VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20251222

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.21 0.21 0.23 T:tiaoxinv2 0.19? 0.22? 0.22? T:tiaoxinv1 0.25 0.25 0.26 aegis128l 0.26 0.26 0.27 T:aegis128l 0.38? 0.39? 0.43? aegis256 0.41 0.41 0.42 T:aegis256 0.41 0.42 0.42 T:aegis128 0.61 0.61 0.63 T:aezv3 0.62 0.62 0.63 T:aezv4 0.61 0.62 0.63 T:aezv5 0.63 0.63 0.63 T:aes128otrcv3 0.63 0.63 0.64 T:morus1280128v2 0.62 0.63 0.64 T:morus1280128v1 0.63 0.64 0.64 T:morus1280256v2 0.64 0.64 0.65 T:morus1280256v1 0.64 0.66 0.67 T:aes128otrpv3 0.64 0.66 0.67 T:aes128otrsv3 0.66 0.68 0.69 T:aeadaes128ocbtaglen128v1 0.40? 0.75? 0.82? T:aeadaes192ocbtaglen128v1 0.86 0.87 0.88 T:deoxysneq128128v1 0.87 0.88 0.89 T:aes256otrcv3 0.85 0.88 0.91 T:deoxysi128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.88 0.89 0.91 T:aes256otrpv3 0.88 0.90 0.91 T:aes256otrsv3 0.96 0.99 1.00 T:deoxysi256v141 0.99 1.00 1.01 T:deoxysneq256128v1 1.06 1.07 1.09 T:morus640128v1 1.07 1.08 1.09 T:morus640128v2 1.14 1.16 1.19 T:norx6444v3 1.18 1.19 1.20 T:aes128gcmv1 1.43 1.44 1.45 aes256gcmv1 1.64 1.66 1.71 T:colm0v1 1.73 1.75 1.76 T:deoxysii128v141 1.76 1.77 1.78 T:deoxyseq128128v1 1.98 2.00 2.01 T:deoxysii256v141 2.01 2.02 2.04 T:deoxyseq256128v1 1.98 2.09 2.13 T:lunarkeyakv2 2.09 2.12 2.13 T:norx6441v2 2.17 2.19 2.22 T:norx6441v3 2.54 2.56 2.59 T:norx6441v1 2.75 2.75 2.76 T:aes128n12t8clocv3 2.75 2.76 2.77 T:aes128n12t8clocv2 2.75 2.76 2.76 T:aes128n8t8silcv2 2.75 2.76 2.76 T:aes128n12t8silcv2 2.75 2.76 2.76 T:aes128n12t8silcv3 2.76 2.76 2.76 T:aes128n8t8clocv2 2.74 2.78 2.80 T:seakeyakv2 2.78 2.87 2.97 T:oceankeyakv2 3.23 3.25 3.27 T:norx6461v2 3.22 3.25 3.30 T:norx6461v3 3.78 3.80 3.83 T:norx6444v2 3.92 3.93 3.98 T:norx3241v2 3.93 3.96 3.99 T:norx6461v1 3.97 3.99 4.02 T:norx3241v3 4.10 4.14 4.15 T:lakekeyakv1 4.30 4.31 4.34 T:norx6444v1 4.39 4.43 4.44 T:lakekeyakv2 4.74 4.79 4.82 T:norx3241v1 5.45 5.59 5.65 T:acorn128v3 5.84 5.84 5.85 T:aesjambuv1 5.87 5.89 5.90 T:norx3261v3 6.00 6.02 6.05 T:norx3261v2 6.74 6.79 6.84 T:acorn128v2 7.17 7.21 7.23 T:norx3261v1 7.37 7.48 7.56 T:ketjemajorv2 7.50 7.52 7.54 T:ascon128av11 7.49 7.52 7.54 T:ascon96v1 7.53 7.55 7.60 ascon128av12 9.76 9.80 9.84 T:riverkeyakv2 9.79 9.91 9.96 T:ketjeminorv2 10.85 10.87 10.89 T:ascon128v1 10.88 10.89 10.92 T:ascon128v11 10.92 10.95 10.98 ascon128v12 13.49 13.51 13.54 T:aes128otrpv2 13.49 13.54 13.57 T:aes128otrsv2 13.51 13.54 13.59 T:aes128otrsv1 13.66 13.71 13.74 T:aes128otrpv1 14.56 14.60 14.61 T:twine80n6t4clocv3 15.57 15.59 15.61 T:twine80n6t4clocv2 17.44 17.48 17.50 T:aes256otrsv1 17.48 17.50 17.53 T:aes256otrsv2 17.49 17.52 17.54 T:aes256otrpv1 17.62 17.64 17.66 T:aes256otrpv2 23.00 23.03 23.06 T:aes128n12clocv1 23.06 23.08 23.13 T:aes128n8clocv1 24.65 24.67 24.69 T:aeadaes128ocbtaglen64v1 24.67 24.69 24.71 T:aeadaes128ocbtaglen96v1 27.07 27.10 27.13 T:proest256otrv1 29.02 29.04 29.07 T:aeadaes192ocbtaglen96v1 29.04 29.05 29.07 T:aeadaes192ocbtaglen64v1 31.17 31.21 31.26 T:ketjesrv1 31.86 31.90 31.94 T:ketjesrv2 33.44 33.48 33.52 T:aeadaes256ocbtaglen64v1 33.46 33.50 33.53 T:aeadaes256ocbtaglen96v1 50.37 50.39 50.43 T:proest128otrv1 54.45 54.48 54.53 T:colm127v1 59.08 59.14 59.17 T:ketjejrv1 71.63 71.66 71.69 T:present80n6t4silcv3 80.78 80.85 80.91 T:deoxysneq128128v13 93.55 93.83 94.01 T:ketjejrv2 111.73 111.91 113.07 T:deoxysneq256128v13 125.16 125.21 125.31 T:led80n6t4silcv3 158.17 158.71 159.23 T:aezv1 167.17 167.40 170.03 T:deoxyseq128128v13 223.96 224.12 224.22 T:deoxyseq256128v13 324.31 326.24 327.37 T:acorn128 4032.44 4033.31 4033.70 T:led80n6silcv1 4044.52 4044.96 4046.49 T:led80n6t4silcv2 4277.87 4278.21 4278.56 T:present80n6silcv1 4279.24 4280.50 4280.85 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.25 0.25 0.26 aegis128l 0.25 0.25 0.27 T:aegis128l 0.36 0.37 0.39 T:tiaoxinv1 0.36 0.37 0.38 T:tiaoxinv2 0.39 0.40 0.41 T:aegis256 0.45 0.46 0.46 T:aegis128 0.47 0.48 0.49 aegis256 0.59? 0.62? 0.66? T:aezv3 0.61 0.62 0.62 T:aezv5 0.61 0.62 0.62 T:aezv4 0.64 0.64 0.66 T:morus1280256v1 0.64 0.65 0.65 T:morus1280256v2 0.65 0.66 0.66 T:morus1280128v1 0.65 0.66 0.66 T:morus1280128v2 0.66 0.67 0.68 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.69 T:aes128otrcv3 0.68 0.70 0.71 T:aes128otrsv3 0.69 0.70 0.71 T:aes128otrpv3 0.74 0.76 0.77 T:aeadaes192ocbtaglen128v1 0.90 0.91 0.92 T:aes256otrcv3 0.91 0.91 0.92 T:aeadaes256ocbtaglen128v1 0.92 0.93 0.94 T:aes256otrsv3 0.92 0.93 0.94 T:aes256otrpv3 1.03 1.06 1.07 T:aes128gcmv1 1.06 1.08 1.08 T:morus640128v2 1.07 1.08 1.09 T:morus640128v1 1.13 1.14 1.17 T:norx6444v3 1.15 1.17 1.18 T:deoxysi128v141 1.20 1.21 1.22 T:deoxysneq128128v1 1.24 1.27 1.30 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysneq256128v1 1.40 1.43 1.44 aes256gcmv1 1.63 1.66 1.77 T:colm0v1 1.74 1.75 1.76 T:deoxysii128v141 1.98 2.01 2.02 T:deoxysii256v141 2.01 2.03 2.08 T:norx6441v2 2.02 2.04 2.07 T:norx6441v3 2.05 2.15 2.25 T:lunarkeyakv2 2.41 2.42 2.43 T:deoxyseq128128v1 2.44 2.46 2.48 T:norx6441v1 2.51 2.53 2.54 T:deoxyseq256128v1 2.71 2.73 2.74 T:aes128n12t8clocv3 2.72 2.73 2.75 T:aes128n12t8silcv2 2.72 2.73 2.75 T:aes128n12t8clocv2 2.71 2.73 2.75 T:aes128n8t8silcv2 2.71 2.73 2.75 T:aes128n12t8silcv3 2.72 2.73 2.75 T:aes128n8t8clocv2 2.84 2.86 2.90 T:seakeyakv2 