128ocbtaglen96v1 29.70 29.74 29.76 T:aeadaes128ocbtaglen64v1 35.15 35.17 35.23 T:aeadaes192ocbtaglen96v1 35.16 35.23 35.28 T:aeadaes192ocbtaglen64v1 40.78 40.81 40.83 T:aeadaes256ocbtaglen96v1 40.79 40.82 40.84 T:aeadaes256ocbtaglen64v1 49.94 49.96 49.99 T:colm127v1 57.48 57.50 57.54 T:proest128otrv1 57.08 62.54 62.57 T:ketjejrv1 68.69 68.72 69.84 T:present80n6t4silcv3 92.92 92.96 92.99 T:ketjejrv2 94.60 94.74 95.93 T:deoxysneq128128v13 114.54 114.79 114.94 T:aezv1 117.02 117.09 118.57 T:deoxyseq128128v13 128.60 128.64 128.66 T:led80n6t4silcv3 140.14 140.30 141.19 T:deoxysneq256128v13 184.44 184.47 184.57 T:deoxyseq256128v13 398.72 398.75 398.83 T:acorn128 3074.55 3075.72 3076.90 T:led80n6silcv1 3079.93 3080.95 3082.28 T:led80n6t4silcv2 3424.45 3425.59 3427.62 T:present80n6t4silcv2 3424.05 3425.94 3427.61 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.34 0.35 0.35 aegis128l 0.36 0.36 0.36 T:aezv4 0.36 0.36 0.37 T:aezv3 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.37 0.38 T:tiaoxinv2 0.38 0.38 0.39 T:aezv5 0.59 0.59 0.59 T:aegis128 0.62 0.62 0.62 aegis256 0.81 0.81 0.81 T:morus1280128v1 0.81 0.81 0.82 T:morus1280256v1 0.82 0.82 0.82 T:morus1280256v2 0.82 0.82 0.83 T:morus1280128v2 0.83? 0.84? 3.63? T:aeadaes128ocbtaglen128v1 0.96? 0.96? 3.65? T:aeadaes192ocbtaglen128v1 0.97 0.98 0.98 T:aes128otrpv3 1.03 1.03 1.04 T:aes128otrcv3 1.20 1.21 1.21 T:morus640128v1 1.21 1.22 1.22 T:morus640128v2 1.22? 1.25? 3.93? T:aeadaes256ocbtaglen128v1 1.28 1.28 1.28 T:aes256otrpv3 1.34 1.35 1.37 T:deoxysi128v141 1.34 1.36 1.37 T:aes128gcmv1 1.37 1.37 1.37 T:aes256otrcv3 1.51 1.52 1.53 T:deoxysi256v141 1.58 1.59 1.61 T:deoxysneq128128v1 1.67 1.68 1.69 T:deoxysneq256128v1 1.66 1.68 1.69 T:deoxysii128v141 1.71 1.72 1.73 aes256gcmv1 1.85 1.88 1.88 T:colm0v1 1.93 1.94 1.95 T:deoxysii256v141 2.31 2.32 2.32 T:norx6444v3 2.44 2.46 2.48 T:deoxyseq128128v1 2.46 2.47 2.47 T:norx6441v3 2.46 2.47 2.47 T:norx6441v2 2.59 2.60 2.63 T:deoxyseq256128v1 2.76 2.76 2.76 T:aes128otrsv3 2.89 2.90 2.91 T:norx6441v1 3.66 3.68 3.69 T:seakeyakv2 3.72 3.73 3.74 T:norx6461v3 3.73 3.74 3.75 T:norx6461v2 3.80 3.80 3.81 T:aes256otrsv3 4.16 4.16 4.17 T:norx3241v3 4.16 4.16 4.17 T:norx3241v2 4.33 4.34 4.35 T:norx6461v1 4.34 4.35 4.36 T:lakekeyakv2 4.56 4.56 4.60 T:aes128n8t8clocv2 4.56 4.59 4.60 T:aes128n12t8clocv2 4.57 4.60 4.60 T:aes128n12t8clocv3 4.59 4.60 4.60 T:aes128n8t8silcv2 4.60 4.60 4.60 T:aes128n12t8silcv2 4.60 4.60 4.60 T:aes128n12t8silcv3 4.64 4.68 4.70 T:lakekeyakv1 4.90 4.90 4.90 T:norx3241v1 4.92 4.94 4.95 T:oceankeyakv2 5.30 5.31 5.32 T:norx6444v2 6.18 6.19 6.22 