2.88 2.95 3.02 T:oceankeyakv2 3.11 3.15 3.18 T:norx6461v2 3.12 3.15 3.19 T:norx6461v3 3.73 3.76 3.79 T:norx3241v2 3.73 3.79 3.81 T:norx6444v2 3.76 3.79 3.83 T:norx6461v1 3.77 3.79 3.82 T:norx3241v3 4.19 4.23 4.25 T:lakekeyakv1 4.25 4.28 4.32 T:norx6444v1 4.40 4.43 4.46 T:lakekeyakv2 4.53 4.54 4.57 T:norx3241v1 5.73 5.75 5.77 T:norx3261v3 5.79 5.80 5.84 T:norx3261v2 6.10 6.10 6.10 T:aesjambuv1 6.93 6.95 6.98 T:acorn128v2 7.06 7.07 7.09 T:norx3261v1 7.04 7.13 7.20 T:ketjemajorv2 7.29 7.31 7.33 T:acorn128v3 7.37 7.39 7.44 ascon128av12 7.59 7.63 7.65 T:ascon128av11 7.60 7.64 7.68 T:ascon96v1 9.79 9.84 9.88 T:ketjeminorv2 9.84 9.88 9.93 T:riverkeyakv2 10.58 10.63 10.71 T:ascon128v1 10.57 10.67 10.71 T:ascon128v11 10.90 10.92 10.97 ascon128v12 13.91 13.95 14.03 T:aes128otrpv1 14.03 14.05 14.08 T:aes128otrsv2 14.07 14.09 14.13 T:aes128otrpv2 14.37 14.40 14.46 T:aes128otrsv1 14.56 14.59 14.64 T:twine80n6t4clocv3 15.49 15.51 15.54 T:twine80n6t4clocv2 17.98 18.04 18.40 T:aes256otrpv2 18.09 18.14 18.17 T:aes256otrsv2 18.27 18.32 18.35 T:aes256otrpv1 18.27 18.33 18.38 T:aes256otrsv1 21.94 22.00 22.04 T:aes128n12clocv1 22.44 22.48 22.52 T:aes128n8clocv1 27.02 27.08 27.10 T:proest256otrv1 31.84 31.86 31.90 T:ketjesrv1 32.10 32.18 32.24 T:ketjesrv2 33.22 33.28 33.31 T:aeadaes128ocbtaglen64v1 33.27 33.29 33.33 T:aeadaes128ocbtaglen96v1 39.68 39.71 39.79 T:aeadaes192ocbtaglen96v1 39.66 39.72 39.84 T:aeadaes192ocbtaglen64v1 46.14 46.19 46.24 T:aeadaes256ocbtaglen64v1 46.15 46.27 46.35 T:aeadaes256ocbtaglen96v1 50.80 50.85 50.89 T:proest128otrv1 59.98 60.06 60.09 T:ketjejrv1 71.45 71.54 71.67 T:present80n6t4silcv3 72.40 72.46 72.63 T:colm127v1 94.17 94.22 94.46 T:ketjejrv2 108.83 109.09 109.21 T:deoxysneq128128v13 124.99 125.06 125.15 T:led80n6t4silcv3 151.22 152.23 152.38 T:deoxysneq256128v13 158.29 158.82 159.79 T:aezv1 168.23 168.36 168.49 T:deoxyseq128128v13 223.35 223.49 223.71 T:deoxyseq256128v13 348.10 348.62 349.33 T:acorn128 4032.73 4033.15 4033.38 T:led80n6silcv1 4044.67 4045.02 4045.73 T:led80n6t4silcv2 4277.68 4278.36 4278.91 T:present80n6silcv1 4278.93 4279.19 4279.61 T:present80n6t4silcv2

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.24 0.25 0.25 T:aezv3 0.23 0.25 0.25 T:aezv4 0.25 0.25 0.27 T:aezv5 0.25 0.26 0.27 T:aegis128l 0.27? 0.28? 0.31? aegis128l 0.37 0.37 0.38 T:tiaoxinv1 0.37 0.37 0.39 T:tiaoxinv2 0.39 0.40 0.41 T:aegis256 0.45 0.46 0.46 T:aegis128 0.48 0.48 0.49 aegis256 0.64 0.65 0.66 T:morus1280256v2 0.64 0.65 0.66 T:morus1280256v1 0.65 0.65 0.66 T:morus1280128v2 0.65 0.66 0.66 T:morus1280128v1 0.66 0.67 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.69 T:aes128otrcv3 0.68 0.68 0.69 T:aes128otrsv3 0.68 0.69 0.69 T:aes128otrpv3 0.73? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.90 0.91 0.91 T:aeadaes256ocbtaglen128v1 0.90 0.91 0.91 T:aes256otrcv3 0.91 0.91 0.92 T:aes256otrsv3 0.92 0.92 0.92 T:aes256otrpv3 1.05 1.06 1.06 T:aes128gcmv1 1.05 1.07 1.09 T:morus640128v2 1.07 1.07 1.08 T:morus640128v1 1.14 1.16 1.17 T:norx6444v3 1.16 1.17 1.20 T:deoxysi128v141 1.20 1.21 1.23 T:deoxysneq128128v1 1.26 1.27 1.29 T:deoxysi256v141 1.30 1.31 1.32 T:deoxysneq256128v1 1.42 1.43 1.44 aes256gcmv1 1.65 1.66 1.78 T:colm0v1 1.75 1.75 1.76 T:deoxysii128v141 2.00 2.01 2.01 T:deoxysii256v141 2.02 2.03 2.05 T:norx6441v3 2.01 2.05 2.07 T:norx6441v2 2.14 2.19 2.23 T:lunarkeyakv2 2.41 2.42 2.44 T:deoxyseq128128v1 2.46 2.47 2.50 T:norx6441v1 2.52 2.53 2.56 T:deoxyseq256128v1 2.70 2.71 2.74 T:aes128n12t8clocv3 2.71 2.72 2.74 T:aes128n8t8silcv2 2.71 2.73 2.74 T:aes128n12t8clocv2 2.69 2.73 2.74 T:aes128n12t8silcv3 2.71 2.73 2.75 T:aes128n8t8clocv2 2.69 2.73 2.75 T:aes128n12t8silcv2 2.86 2.89 2.93 T:seakeyakv2 2.92 2.95 2.98 T:oceankeyakv2 3.13 3.15 3.16 T:norx6461v2 3.12 3.15 3.18 T:norx6461v3 3.73 3.76 3.77 T:norx3241v2 3.77 3.79 3.84 T:norx6461v1 3.78 3.80 3.83 T:norx3241v3 3.82 3.83 3.85 T:norx6444v2 4.22 4.24 4.26 T:lakekeyakv1 4.29 4.31 4.33 T:norx6444v1 4.40 4.44 4.46 T:lakekeyakv2 4.51 4.54 4.55 T:norx3241v1 5.73 5.75 5.77 T:norx3261v3 5.78 5.81 5.83 T:norx3261v2 6.03 6.10 6.10 T:aesjambuv1 6.93 6.94 6.98 T:acorn128v2 7.06 7.08 7.09 T:norx3261v1 7.09 7.16 7.23 T:ketjemajorv2 7.31 7.32 7.34 T:acorn128v3 7.39 7.41 7.43 ascon128av12 7.59 7.62 7.66 T:ascon128av11 7.60 7.64 7.70 T:ascon96v1 9.78 9.84 9.92 T:ketjeminorv2 9.88 9.90 9.93 T:riverkeyakv2 10.58 10.60 10.63 T:ascon128v1 10.58 10.61 10.68 T:ascon128v11 10.89 10.94 10.97 ascon128v12 13.94 13.98 14.02 T:aes128otrpv1 14.04 14.07 14.12 T:aes128otrsv2 14.09 14.11 14.17 T:aes128otrpv2 14.37 14.41 14.44 T:aes128otrsv1 14.55 14.59 14.62 T:twine80n6t4clocv3 15.47 15.51 15.54 T:twine80n6t4clocv2 18.04 18.11 18.43 T:aes256otrpv2 18.16 18.21 18.24 T:aes256otrsv2 18.32 18.37 18.42 T:aes256otrpv1 18.33 18.37 18.40 T:aes256otrsv1 21.98 22.01 22.07 T:aes128n12clocv1 22.45 22.49 22.53 T:aes128n8clocv1 27.02 27.06 27.08 T:proest256otrv1 31.85 31.92 31.98 T:ketjesrv1 32.15 32.22 32.26 T:ketjesrv2 33.27 33.29 33.33 T:aeadaes128ocbtaglen96v1 33.27 33.31 33.33 T:aeadaes128ocbtaglen64v1 39.68 39.72 39.75 T:aeadaes192ocbtaglen96v1 39.68 39.75 39.80 T:aeadaes192ocbtaglen64v1 46.18 46.21 46.24 T:aeadaes256ocbtaglen64v1 46.19 46.24 46.28 T:aeadaes256ocbtaglen96v1 50.79 50.83 50.88 T:proest128otrv1 60.03 60.09 60.13 T:ketjejrv1 71.28 71.33 71.39 T:colm127v1 71.46 71.60 71.64 T:present80n6t4silcv3 94.15 94.24 94.39 T:ketjejrv2 109.01 109.14 109.26 T:deoxysneq128128v13 125.06 125.11 125.19 T:led80n6t4silcv3 151.13 152.38 152.53 T:deoxysneq256128v13 158.08 158.44 159.51 T:aezv1 168.29 168.46 168.55 T:deoxyseq128128v13 223.59 223.72 223.85 T:deoxyseq256128v13 347.75 348.64 349.45 T:acorn128 4032.78 4033.02 4033.66 T:led80n6silcv1 4044.91 4045.11 4045.29 T:led80n6t4silcv2 4277.99 4278.21 4278.48 T:present80n6silcv1 4278.98 4279.64 4280.59 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.19? 0.20? 0.22? T:tiaoxinv2 0.18? 0.20? 0.22? T:tiaoxinv1 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.25 aegis128l 0.39 0.39 0.40 aegis256 0.42 0.43 0.43 T:aegis256 0.42 0.43 0.45 T:aezv3 0.42 0.44 0.45 T:aezv5 0.41 0.44 0.45 T:aezv4 0.43 0.44 0.44 T:aegis128 0.61 0.62 0.63 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v2 0.61 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.61 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.63 0.64 0.65 T:aes128otrpv3 0.65 0.65 0.65 T:aes128otrcv3 0.63? 0.74? 0.85? T:aeadaes192ocbtaglen128v1 0.80 0.82 0.83 T:aes128gcmv1 0.85 0.87 0.89 T:deoxysneq128128v1 0.84 0.88 0.90 T:deoxysi128v141 0.87 0.88 0.89 T:aeadaes256ocbtaglen128v1 0.88 0.88 0.89 T:aes256otrcv3 0.89 0.89 0.89 T:aes256otrpv3 0.91 0.93 0.93 aes256gcmv1 0.96 0.99 1.02 T:deoxysi256v141 0.98 0.99 1.02 T:deoxysneq256128v1 1.04 1.05 1.06 T:morus640128v2 1.04 1.05 1.05 T:morus640128v1 1.13 1.15 1.18 T:colm0v1 1.29 1.31 1.33 T:deoxysii128v141 1.31 1.33 1.36 T:deoxyseq128128v1 1.49 1.51 1.52 T:deoxysii256v141 1.49 1.51 1.53 T:deoxyseq256128v1 1.65 1.67 1.68 T:norx6444v3 1.70 1.70 1.70 T:aes128otrsv3 2.12 2.15 2.17 T:norx6441v2 2.15 2.17 2.19 T:norx6441v3 2.30 2.30 2.30 T:aes256otrsv3 2.31 2.32 2.36 T:seakeyakv2 2.37 2.40 2.44 T:oceankeyakv2 2.58 2.59 2.61 T:norx6441v1 2.72 2.72 2.72 T:aes128n12t8silcv3 2.72 2.72 2.73 T:aes128n12t8silcv2 2.74 2.74 2.74 T:aes128n12t8clocv2 2.74 2.74 2.74 T:aes128n12t8clocv3 2.74 2.74 2.74 T:aes128n8t8clocv2 2.72 2.75 2.75 T:aes128n8t8silcv2 2.83 2.88 2.90 T:lunarkeyakv2 3.29 3.30 3.32 T:norx6461v3 3.32 3.33 3.35 T:norx6461v2 3.49 3.51 3.53 T:norx6444v2 3.88 3.91 3.92 T:lakekeyakv1 3.91 3.92 3.94 T:norx6461v1 3.93 3.94 3.96 T:lakekeyakv2 3.95 3.97 3.99 T:norx3241v3 3.96 3.98 3.99 T:norx3241v2 4.26 4.27 4.28 T:norx6444v1 4.77 4.78 4.80 T:norx3241v1 5.79 5.79 5.80 T:aesjambuv1 5.98 5.99 6.01 T:norx3261v3 6.04 6.06 6.08 T:norx3261v2 6.49 6.51 6.56 T:ketjemajorv2 6.51 6.57 6.59 T:acorn128v3 6.99 7.02 7.04 T:acorn128v2 7.11 7.13 7.16 T:riverkeyakv2 7.20 7.21 7.23 T:norx3261v1 7.36 7.38 7.40 T:ascon96v1 7.37 7.40 7.42 T:ascon128av11 7.45 7.49 7.51 ascon128av12 8.84 8.87 8.95 T:ketjeminorv2 10.86 10.87 10.91 T:ascon128v1 10.86 10.88 10.91 T:ascon128v11 10.93 10.94 10.96 ascon128v12 12.75 12.77 12.80 T:aes128otrsv1 12.75 12.78 12.80 T:aes128otrsv2 12.91 12.92 12.94 T:aes128otrpv2 12.99 13.03 13.12 T:aes128otrpv1 14.35 14.38 14.40 T:twine80n6t4clocv3 15.32 15.33 15.35 T:twine80n6t4clocv2 16.75 16.77 16.83 T:aes256otrsv1 16.77 16.79 16.81 T:aes256otrsv2 16.90 16.93 16.95 T:aes256otrpv1 17.04 17.10 17.14 T:aes256otrpv2 17.55 17.57 17.61 T:aes128n8clocv1 17.52 17.58 17.61 T:aes128n12clocv1 24.44 24.45 24.46 T:aeadaes128ocbtaglen64v1 24.44 24.46 24.48 T:aeadaes128ocbtaglen96v1 27.27 27.29 27.30 T:proest256otrv1 28.22 28.25 28.27 T:ketjesrv1 28.80 28.82 28.86 T:aeadaes192ocbtaglen96v1 28.80 28.84 28.85 T:aeadaes192ocbtaglen64v1 29.42 29.47 29.53 T:ketjesrv2 33.25 33.27 33.28 T:aeadaes256ocbtaglen64v1 33.24 33.27 33.30 T:aeadaes256ocbtaglen96v1 40.15 40.19 40.20 T:colm127v1 50.89 50.92 50.97 T:proest128otrv1 53.21 53.31 53.38 T:ketjejrv1 71.12 71.14 71.16 T:present80n6t4silcv3 80.40 80.48 80.55 T:deoxysneq128128v13 89.76 90.20 90.35 T:ketjejrv2 104.02 104.12 105.33 T:aezv1 111.72 112.08 113.34 T:deoxysneq256128v13 124.69 124.74 124.79 T:led80n6t4silcv3 126.50 126.64 128.21 T:deoxyseq128128v13 167.30 167.35 167.48 T:deoxyseq256128v13 315.03 320.14 320.73 T:acorn128 3024.42 3024.61 3026.43 T:led80n6silcv1 3034.09 3034.31 3034.71 T:led80n6t4silcv2 3209.10 3209.31 3209.79 T:present80n6silcv1 3208.96 3210.62 3210.86 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.24 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.26? 0.28? 0.29? T:tiaoxinv1 0.26 0.28 0.28 T:tiaoxinv2 0.40 0.40 0.41 T:aegis256 0.43 0.43 0.44 T:aezv4 0.41 0.43 0.44 T:aezv3 0.42 0.43 0.44 T:aezv5 0.43 0.44 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.61 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v1 0.62 0.63 0.64 T:morus1280128v2 0.61 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.71 0.73 0.74 T:aes128gcmv1 0.57? 0.76? 