T:norx6444v1 6.30 6.31 6.32 T:norx3261v2 6.30 6.31 6.32 T:norx3261v3 7.33 7.34 7.38 T:ascon128av11 7.38 7.40 7.41 ascon128av12 7.39 7.40 7.41 T:ascon96v1 7.68 7.71 7.85 T:riverkeyakv2 7.85 7.85 7.87 T:norx3261v1 7.87 7.87 7.89 T:acorn128v3 8.42 8.43 8.44 T:lunarkeyakv2 8.43 8.45 8.47 T:ketjemajorv2 8.59 8.61 8.62 T:acorn128v2 9.35 9.36 9.36 T:aesjambuv1 10.01 10.08 10.18 T:ketjeminorv2 10.57 10.60 10.61 T:ascon128v1 10.60 10.62 10.64 T:ascon128v11 10.80 10.82 10.83 ascon128v12 14.56 14.59 14.61 T:aes128otrsv2 14.58 14.60 14.63 T:aes128otrsv1 14.73 14.74 14.76 T:twine80n6t4clocv3 14.83 14.84 14.87 T:aes128otrpv1 14.99 15.05 15.20 T:aes128otrpv2 15.60 15.61 15.61 T:twine80n6t4clocv2 18.59 18.61 18.72 T:aes128n12clocv1 18.64 18.70 18.74 T:aes256otrsv2 18.76 18.78 18.80 T:aes256otrsv1 18.87 18.88 18.90 T:aes128n8clocv1 19.50 19.52 19.54 T:aes256otrpv1 19.52 19.53 19.55 T:aes256otrpv2 28.02 28.27 28.43 T:ketjesrv1 28.66 28.67 28.68 T:proest256otrv1 29.17 29.19 29.21 T:ketjesrv2 29.61 29.67 29.70 T:aeadaes128ocbtaglen96v1 29.69 29.70 29.73 T:aeadaes128ocbtaglen64v1 35.16 35.17 35.21 T:aeadaes192ocbtaglen96v1 35.16 35.19 35.25 T:aeadaes192ocbtaglen64v1 40.77 40.78 40.81 T:aeadaes256ocbtaglen96v1 40.78 40.81 40.84 T:aeadaes256ocbtaglen64v1 49.95 49.97 49.99 T:colm127v1 57.48 57.48 57.50 T:proest128otrv1 62.57 62.58 62.59 T:ketjejrv1 68.69 68.72 69.85 T:present80n6t4silcv3 92.93 92.95 93.01 T:ketjejrv2 94.64 94.81 96.27 T:deoxysneq128128v13 114.38 114.58 114.75 T:aezv1 117.01 117.09 118.64 T:deoxyseq128128v13 128.58 128.62 128.68 T:led80n6t4silcv3 140.27 140.33 141.19 T:deoxysneq256128v13 184.40 184.48 184.67 T:deoxyseq256128v13 398.73 398.76 399.11 T:acorn128 3073.35 3075.08 3077.26 T:led80n6silcv1 3079.16 3081.18 3082.23 T:led80n6t4silcv2 3424.37 3425.29 3427.51 T:present80n6t4silcv2 3424.29 3425.62 3427.98 T:present80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.59 1.62 1.66 T:aegis128 1.75 1.81 1.88 aegis128l 2.12? 2.22? 2.47? T:tiaoxinv2 2.19? 2.25? 2.59? T:tiaoxinv1 2.22 2.31 2.44 aegis256 2.62? 2.66? 3.19? T:aezv4 2.72 2.75 2.97 T:aezv5 2.94 2.97 3.06 T:aezv3 4.00 4.03 4.09 T:aes128otrpv3 4.09 4.22 4.28 T:morus640128v1 4.25 4.31 4.38 T:morus1280128v1 4.28 4.41 4.53 T:morus1280256v1 4.34 4.41 4.56 T:morus640128v2 4.34? 4.53? 67.00? T:aeadaes128ocbtaglen128v1 4.53 4.59 4.81 T:morus1280256v2 4.53 4.69 4.81 T:morus1280128v2 4.69? 4.81? 68.53? T:aeadaes192ocbtaglen128v1 5.00 5.06 5.19 T:aes128otrsv3 5.41 5.44 5.47 T:aes256otrpv3 5.41? 5.50? 