0.93? T:aeadaes192ocbtaglen128v1 0.87 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.92 T:aes256otrcv3 0.91 0.91 0.92 T:aes256otrpv3 0.89 0.92 0.93 aes256gcmv1 1.00 1.01 1.03 T:deoxysi128v141 1.02 1.04 1.05 T:deoxysneq128128v1 1.03 1.04 1.04 T:morus640128v1 1.03 1.04 1.05 T:morus640128v2 1.13 1.15 1.16 T:deoxysneq256128v1 1.13 1.16 1.18 T:deoxysi256v141 1.14 1.17 1.21 T:colm0v1 1.29 1.31 1.33 T:deoxysii128v141 1.48 1.50 1.52 T:deoxysii256v141 1.63 1.64 1.66 T:deoxyseq128128v1 1.65 1.67 1.68 T:norx6444v3 1.72 1.72 1.73 T:aes128otrsv3 1.76 1.78 1.79 T:deoxyseq256128v1 2.07 2.11 2.12 T:norx6441v3 2.10 2.11 2.14 T:norx6441v2 2.32 2.32 2.33 T:aes256otrsv3 2.36 2.38 2.41 T:seakeyakv2 2.39 2.43 2.48 T:oceankeyakv2 2.53 2.55 2.56 T:norx6441v1 2.69 2.70 2.72 T:aes128n12t8silcv2 2.70 2.70 2.72 T:aes128n8t8silcv2 2.70 2.71 2.72 T:aes128n12t8silcv3 2.71 2.72 2.73 T:aes128n12t8clocv2 2.72 2.72 2.73 T:aes128n8t8clocv2 2.71 2.72 2.73 T:aes128n12t8clocv3 2.85 2.90 2.94 T:lunarkeyakv2 3.22 3.23 3.25 T:norx6461v3 3.24 3.26 3.28 T:norx6461v2 3.51 3.54 3.57 T:norx6444v2 3.78 3.83 3.85 T:norx6461v1 3.88 3.89 3.90 T:norx3241v3 3.88 3.89 3.91 T:norx3241v2 3.92 3.93 3.95 T:lakekeyakv1 3.92 3.93 3.95 T:lakekeyakv2 4.23 4.24 4.26 T:norx6444v1 4.65 4.67 4.68 T:norx3241v1 5.88 5.88 5.88 T:aesjambuv1 5.89 5.91 5.93 T:norx3261v3 5.94 5.95 5.97 T:norx3261v2 6.33 6.36 6.40 T:ketjemajorv2 7.13 7.14 7.15 T:norx3261v1 7.16 7.20 7.21 T:acorn128v2 7.19 7.21 7.24 T:riverkeyakv2 7.36 7.38 7.42 ascon128av12 7.35 7.39 7.42 T:ascon128av11 7.42 7.43 7.46 T:acorn128v3 7.45 7.48 7.50 T:ascon96v1 8.90 8.96 8.99 T:ketjeminorv2 10.76 10.78 10.81 T:ascon128v1 10.76 10.79 10.83 T:ascon128v11 10.89 10.91 10.93 ascon128v12 13.00 13.03 13.07 T:aes128otrsv2 13.16 13.19 13.24 T:aes128otrpv2 13.16 13.21 13.24 T:aes128otrsv1 13.14 13.22 13.29 T:aes128otrpv1 14.35 14.39 14.41 T:twine80n6t4clocv3 15.29 15.30 15.32 T:twine80n6t4clocv2 17.06 17.08 17.11 T:aes256otrsv2 17.05 17.10 17.12 T:aes128n12clocv1 17.11 17.16 17.19 T:aes256otrsv1 17.26 17.29 17.34 T:aes256otrpv1 17.23 17.30 17.44 T:aes256otrpv2 17.23 17.30 17.33 T:aes128n8clocv1 27.26 27.28 27.31 T:proest256otrv1 28.54 28.57 28.60 T:ketjesrv1 28.73 28.76 28.79 T:aeadaes128ocbtaglen96v1 28.74 28.76 28.79 T:aeadaes128ocbtaglen64v1 29.57 29.63 29.66 T:ketjesrv2 34.15 34.17 34.20 T:aeadaes192ocbtaglen96v1 34.16 34.19 34.27 T:aeadaes192ocbtaglen64v1 39.62 39.65 39.69 T:aeadaes256ocbtaglen64v1 39.63 39.67 39.71 T:aeadaes256ocbtaglen96v1 49.15 49.18 49.22 T:colm127v1 51.09 51.13 51.17 T:proest128otrv1 53.70 53.80 53.87 T:ketjejrv1 71.04 71.06 71.12 T:present80n6t4silcv3 90.54 90.60 90.65 T:ketjejrv2 94.25 94.65 94.73 T:deoxysneq128128v13 104.34 104.61 105.55 T:aezv1 124.64 124.70 124.74 T:led80n6t4silcv3 125.91 125.97 127.24 T:deoxyseq128128v13 131.20 131.39 132.18 T:deoxysneq256128v13 167.08 167.14 167.29 T:deoxyseq256128v13 337.20 339.47 339.71 T:acorn128 3024.55 3024.97 3030.37 T:led80n6silcv1 3034.09 3034.30 3034.60 T:led80n6t4silcv2 3209.04 3209.85 3210.20 T:present80n6silcv1 3208.86 3210.53 3210.89 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 0.23? 0.25? 0.26? T:aezv4 0.24 0.25 0.26 T:aezv3 0.24 0.25 0.26 T:aezv5 0.25 0.25 0.25 T:aegis128l 0.25 0.26 0.26 aegis128l 0.28 0.28 0.28 T:tiaoxinv2 0.27 0.28 0.28 T:tiaoxinv1 0.40 0.41 0.41 T:aegis256 0.42 0.43 0.44 T:aegis128 0.44 0.44 0.45 aegis256 0.62 0.62 0.63 T:morus1280256v2 0.62 0.62 0.63 T:morus1280128v1 0.62 0.62 0.63 T:morus1280256v1 0.62 0.62 0.63 T:morus1280128v2 0.63 0.63 0.64 T:aeadaes128ocbtaglen128v1 0.66 0.67 0.67 T:aes128otrpv3 0.67 0.67 0.68 T:aes128otrcv3 0.73 0.74 0.75 T:aes128gcmv1 0.74 0.75 0.76 T:aeadaes192ocbtaglen128v1 0.89 0.89 0.90 T:aeadaes256ocbtaglen128v1 0.90 0.90 0.91 T:aes256otrcv3 0.91 0.91 0.91 T:aes256otrpv3 0.91 0.92 0.92 aes256gcmv1 1.01 1.02 1.03 T:deoxysi128v141 1.03 1.04 1.04 T:morus640128v1 1.03 1.04 1.05 T:deoxysneq128128v1 1.04 1.04 1.05 T:morus640128v2 1.15 1.15 1.21 T:colm0v1 1.15 1.15 1.16 T:deoxysneq256128v1 1.15 1.16 1.17 T:deoxysi256v141 1.31 1.31 1.32 T:deoxysii128v141 1.50 1.50 1.51 T:deoxysii256v141 1.64 1.65 1.66 T:deoxyseq128128v1 1.65 1.66 1.68 T:norx6444v3 1.72 1.72 1.72 T:aes128otrsv3 1.76 1.78 1.78 T:deoxyseq256128v1 2.09 2.10 2.11 T:norx6441v3 2.09 2.11 2.13 T:norx6441v2 2.32 2.32 2.32 T:aes256otrsv3 2.39 2.40 2.41 T:seakeyakv2 2.43 2.45 2.47 T:oceankeyakv2 2.54 2.55 2.56 T:norx6441v1 2.70 2.71 2.73 T:aes128n12t8silcv2 2.70 2.71 2.73 T:aes128n12t8clocv3 2.70 2.71 2.74 T:aes128n12t8silcv3 2.70 2.72 2.72 T:aes128n8t8silcv2 2.71 2.73 2.73 T:aes128n12t8clocv2 2.71 2.73 2.73 T:aes128n8t8clocv2 2.89 2.92 2.94 T:lunarkeyakv2 3.21 3.22 3.23 T:norx6461v3 3.24 3.25 3.27 T:norx6461v2 3.54 3.55 3.57 T:norx6444v2 3.78 3.82 3.83 T:norx6461v1 3.87 3.89 3.91 T:norx3241v2 3.88 3.90 3.92 T:norx3241v3 3.94 3.95 3.96 T:lakekeyakv2 3.94 3.95 3.97 T:lakekeyakv1 4.24 4.26 4.27 T:norx6444v1 4.66 4.68 4.69 T:norx3241v1 5.88 5.88 5.88 T:aesjambuv1 5.89 5.91 5.92 T:norx3261v3 5.94 5.95 5.97 T:norx3261v2 6.33 6.39 6.44 T:ketjemajorv2 7.14 7.15 7.16 T:norx3261v1 7.19 7.20 7.22 T:acorn128v2 7.21 7.24 7.26 T:riverkeyakv2 7.37 7.40 7.43 ascon128av12 7.42 7.43 7.44 T:acorn128v3 7.46 7.47 7.49 T:ascon96v1 7.37 7.51 7.54 T:ascon128av11 8.88 8.95 8.99 T:ketjeminorv2 10.75 10.78 10.79 T:ascon128v11 10.75 10.79 10.81 T:ascon128v1 10.90 10.93 10.93 ascon128v12 13.01 13.04 13.07 T:aes128otrsv2 13.11 13.18 13.28 T:aes128otrpv1 13.20 13.21 13.25 T:aes128otrsv1 13.20 13.22 13.25 T:aes128otrpv2 14.37 14.38 14.41 T:twine80n6t4clocv3 15.29 15.31 15.31 T:twine80n6t4clocv2 17.08 17.09 17.12 T:aes128n12clocv1 17.08 17.10 17.12 T:aes256otrsv2 17.17 17.19 17.21 T:aes256otrsv1 17.27 17.31 17.34 T:aes128n8clocv1 17.27 17.32 17.48 T:aes256otrpv2 17.29 17.32 17.42 T:aes256otrpv1 27.26 27.29 27.31 T:proest256otrv1 28.58 28.61 28.64 T:ketjesrv1 28.74 28.76 28.78 T:aeadaes128ocbtaglen96v1 28.74 28.78 28.83 T:aeadaes128ocbtaglen64v1 29.61 29.64 29.69 T:ketjesrv2 34.16 34.18 34.23 T:aeadaes192ocbtaglen96v1 34.15 34.19 34.25 T:aeadaes192ocbtaglen64v1 39.62 39.63 39.68 T:aeadaes256ocbtaglen64v1 39.65 39.69 39.71 T:aeadaes256ocbtaglen96v1 48.59 48.61 48.64 T:colm127v1 51.09 51.12 51.16 T:proest128otrv1 53.66 53.71 53.75 T:ketjejrv1 71.02 71.05 71.08 T:present80n6t4silcv3 90.54 90.59 90.65 T:ketjejrv2 94.66 94.72 94.74 T:deoxysneq128128v13 104.23 104.31 105.51 T:aezv1 124.63 124.67 124.74 T:led80n6t4silcv3 125.90 126.16 127.35 T:deoxyseq128128v13 131.21 131.48 132.30 T:deoxysneq256128v13 167.07 167.13 167.25 T:deoxyseq256128v13 337.14 339.51 339.79 T:acorn128 3024.53 3024.88 3028.93 T:led80n6silcv1 3033.96 3034.33 3034.68 T:led80n6t4silcv2 3208.78 3209.18 3209.42 T:present80n6t4silcv2 3209.07 3209.39 3209.96 T:present80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.18? 0.19? 0.20? T:tiaoxinv1 0.19 0.19 0.20 T:tiaoxinv2 0.24 0.25 0.26 T:aezv5 0.22? 0.25? 0.26? T:aezv4 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 aegis128l 0.23? 0.25? 0.26? T:aezv3 0.40 0.41 0.41 aegis256 0.41 0.41 0.43 aes256gcmv1 0.41 0.42 0.43 T:aes128gcmv1 0.45 0.45 0.47 T:aegis256 0.45 0.46 0.47 T:aegis128 0.59 0.59 0.61 T:morus1280128v1 0.59 0.60 0.61 T:morus1280256v1 0.59 0.60 0.61 T:morus1280128v2 0.60 0.60 0.61 T:morus1280256v2 0.62 0.63 0.65 T:colm0v1 0.61 0.65 0.67 T:aes128otrpv3 0.62 0.66 0.67 T:aeadaes128ocbtaglen128v1 0.67 0.68 0.69 T:aes128otrcv3 0.69? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.83 0.87 0.89 T:deoxysneq128128v1 0.85 0.87 0.89 T:deoxysi128v141 0.87 0.88 0.88 T:deoxysii128v141 0.85 0.88 0.90 T:deoxyseq128128v1 0.88 0.88 0.90 T:aeadaes256ocbtaglen128v1 0.88 0.90 0.92 T:aes256otrpv3 0.89 0.92 0.94 T:aes256otrcv3 0.97 0.99 1.01 T:deoxysi256v141 0.97 0.99 1.01 T:deoxysneq256128v1 0.97 1.00 1.01 T:deoxyseq256128v1 0.99 1.00 1.01 T:deoxysii256v141 0.99 1.01 1.01 T:morus640128v1 1.00 1.01 1.02 T:morus640128v2 1.84 1.88 1.92 T:oceankeyakv2 1.84 1.89 1.92 T:lunarkeyakv2 2.11 2.14 2.18 T:norx6441v2 2.14 2.17 2.19 T:norx6441v3 2.14 2.17 2.20 T:norx6444v3 2.27 2.27 2.30 T:seakeyakv2 2.59 2.60 2.64 T:norx6441v1 2.68 2.69 2.69 T:aes128n12t8silcv3 2.68 2.69 2.69 T:aes128n12t8silcv2 2.71 2.72 2.72 T:aes128n12t8clocv3 2.71 2.72 2.73 T:aes128n12t8clocv2 2.72 2.72 2.72 T:aes128n8t8clocv2 2.75 2.75 2.75 T:aes128otrsv3 2.69 2.75 2.75 T:aes128n8t8silcv2 3.20 3.22 3.25 T:norx6444v2 3.32 3.34 3.37 T:norx6461v3 3.37 3.39 3.41 T:norx6461v2 3.59 3.62 3.67 T:lakekeyakv2 3.72 3.72 3.72 T:aes256otrsv3 3.68 3.73 3.78 T:lakekeyakv1 3.91 3.93 3.96 T:norx6461v1 3.93 3.96 3.98 T:norx3241v3 3.98 4.01 4.03 T:norx3241v2 4.20 4.23 4.25 T:norx6444v1 4.77 4.79 4.82 T:norx3241v1 5.55 5.60 5.72 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 6.07 6.09 6.10 T:norx3261v2 6.08 6.10 6.12 T:norx3261v3 6.81 6.86 6.89 T:riverkeyakv2 7.18 7.19 7.21 T:norx3261v1 7.16 7.20 7.23 T:acorn128v2 7.26 7.30 7.33 T:ascon96v1 7.28 7.37 7.41 T:ascon128av11 7.36 7.38 7.43 ascon128av12 7.45 7.54 7.62 T:acorn128v3 7.95 8.04 8.11 T:ketjeminorv2 10.83 10.86 10.91 T:ascon128v1 10.84 10.87 10.89 T:ascon128v11 10.89 10.93 10.95 ascon128v12 11.96 11.98 12.00 T:aes128otrsv2 11.98 12.00 12.02 T:aes128otrsv1 12.13 12.16 12.19 T:aes128n12clocv1 12.12 12.17 12.19 T:aes128n8clocv1 12.25 12.27 12.29 T:aes128otrpv1 12.25 12.28 12.31 T:aes128otrpv2 14.18 14.23 14.27 T:twine80n6t4clocv3 15.06 15.07 15.08 T:twine80n6t4clocv2 15.98 16.01 16.04 T:aes256otrsv2 16.00 16.02 16.06 T:aes256otrsv1 16.25 16.29 16.33 T:aes256otrpv1 16.46 16.56 16.63 T:aes256otrpv2 24.17 24.19 24.23 T:aeadaes128ocbtaglen64v1 24.19 24.21 24.22 T:aeadaes128ocbtaglen96v1 25.26 25.32 25.36 T:ketjesrv1 25.88 25.92 25.93 T:colm127v1 26.95 27.01 27.05 T:ketjesrv2 27.46 27.48 27.49 T:proest256otrv1 28.56 28.59 28.64 T:aeadaes192ocbtaglen96v1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 33.00 33.02 33.04 T:aeadaes256ocbtaglen64v1 33.01 33.06 33.11 T:aeadaes256ocbtaglen96v1 47.44 47.60 47.66 T:ketjejrv1 50.42 50.64 50.93 T:aezv1 51.40 51.41 51.46 T:proest128otrv1 70.59 70.64 70.68 T:present80n6t4silcv3 79.91 79.96 80.04 T:deoxysneq128128v13 83.38 83.47 84.44 T:deoxyseq128128v13 86.95 86.97 87.00 T:ketjejrv2 110.71 110.89 111.16 T:deoxyseq256128v13 111.42 111.62 113.12 T:deoxysneq256128v13 124.21 124.28 124.37 T:led80n6t4silcv3 306.28 313.81 314.52 T:acorn128 2016.36 2016.56 2016.76 T:led80n6silcv1 2022.42 2022.66 2022.83 T:led80n6t4silcv2 2138.73 2138.95 2139.21 T:present80n6t4silcv2 2139.91 2140.14 2140.37 T:present80n6silcv1