7.25? T:aeadaes256ocbtaglen128v1 5.66 5.69 5.84 T:colm0v1 5.78 5.81 5.88 T:aes128otrcv3 5.66 5.94 6.09 T:deoxysneq128128v1 5.88 5.94 6.12 T:deoxysi128v141 5.91 5.94 6.00 T:aes128n12t8clocv2 5.91 5.97 6.00 T:aes128n12t8clocv3 5.91 5.97 6.00 T:aes128n8t8clocv2 6.28 6.34 6.44 T:deoxysneq256128v1 6.56 6.72 6.94 T:aes128gcmv1 6.69 6.81 6.84 T:aes128n8t8silcv2 6.69 6.81 6.88 T:aes128n12t8silcv2 6.69 6.81 6.97 T:aes128n12t8silcv3 6.88 6.88 6.91 T:aes256otrsv3 6.88 6.97 7.09 T:deoxysi256v141 7.53 7.59 7.66 aes256gcmv1 7.88 7.94 7.97 T:aes256otrcv3 8.16 8.22 8.44 T:deoxyseq128128v1 8.22 8.28 8.34 T:norx6441v1 8.25 8.31 8.41 T:norx6441v2 8.28 8.34 8.38 T:norx6441v3 9.84 10.06 10.22 T:deoxyseq256128v1 10.31 10.38 10.44 T:norx3241v2 10.31 10.38 10.56 T:norx3241v1 10.41 10.47 10.69 T:norx3241v3 10.56 10.66 10.69 T:deoxysii128v141 10.81 10.94 11.19 T:ascon128av11 10.88 11.00 11.34 T:ascon96v1 11.16 11.28 11.50 ascon128av12 12.22 12.31 12.44 T:deoxysii256v141 12.25 12.31 12.38 T:norx6461v1 12.28 12.34 12.34 T:aesjambuv1 12.34 12.38 12.53 T:norx6461v3 12.38 12.44 12.56 T:norx6461v2 14.03 14.12 14.22 T:ascon128v11 14.09 14.22 14.38 T:ascon128v1 14.38 14.53 14.75 ascon128v12 15.12 15.28 15.47 T:norx6444v3 15.06 15.31 15.75 T:lakekeyakv1 15.47 15.53 15.59 T:norx3261v3 15.50 15.59 15.66 T:norx3261v2 16.47 16.56 16.62 T:norx3261v1 17.72 18.00 18.28 T:riverkeyakv2 18.66 18.78 19.28 T:lakekeyakv2 20.91 20.91 20.97 T:twine80n6t4clocv3 21.84 21.94 22.03 T:twine80n6t4clocv2 23.06 23.19 23.34 T:aes128n8clocv1 23.03 23.28 23.47 T:aes128n12clocv1 24.44 24.66 24.97 T:aes128otrsv2 24.41 24.69 25.16 T:aes128otrsv1 25.06 25.19 25.34 T:aes128otrpv1 24.91 25.28 25.50 T:aes128otrpv2 30.41 30.50 30.53 T:acorn128v3 31.12 31.34 31.56 T:aes256otrsv1 31.09 31.38 31.56 T:aes256otrsv2 32.16 32.53 33.03 T:ketjeminorv2 32.47 32.78 32.94 T:aes256otrpv2 32.72 32.78 33.00 T:aes256otrpv1 32.81 33.03 33.66 T:acorn128v2 33.44 33.53 34.00 T:seakeyakv2 37.91 38.28 38.41 T:norx6444v2 39.75 39.88 40.47 T:aeadaes128ocbtaglen96v1 39.84 40.00 40.19 T:aeadaes128ocbtaglen64v1 43.97 44.09 44.22 T:norx6444v1 43.97 44.25 44.50 T:ketjesrv1 46.00 46.12 47.59 T:aeadaes192ocbtaglen96v1 46.09 46.25 46.88 T:aeadaes192ocbtaglen64v1 49.25 49.59 50.00 T:ketjemajorv2 51.09 51.25 51.41 T:ketjesrv2 53.56 53.75 55.31 T:aeadaes256ocbtaglen64v1 53.66 53.75 54.31 T:aeadaes256ocbtaglen96v1 53.56 53.88 54.38 T:oceankeyakv2 60.59 60.72 60.91 T:colm127v1 82.12 82.34 82.84 T:proest256otrv1 82.84 83.31 83.56 T:ketjejrv1 84.75 85.19 86.31 T:present80n6t4silcv3 88.62 89.09 90.34 T:deoxysneq128128v13 110.56 110.75 111.12 T:proest128otrv1 122.72 123.03 123.59 T:ketjejrv2 132.38 132.78 132.97 T:aezv1 136.16 136.69 137.19 T:lunarkeyakv2 