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.18? 0.19? 0.21? T:tiaoxinv1 0.18? 0.19? 0.22? T:tiaoxinv2 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aezv5 0.25 0.25 0.26 T:aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.27 aegis128l 0.39 0.40 0.42 T:aegis128 0.41 0.41 0.41 aegis256 0.41 0.41 0.41 T:aegis256 0.40 0.42 0.43 aes256gcmv1 0.40 0.42 0.43 T:aes128gcmv1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.60 0.61 T:morus1280256v1 0.60 0.60 0.61 T:morus1280128v2 0.60 0.61 0.62 T:morus1280128v1 0.63 0.63 0.64 T:colm0v1 0.64 0.64 0.65 T:aes128otrpv3 0.64 0.65 0.66 T:aeadaes128ocbtaglen128v1 0.67 0.67 0.68 T:aes128otrcv3 0.39? 0.75? 0.77? T:aeadaes192ocbtaglen128v1 0.85 0.87 0.87 T:deoxysneq128128v1 0.84 0.87 0.88 T:deoxysi128v141 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.87 0.89 T:deoxysii128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.89 0.91 0.92 T:aes256otrcv3 0.96 1.00 1.01 T:deoxysneq256128v1 0.97 1.00 1.02 T:deoxysii256v141 0.99 1.01 1.02 T:morus640128v2 0.99 1.01 1.02 T:morus640128v1 0.98 1.01 1.03 T:deoxyseq256128v1 1.01 1.04 1.08 T:deoxysi256v141 1.80 1.88 1.95 T:lunarkeyakv2 1.80 1.89 1.92 T:oceankeyakv2 2.13 2.15 2.17 T:norx6441v3 2.15 2.16 2.19 T:norx6441v2 2.16 2.19 2.22 T:norx6444v3 2.25 2.29 2.30 T:seakeyakv2 2.59 2.61 2.65 T:norx6441v1 2.69 2.71 2.78 T:aes128n12t8silcv2 2.66 2.71 2.71 T:aes128n12t8silcv3 2.71 2.72 2.72 T:aes128n8t8clocv2 2.72 2.74 2.74 T:aes128n12t8clocv3 2.72 2.74 2.74 T:aes128n12t8clocv2 2.75 2.75 2.75 T:aes128otrsv3 2.71 2.75 2.78 T:aes128n8t8silcv2 3.29 3.30 3.33 T:norx6461v3 3.27 3.31 3.33 T:norx6444v2 3.32 3.37 3.40 T:norx6461v2 3.59 3.61 3.65 T:lakekeyakv2 3.70 3.72 3.74 T:lakekeyakv1 3.72 3.72 3.73 T:aes256otrsv3 3.86 3.90 3.94 T:norx6461v1 3.96 3.99 4.01 T:norx3241v3 3.98 4.01 4.04 T:norx3241v2 4.20 4.22 4.24 T:norx6444v1 4.77 4.82 4.85 T:norx3241v1 5.59 5.65 5.71 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 6.06 6.09 6.10 T:norx3261v2 6.05 6.09 6.12 T:norx3261v3 6.81 6.85 6.87 T:riverkeyakv2 7.22 7.22 7.25 T:norx3261v1 7.26 7.28 7.33 T:ascon96v1 7.31 7.33 7.37 ascon128av12 7.39 7.43 7.45 T:acorn128v2 7.16 7.44 7.49 T:ascon128av11 7.53 7.55 7.56 T:acorn128v3 7.99 8.05 8.15 T:ketjeminorv2 10.81 10.85 10.87 T:ascon128v11 10.85 10.87 10.89 T:ascon128v1 10.87 10.89 10.96 ascon128v12 12.01 12.03 12.06 T:aes128otrsv2 12.01 12.03 12.08 T:aes128otrsv1 12.15 12.17 12.20 T:aes128n8clocv1 12.15 12.18 12.21 T:aes128n12clocv1 12.29 12.35 12.38 T:aes128otrpv2 12.32 12.39 12.65 T:aes128otrpv1 14.17 14.24 14.27 T:twine80n6t4clocv3 15.06 15.08 15.12 T:twine80n6t4clocv2 16.03 16.07 16.11 T:aes256otrsv1 16.06 16.08 16.11 T:aes256otrsv2 16.31 16.36 16.40 T:aes256otrpv1 16.36 16.46 16.58 T:aes256otrpv2 24.18 24.20 24.22 T:aeadaes128ocbtaglen64v1 24.20 24.20 24.22 T:aeadaes128ocbtaglen96v1 25.25 25.31 25.35 T:ketjesrv1 25.87 25.91 25.94 T:colm127v1 26.91 26.97 27.01 T:ketjesrv2 27.47 27.50 27.51 T:proest256otrv1 28.57 28.59 28.62 T:aeadaes192ocbtaglen96v1 28.54 28.59 28.62 T:aeadaes192ocbtaglen64v1 33.01 33.02 33.04 T:aeadaes256ocbtaglen64v1 32.96 33.04 33.08 T:aeadaes256ocbtaglen96v1 47.39 47.60 47.65 T:ketjejrv1 50.47 50.78 50.94 T:aezv1 51.36 51.41 51.48 T:proest128otrv1 70.58 70.63 70.67 T:present80n6t4silcv3 79.91 80.06 80.16 T:deoxysneq128128v13 83.34 83.42 84.39 T:deoxyseq128128v13 86.92 86.98 87.01 T:ketjejrv2 110.71 110.83 111.32 T:deoxyseq256128v13 111.35 111.51 111.69 T:deoxysneq256128v13 124.23 124.34 124.38 T:led80n6t4silcv3 326.00 330.11 330.61 T:acorn128 2015.98 2016.70 2024.14 T:led80n6silcv1 2022.47 2022.61 2022.87 T:led80n6t4silcv2 2138.73 2139.00 2139.17 T:present80n6t4silcv2 2139.92 2140.20 2140.47 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.19 0.19 0.20 T:tiaoxinv1 0.19 0.19 0.19 T:tiaoxinv2 0.23 0.25 0.25 aegis128l 0.25 0.25 0.25 T:aezv3 0.25 0.25 0.25 T:aegis128l 0.25 0.25 0.25 T:aezv4 0.25 0.25 0.25 T:aezv5 0.39 0.40 0.41 T:aegis128 0.40 0.41 0.41 aegis256 0.40 0.41 0.42 T:aegis256 0.41 0.42 0.42 aes256gcmv1 0.41 0.42 0.42 T:aes128gcmv1 0.60 0.60 0.61 T:morus1280256v2 0.60 0.61 0.62 T:morus1280256v1 0.60 0.61 0.62 T:morus1280128v1 0.60 0.61 0.61 T:morus1280128v2 0.63 0.63 0.63 T:colm0v1 0.64 0.64 0.65 T:aeadaes128ocbtaglen128v1 0.64 0.64 0.65 T:aes128otrpv3 0.67 0.68 0.68 T:aes128otrcv3 0.74? 0.75? 1.11? T:aeadaes192ocbtaglen128v1 0.85 0.86 0.88 T:deoxysneq128128v1 0.86 0.87 0.89 T:deoxysii128v141 0.87 0.87 0.88 T:deoxyseq128128v1 0.86 0.88 0.91 T:deoxysi128v141 0.88 0.89 0.89 T:aeadaes256ocbtaglen128v1 0.89 0.90 0.90 T:aes256otrpv3 0.89 0.91 0.92 T:aes256otrcv3 0.99 1.00 1.02 T:deoxysneq256128v1 0.99 1.00 1.00 T:deoxysii256v141 0.99 1.00 1.01 T:morus640128v1 1.00 1.01 1.03 T:deoxyseq256128v1 1.00 1.01 1.03 T:morus640128v2 1.03 1.04 1.07 T:deoxysi256v141 1.83 1.87 1.90 T:oceankeyakv2 1.85 1.89 1.92 T:lunarkeyakv2 2.13 2.15 2.16 T:norx6441v3 2.15 2.17 2.19 T:norx6441v2 2.15 2.18 2.20 T:norx6444v3 2.27 2.29 2.31 T:seakeyakv2 2.61 2.62 2.63 T:norx6441v1 2.69 2.72 2.72 T:aes128n8t8clocv2 2.69 2.72 2.74 T:aes128n12t8clocv3 2.72 2.74 2.74 T:aes128n12t8clocv2 2.71 2.75 2.75 T:aes128n8t8silcv2 2.75 2.75 2.75 T:aes128otrsv3 2.71 2.75 2.75 T:aes128n12t8silcv3 2.75 2.75 2.75 T:aes128n12t8silcv2 3.27 3.28 3.32 T:norx6461v3 3.28 3.30 3.33 T:norx6444v2 3.34 3.36 3.38 T:norx6461v2 3.59 3.61 3.62 T:lakekeyakv2 3.72 3.72 3.73 T:aes256otrsv3 3.71 3.73 3.75 T:lakekeyakv1 3.83 3.88 3.92 T:norx6461v1 3.97 3.98 4.02 T:norx3241v2 3.97 4.00 4.02 T:norx3241v3 4.20 4.22 4.25 T:norx6444v1 4.80 4.82 4.85 T:norx3241v1 5.56 5.68 5.74 T:ketjemajorv2 5.75 5.75 5.75 T:aesjambuv1 6.05 6.07 6.10 T:norx3261v3 6.06 6.08 6.09 T:norx3261v2 6.81 6.85 6.88 T:riverkeyakv2 7.19 7.22 7.24 T:norx3261v1 7.23 7.28 7.31 T:ascon96v1 7.33 7.36 7.42 ascon128av12 7.39 7.42 7.44 T:acorn128v2 7.44 7.46 7.48 T:ascon128av11 7.53 7.54 7.55 T:acorn128v3 8.03 8.06 8.10 T:ketjeminorv2 10.83 10.84 10.90 T:ascon128v1 10.83 10.86 10.88 T:ascon128v11 10.84 10.87 10.91 ascon128v12 12.00 12.04 12.08 T:aes128otrsv2 12.01 12.05 12.09 T:aes128otrsv1 12.14 12.16 12.18 T:aes128n12clocv1 12.13 12.17 12.20 T:aes128n8clocv1 12.32 12.33 12.37 T:aes128otrpv2 12.30 12.37 12.67 T:aes128otrpv1 14.21 14.24 14.28 T:twine80n6t4clocv3 15.05 15.08 15.12 T:twine80n6t4clocv2 16.02 16.04 16.08 T:aes256otrsv2 16.00 16.08 16.12 T:aes256otrsv1 16.32 16.36 16.38 T:aes256otrpv1 16.38 16.46 16.61 T:aes256otrpv2 24.19 24.21 24.23 T:aeadaes128ocbtaglen96v1 24.18 24.21 24.22 T:aeadaes128ocbtaglen64v1 25.27 25.30 25.34 T:ketjesrv1 25.87 25.90 25.92 T:colm127v1 26.96 27.01 27.11 T:ketjesrv2 27.45 27.48 27.50 T:proest256otrv1 28.57 28.58 28.59 T:aeadaes192ocbtaglen96v1 28.58 28.59 28.61 T:aeadaes192ocbtaglen64v1 33.00 33.02 33.04 T:aeadaes256ocbtaglen64v1 33.00 33.03 33.06 T:aeadaes256ocbtaglen96v1 47.57 47.62 47.65 T:ketjejrv1 50.45 50.82 50.98 T:aezv1 51.38 51.41 51.45 T:proest128otrv1 70.59 70.60 70.65 T:present80n6t4silcv3 79.92 79.98 80.11 T:deoxysneq128128v13 83.40 83.49 84.31 T:deoxyseq128128v13 86.93 86.96 86.99 T:ketjejrv2 110.80 111.00 111.36 T:deoxyseq256128v13 111.32 111.52 111.78 T:deoxysneq256128v13 124.24 124.32 124.39 T:led80n6t4silcv3 325.99 330.14 330.88 T:acorn128 2015.94 2016.70 2024.32 T:led80n6silcv1 2022.45 2022.58 2022.89 T:led80n6t4silcv2 2138.77 2139.01 2139.26 T:present80n6t4silcv2 2139.90 2140.16 2140.47 T:present80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.29 0.29 0.30 T:tiaoxinv1 0.29 0.29 0.31 T:tiaoxinv2 0.31 0.32 0.33 T:aegis128l 0.31 0.32 0.32 aegis128l 0.47 0.48 0.48 aegis256 0.49 0.50 0.50 T:aegis128 0.50 0.50 0.51 T:aegis256 0.51 0.51 0.52 T:aezv5 0.51 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.76 0.76 0.77 T:aes128otrpv3 0.77 0.78 0.79 T:morus1280256v1 0.77 0.78 0.79 T:morus1280128v1 0.78 0.79 0.80 T:morus1280256v2 0.79 0.79 0.79 T:morus1280128v2 0.84 0.85 0.85 T:aes128otrcv3 0.89 0.89 0.98 T:aeadaes192ocbtaglen128v1 0.96 0.97 0.97 T:aes128gcmv1 1.03 1.03 1.05 T:deoxysneq128128v1 1.03 1.03 1.05 T:aeadaes256ocbtaglen128v1 1.05 1.05 1.07 T:deoxysi128v141 1.05 1.05 1.05 T:aes256otrpv3 1.11 1.11 1.12 aes256gcmv1 1.14 1.15 1.15 T:aes256otrcv3 1.16 1.16 1.18 T:deoxysneq256128v1 1.18 1.18 1.19 T:morus640128v1 1.19 1.20 1.21 T:morus640128v2 1.23 1.24 1.25 T:deoxysi256v141 1.29 1.30 1.33 T:colm0v1 1.51 1.52 1.52 T:deoxysii128v141 1.52 1.53 1.55 T:deoxyseq128128v1 1.71 1.71 1.72 T:deoxyseq256128v1 1.74 1.75 1.77 T:deoxysii256v141 1.81 1.81 1.81 T:aes128otrsv3 2.27 2.28 2.29 T:norx6444v3 2.45 2.45 2.46 T:aes256otrsv3 2.49 2.50 2.51 T:norx6441v2 2.52 2.54 2.55 T:norx6441v3 2.82 2.82 2.82 T:aes128n12t8clocv3 2.82 2.82 2.82 T:aes128n12t8clocv2 2.82 2.82 2.83 T:aes128n8t8clocv2 2.85 2.85 2.85 T:aes128n12t8silcv3 2.85 2.85 2.85 T:aes128n12t8silcv2 2.85 2.87 2.88 T:aes128n8t8silcv2 2.90 2.91 2.92 T:norx6441v1 3.39 3.40 3.41 T:seakeyakv2 3.81 3.82 3.82 T:norx6461v3 3.84 3.86 3.87 T:norx6461v2 4.29 4.31 4.32 T:norx3241v2 4.30 4.31 4.32 T:norx3241v3 4.32 4.33 4.34 T:lakekeyakv2 4.39 4.40 4.43 T:norx6461v1 4.57 4.58 4.59 T:lakekeyakv1 4.58 4.59 4.60 T:oceankeyakv2 4.97 5.00 5.02 T:norx6444v2 5.05 5.08 5.10 T:norx3241v1 5.94 5.94 5.94 T:aesjambuv1 6.02 6.03 6.03 T:norx6444v1 6.50 6.50 6.51 T:norx3261v3 6.56 6.57 6.57 T:norx3261v2 7.50 7.52 7.54 T:riverkeyakv2 7.55 7.56 7.58 T:ascon96v1 7.57 7.57 7.60 T:ascon128av11 7.59 7.61 7.65 T:acorn128v3 7.64 7.64 7.65 T:norx3261v1 7.67 7.69 7.71 ascon128av12 7.85 7.86 7.88 T:lunarkeyakv2 8.06 8.07 8.08 T:acorn128v2 8.47 8.52 8.55 T:ketjemajorv2 10.03 10.07 10.09 T:ketjeminorv2 11.05 11.06 11.09 T:ascon128v1 11.07 11.07 11.08 T:ascon128v11 11.11 11.13 11.16 ascon128v12 13.15 13.16 13.18 T:aes128otrsv1 13.16 13.17 13.18 T:aes128otrsv2 13.32 13.34 13.36 T:aes128otrpv2 13.38 13.39 13.41 T:aes128otrpv1 14.70 14.71 14.72 T:twine80n6t4clocv3 15.64 15.64 15.66 T:twine80n6t4clocv2 17.25 17.27 17.29 T:aes256otrsv1 17.26 17.29 17.31 T:aes256otrsv2 17.41 17.43 17.45 T:aes256otrpv1 17.60 17.63 17.66 T:aes256otrpv2 17.75 17.77 17.78 T:aes128n12clocv1 17.79 17.81 17.82 T:aes128n8clocv1 25.07 25.08 25.10 T:aeadaes128ocbtaglen64v1 25.09 25.10 25.12 T:aeadaes128ocbtaglen96v1 29.00 29.03 29.04 T:ketjesrv1 29.52 29.53 29.55 T:aeadaes192ocbtaglen96v1 29.52 29.53 29.57 T:aeadaes192ocbtaglen64v1 29.67 29.68 29.70 T:proest256otrv1 30.44 30.46 30.54 T:ketjesrv2 34.09 34.10 34.11 T:aeadaes256ocbtaglen64v1 34.09 34.11 34.12 T:aeadaes256ocbtaglen96v1 40.91 40.93 40.95 T:colm127v1 53.06 53.09 53.12 T:proest128otrv1 54.00 54.04 54.17 T:ketjejrv1 71.90 71.93 71.94 T:present80n6t4silcv3 80.94 81.00 81.03 T:deoxysneq128128v13 91.18 91.66 91.89 T:ketjejrv2 102.62 102.88 103.33 T:aezv1 112.41 112.87 113.75 T:deoxysneq256128v13 125.75 125.79 125.83 T:led80n6t4silcv3 127.90 127.99 128.03 T:deoxyseq128128v13 169.14 169.21 169.29 T:deoxyseq256128v13 355.62 359.98 360.02 T:acorn128 3040.57 3040.68 3040.83 T:led80n6silcv1 3049.69 3049.77 3050.14 T:led80n6t4silcv2 3226.11 3226.17 3226.26 T:present80n6silcv1 3226.28 3226.42 3226.52 T:present80n6t4silcv2