137.56 137.81 138.72 T:deoxysneq256128v13 145.31 145.91 146.31 T:deoxyseq128128v13 152.88 153.03 153.31 T:led80n6t4silcv3 229.12 229.34 229.88 T:deoxyseq256128v13 1307.72 1308.75 1309.78 T:acorn128 3441.53 3443.78 3445.47 T:led80n6silcv1 3446.38 3447.06 3448.41 T:led80n6t4silcv2 3831.44 3833.12 3835.25 T:present80n6t4silcv2 3834.38 3836.25 3836.84 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.75 1.75 1.81 T:aegis128 1.81 1.91 1.97 aegis128l 2.16 2.25 2.31 T:tiaoxinv2 2.16? 2.25? 2.44? T:tiaoxinv1 2.31? 2.41? 2.75? aegis256 2.66? 2.69? 3.03? T:aezv4 2.75 2.81 2.88 T:aezv5 3.00 3.03 3.06 T:aezv3 4.06 4.09 4.12 T:aes128otrpv3 4.12 4.19 4.34 T:morus640128v1 4.41 4.50 4.56 T:morus1280256v1 4.44 4.50 4.66 T:morus640128v2 4.44 4.50 4.72 T:morus1280128v1 4.66 4.75 4.88 T:morus1280128v2 4.72 4.75 4.91 T:morus1280256v2 4.84? 4.97? 7.81? T:aeadaes128ocbtaglen128v1 5.22 5.22 5.28 T:aes128otrsv3 5.38? 5.47? 7.84? T:aeadaes192ocbtaglen128v1 5.47 5.50 6.06 T:aes256otrpv3 6.03 6.06 6.09 T:aes128n8t8clocv2 6.03 6.06 6.16 T:aes128n12t8clocv3 6.06 6.06 6.09 T:aes128n12t8clocv2 5.88? 6.09? 74.72? T:aeadaes256ocbtaglen128v1 6.00 6.09 6.25 T:aes128otrcv3 6.44? 6.50? 7.53? T:colm0v1 6.59 6.69 6.91 T:aes128gcmv1 7.00 7.06 7.09 T:aes128n12t8silcv2 7.03 7.06 7.09 T:aes128n12t8silcv3 7.03 7.06 7.09 T:aes256otrsv3 7.03 7.09 7.16 T:aes128n8t8silcv2 7.69 7.75 7.81 aes256gcmv1 8.06 8.06 8.12 T:aes256otrcv3 8.38 8.44 8.44 T:norx6441v1 8.44 8.47 8.56 T:norx6441v2 8.44 8.50 8.53 T:norx6441v3 8.72 8.75 8.84 T:deoxysi128v141 8.84 8.88 9.03 T:deoxysneq256128v1 8.94 9.00 9.12 T:deoxysneq128128v1 9.91 9.97 10.00 T:deoxysi256v141 10.50 10.53 10.56 T:norx3241v1 10.50 10.56 10.72 T:norx3241v3 10.53 10.59 10.69 T:norx3241v2 11.00 11.03 11.44 T:ascon128av11 10.88 11.06 11.34 T:ascon96v1 11.22 11.34 11.53 ascon128av12 11.62 11.78 11.81 T:deoxysii128v141 11.84 11.94 12.00 T:deoxyseq128128v1 12.12 12.25 12.44 T:deoxyseq256128v1 12.50 12.53 12.53 T:aesjambuv1 12.50 12.56 12.66 T:norx6461v2 12.50 12.59 12.66 T:norx6461v1 12.56 12.69 12.78 T:norx6461v3 13.78 13.88 13.91 T:deoxysii256v141 13.97 14.03 14.25 T:ascon128v1 14.00 14.16 14.28 T:ascon128v11 14.44 14.53 14.72 ascon128v12 15.25 15.38 15.50 T:norx6444v3 15.19 15.72 15.97 T:lakekeyakv1 15.72 15.78 15.88 T:norx3261v2 15.75 15.81 15.91 T:norx3261v3 16.53 16.59 16.72 T:norx3261v1 17.84 17.94 18.38 T:riverkeyakv2 18.72 18.88 19.41 T:lakekeyakv2 21.06 21.09 21.12 T:twine80n6t4clocv3 21.84 21.94 22.34 T:twine80n6t4clocv2 22.91 23.12 23.84 T:aes128n12clocv1 23.06 23.12 23.31 T:aes128n8clocv1 24.56 24.88 25.53 T:aes128otrsv2 24.62 25.03 25.72 T:aes128otrsv1 25.38 25.41 25.88 T:aes128otrpv2 25.31 25.44 25.75 T:aes128otrpv1 30.53 30.66 30.81 T:acorn128v3 31.28 31.66 32.28 T:aes256otrsv1 31.31 31.84 32.31 T:aes256otrsv2 32.69 32.91 33.12 T:ketjeminorv2 32.78 32.91 33.12 T:aes256otrpv2 33.12 33.19 33.62 T:acorn128v2 32.97 33.22 33.44 T:aes256otrpv1 33.69 34.16 34.31 T:seakeyakv2 38.09 38.31 38.69 T:norx6444v2 44.22 44.41 44.56 T:norx6444v1 44.69 45.34 45.50 T:ketjesrv1 48.09 48.34 48.97 T:aeadaes128ocbtaglen96v1 48.31 49.16 49.38 T:aeadaes128ocbtaglen64v1 49.72 50.06 50.28 T:ketjemajorv2 50.44 50.94 51.16 T:ketjesrv2 54.00 54.41 55.06 T:oceankeyakv2 55.72 55.88 56.66 T:aeadaes192ocbtaglen96v1 55.91 56.03 56.50 T:aeadaes192ocbtaglen64v1 65.22 65.34 65.94 T:aeadaes256ocbtaglen96v1 65.06 65.69 66.34 T:aeadaes256ocbtaglen64v1 69.88 70.03 70.41 T:colm127v1 82.78 83.16 83.38 T:ketjejrv1 83.34 83.66 84.06 T:proest256otrv1 84.94 85.28 86.44 T:present80n6t4silcv3 104.50 105.03 106.19 T:deoxysneq128128v13 111.97 113.22 114.50 T:proest128otrv1 123.56 124.03 124.56 T:ketjejrv2 135.84 136.16 136.47 T:aezv1 136.38 136.81 137.69 T:lunarkeyakv2 145.56 145.66 146.44 T:deoxyseq128128v13 152.62 153.28 153.91 T:led80n6t4silcv3 155.59 155.81 156.72 T:deoxysneq256128v13 228.84 229.31 229.66 T:deoxyseq256128v13 1346.97 1348.31 1349.72 T:acorn128 3440.88 3442.69 3444.38 T:led80n6silcv1 3446.78 3447.34 3448.41 T:led80n6t4silcv2 3832.19 3833.91 3834.56 T:present80n6t4silcv2 3834.53 3836.78 3841.91 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.72 1.75 1.78 T:aegis128 1.81 1.91 2.00 aegis128l 2.12 2.16 2.19 T:aezv4 2.16? 2.22? 2.53? T:tiaoxinv2 2.16? 2.22? 2.59? T:tiaoxinv1 2.22 2.25 2.28 T:aezv5 2.25 2.28 2.34 T:aezv3 2.28 2.34 2.38 aegis256 4.06 4.09 4.09 T:aes128otrpv3 4.12 4.16 4.22 T:morus640128v1 4.41 4.44 4.47 T:morus1280256v1 4.44 4.47 4.53 T:morus640128v2 4.44 4.50 4.59 T:morus1280128v1 4.69 4.72 4.78 T:morus1280128v2 4.69 4.72 4.81 T:morus1280256v2 4.84? 4.94? 68.88? T:aeadaes128ocbtaglen128v1 5.19 5.22 5.25 T:aes128otrsv3 5.41 5.47 5.50 T:aeadaes192ocbtaglen128v1 5.47 5.50 5.50 T:aes256otrpv3 5.84? 5.94? 74.78? T:aeadaes256ocbtaglen128v1 5.94 5.97 6.03 T:aes128n12t8clocv3 5.94? 5.97? 6.84? T:aes128n12t8clocv2 5.97 6.00 6.03 T:aes128n8t8clocv2 6.00 6.00 6.03 T:aes128otrcv3 6.50? 6.66? 7.41? T:colm0v1 6.62 6.69 6.72 T:aes128gcmv1 6.72? 6.78? 7.78? T:aes128n12t8silcv2 6.75? 6.81? 7.78? T:aes128n8t8silcv2 6.66 6.84 6.94 T:aes128n12t8silcv3 7.00 7.06 7.09 T:aes256otrsv3 7.66 7.69 7.78 aes256gcmv1 8.06 8.09 8.12 T:aes256otrcv3 8.31 8.41 9.00 T:deoxysneq256128v1 8.34 8.41 8.44 T:norx6441v1 8.41 8.50 8.53 T:norx6441v2 8.41 8.53 8.59 T:norx6441v3 8.47 8.56 8.69 T:deoxysneq128128v1 8.66 8.78 8.88 T:deoxysi128v141 9.91 9.94 10.06 T:deoxysi256v141 10.41 10.50 10.56 T:norx3241v1 10.50 10.56 10.66 T:norx3241v2 10.53 10.66 10.69 T:norx3241v3 10.91 10.97 11.06 T:ascon128av11 10.88 11.00 11.12 T:ascon96v1 11.34 11.41 11.53 ascon128av12 11.62 11.69 11.75 T:deoxysii128v141 11.94 11.97 12.44 T:deoxyseq128128v1 12.03 12.25 12.75 T:deoxyseq256128v1 12.50 12.53 12.56 T:aesjambuv1 12.44 12.56 12.66 T:norx6461v1 12.47 12.59 12.62 T:norx6461v2 12.50 12.62 12.72 T:norx6461v3 13.78 13.84 13.91 T:deoxysii256v141 13.97 14.03 14.41 T:ascon128v11 13.94 14.06 14.31 T:ascon128v1 14.31 14.41 14.47 ascon128v12 15.22 15.34 15.47 T:norx6444v3 15.34 15.41 15.84 T:lakekeyakv1 15.69 15.72 15.81 T:norx3261v2 15.69 15.78 15.88 T:norx3261v3 16.53 16.59 16.69 T:norx3261v1 17.94 18.22 18.38 T:riverkeyakv2 18.75 18.91 19.28 T:lakekeyakv2 20.81 21.03 21.41 T:twine80n6t4clocv3 21.75 21.88 22.28 T:twine80n6t4clocv2 22.84 22.94 23.81 T:aes128n12clocv1 23.00 23.12 23.47 T:aes128n8clocv1 24.59 24.75 25.09 T:aes128otrsv2 24.72 25.06 25.34 T:aes128otrsv1 25.53 25.69 25.88 T:aes128otrpv1 25.50 25.75 26.00 T:aes128otrpv2 30.56 30.59 30.72 T:acorn128v3 31.50 31.69 32.00 T:aes256otrsv1 31.41 31.75 31.91 T:aes256otrsv2 32.75 32.84 32.97 T:aes256otrpv2 32.56 32.88 33.41 T:ketjeminorv2 32.91 33.03 33.16 T:aes256otrpv1 33.03 33.19 33.56 T:acorn128v2 33.72 33.91 34.09 T:seakeyakv2 38.28 38.75 38.94 T:norx6444v2 44.03 44.22 44.47 T:norx6444v1 44.72 45.34 46.06 T:ketjesrv1 48.06 48.16 48.22 T:aeadaes128ocbtaglen96v1 48.16 48.31 49.03 T:aeadaes128ocbtaglen64v1 49.84 49.94 50.22 T:ketjemajorv2 50.56 51.22 51.28 T:ketjesrv2 54.06 54.34 54.66 T:oceankeyakv2 55.75 55.81 55.88 T:aeadaes192ocbtaglen96v1 55.72 55.88 56.19 T:aeadaes192ocbtaglen64v1 65.03 65.25 65.91 T:aeadaes256ocbtaglen64v1 65.19 65.28 65.44 T:aeadaes256ocbtaglen96v1 69.62 69.91 70.44 T:colm127v1 80.81 81.03 81.53 T:proest256otrv1 82.53 82.88 83.12 T:ketjejrv1 85.09 85.25 86.25 T:present80n6t4silcv3 104.44 105.25 106.50 T:deoxysneq128128v13 111.56 111.78 112.22 T:proest128otrv1 124.03 124.25 124.91 T:ketjejrv2 135.72 136.00 136.41 T:aezv1 136.31 136.47 137.41 T:lunarkeyakv2 145.47 145.88 146.47 T:deoxyseq128128v13 153.12 153.53 153.94 T:led80n6t4silcv3 155.47 156.19 156.50 T:deoxysneq256128v13 229.12 229.31 229.56 T:deoxyseq256128v13 1346.62 1347.41 1348.75 T:acorn128 3440.69 3442.12 3443.66 T:led80n6silcv1 3446.47 3447.78 3449.19 T:led80n6t4silcv2 3831.81 3832.59 3835.31 T:present80n6t4silcv2 3834.28 3835.09 3836.06 T:present80n6silcv1