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.32 0.32 0.32 aegis128l 0.31 0.32 0.32 T:aegis128l 0.36 0.36 0.37 T:tiaoxinv2 0.36 0.36 0.37 T:tiaoxinv1 0.47 0.48 0.48 T:aegis256 0.49 0.50 0.50 T:aegis128 0.51 0.51 0.52 T:aezv5 0.51 0.52 0.52 T:aezv4 0.52 0.52 0.53 T:aezv3 0.53 0.53 0.53 aegis256 0.75 0.75 0.76 T:aeadaes128ocbtaglen128v1 0.78 0.79 0.79 T:aes128otrpv3 0.78 0.79 0.80 T:morus1280256v1 0.79 0.79 0.80 T:morus1280128v1 0.79 0.80 0.81 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.87 0.87 0.88 T:aes128otrcv3 0.89 0.89 0.90 T:aes128gcmv1 0.89? 0.90? 1.12? T:aeadaes192ocbtaglen128v1 1.05 1.05 1.07 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.08 T:aes256otrpv3 1.10 1.11 1.11 aes256gcmv1 1.17 1.18 1.19 T:morus640128v1 1.18 1.18 1.18 T:aes256otrcv3 1.21 1.21 1.22 T:morus640128v2 1.26 1.26 1.27 T:deoxysi128v141 1.26 1.26 1.27 T:deoxysneq128128v1 1.33 1.35 1.39 T:colm0v1 1.36 1.36 1.37 T:deoxysneq256128v1 1.42 1.43 1.45 T:deoxysi256v141 1.56 1.56 1.57 T:deoxysii128v141 1.80 1.80 1.82 T:deoxysii256v141 1.84 1.84 1.85 T:aes128otrsv3 1.91 1.92 1.93 T:deoxyseq128128v1 2.04 2.04 2.06 T:deoxyseq256128v1 2.28 2.29 2.30 T:norx6444v3 2.45 2.47 2.47 T:norx6441v3 2.47 2.48 2.49 T:norx6441v2 2.49 2.49 2.50 T:aes256otrsv3 2.81 2.81 2.82 T:aes128n12t8clocv3 2.81 2.81 2.82 T:aes128n12t8clocv2 2.81 2.81 2.82 T:aes128n8t8clocv2 2.83 2.84 2.86 T:aes128n8t8silcv2 2.83 2.84 2.85 T:aes128n12t8silcv3 2.83 2.84 2.85 T:aes128n12t8silcv2 2.87 2.89 2.90 T:norx6441v1 3.44 3.46 3.47 T:seakeyakv2 3.74 3.75 3.76 T:norx6461v3 3.77 3.78 3.80 T:norx6461v2 4.22 4.22 4.24 T:norx3241v2 4.23 4.24 4.25 T:norx3241v3 4.28 4.30 4.34 T:norx6461v1 4.32 4.33 4.35 T:lakekeyakv2 4.60 4.61 4.62 T:lakekeyakv1 4.60 4.63 4.70 T:oceankeyakv2 4.94 4.97 4.97 T:norx3241v1 5.03 5.04 5.09 T:norx6444v2 5.99 6.00 6.03 T:norx6444v1 6.03 6.03 6.05 T:aesjambuv1 6.41 6.43 6.45 T:norx3261v2 6.42 6.44 6.45 T:norx3261v3 7.56 7.57 7.59 T:norx3261v1 7.56 7.58 7.62 T:ascon128av11 7.57 7.59 7.62 ascon128av12 7.60 7.62 7.64 T:riverkeyakv2 7.65 7.66 7.68 T:ascon96v1 7.88 7.90 7.93 T:lunarkeyakv2 8.24 8.26 8.27 T:acorn128v2 8.29 8.31 8.36 T:ketjemajorv2 8.46 8.47 8.51 T:acorn128v3 10.12 10.14 10.19 T:ketjeminorv2 10.95 10.97 10.98 T:ascon128v1 10.95 10.97 11.02 T:ascon128v11 11.08 11.10 11.12 ascon128v12 13.43 13.44 13.45 T:aes128otrsv2 13.54 13.58 13.70 T:aes128otrpv1 13.57 13.60 13.61 T:aes128otrsv1 13.61 13.62 13.65 T:aes128otrpv2 14.70 14.71 14.72 T:twine80n6t4clocv3 15.62 15.62 15.64 T:twine80n6t4clocv2 17.29 17.30 17.33 T:aes128n12clocv1 17.48 17.51 17.54 T:aes128n8clocv1 17.61 17.63 17.67 T:aes256otrsv2 17.67 17.72 17.75 T:aes256otrsv1 17.78 17.88 18.00 T:aes256otrpv2 17.85 17.89 17.93 T:aes256otrpv1 29.30 29.32 29.36 T:ketjesrv1 29.54 29.56 29.59 T:aeadaes128ocbtaglen64v1 29.54 29.57 29.58 T:aeadaes128ocbtaglen96v1 29.70 29.72 29.74 T:proest256otrv1 30.59 30.62 30.65 T:ketjesrv2 35.04 35.07 35.11 T:aeadaes192ocbtaglen96v1 35.04 35.10 35.15 T:aeadaes192ocbtaglen64v1 40.67 40.70 40.74 T:aeadaes256ocbtaglen64v1 40.69 40.72 40.74 T:aeadaes256ocbtaglen96v1 49.89 49.92 49.95 T:colm127v1 53.33 53.35 53.39 T:proest128otrv1 54.45 54.50 54.53 T:ketjejrv1 71.83 71.86 71.91 T:present80n6t4silcv3 91.98 92.01 92.09 T:ketjejrv2 94.96 95.14 95.19 T:deoxysneq128128v13 103.29 103.49 103.86 T:aezv1 125.74 125.77 125.82 T:led80n6t4silcv3 127.35 127.39 127.43 T:deoxyseq128128v13 132.12 132.30 132.86 T:deoxysneq256128v13 169.06 169.10 169.14 T:deoxyseq256128v13 377.68 379.79 379.93 T:acorn128 3040.85 3040.96 3044.18 T:led80n6silcv1 3049.54 3049.66 3049.73 T:led80n6t4silcv2 3225.93 3226.05 3226.28 T:present80n6t4silcv2 3225.98 3226.24 3226.40 T:present80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.32 0.32 0.32 T:aezv5 0.32 0.32 0.33 T:aezv4 0.31 0.32 0.32 T:aegis128l 0.32 0.32 0.34 T:aezv3 0.33 0.33 0.33 aegis128l 0.36 0.36 0.37 T:tiaoxinv1 0.36 0.36 0.37 T:tiaoxinv2 0.48 0.48 0.48 T:aegis256 0.49 0.49 0.49 T:aegis128 0.52 0.53 0.53 aegis256 0.75 0.75 0.77 T:aeadaes128ocbtaglen128v1 0.78 0.78 0.78 T:aes128otrpv3 0.79 0.79 0.79 T:morus1280128v1 0.78 0.79 0.79 T:morus1280256v1 0.79 0.80 0.80 T:morus1280256v2 0.80 0.80 0.81 T:morus1280128v2 0.87 0.87 0.88 T:aes128otrcv3 0.88 0.89 0.89 T:aes128gcmv1 0.89 0.90 0.90 T:aeadaes192ocbtaglen128v1 1.05 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.07 1.07 1.07 T:aes256otrpv3 1.10 1.10 1.11 aes256gcmv1 1.17 1.18 1.18 T:morus640128v1 1.18 1.18 1.18 T:aes256otrcv3 1.20 1.21 1.21 T:morus640128v2 1.25 1.26 1.26 T:deoxysi128v141 1.26 1.26 1.26 T:deoxysneq128128v1 1.33 1.34 1.38 T:colm0v1 1.36 1.36 1.36 T:deoxysneq256128v1 1.43 1.43 1.45 T:deoxysi256v141 1.56 1.56 1.57 T:deoxysii128v141 1.80 1.80 1.81 T:deoxysii256v141 1.84 1.84 1.84 T:aes128otrsv3 1.91 1.91 1.92 T:deoxyseq128128v1 2.04 2.04 2.05 T:deoxyseq256128v1 2.27 2.28 2.29 T:norx6444v3 2.44 2.45 2.47 T:norx6441v3 2.47 2.48 2.49 T:norx6441v2 2.49 2.49 2.49 T:aes256otrsv3 2.81 2.81 2.82 T:aes128n8t8clocv2 2.82 2.82 2.82 T:aes128n12t8clocv2 2.82 2.82 2.83 T:aes128n12t8clocv3 2.82 2.84 2.85 T:aes128n12t8silcv2 2.83 2.84 2.86 T:aes128n12t8silcv3 2.84 2.84 2.86 T:aes128n8t8silcv2 2.87 2.87 2.89 T:norx6441v1 3.45 3.46 3.47 T:seakeyakv2 3.75 3.76 3.78 T:norx6461v3 3.78 3.80 3.80 T:norx6461v2 4.21 4.22 4.24 T:norx3241v2 4.23 4.26 4.29 T:norx3241v3 4.29 4.31 4.34 T:norx6461v1 4.34 4.35 4.36 T:lakekeyakv2 4.62 4.62 4.63 T:lakekeyakv1 4.63 4.65 4.68 T:oceankeyakv2 4.94 4.96 4.97 T:norx3241v1 5.05 5.07 5.08 T:norx6444v2 6.00 6.02 6.03 T:norx6444v1 6.03 6.03 6.04 T:aesjambuv1 6.40 6.41 6.43 T:norx3261v3 6.42 6.44 6.44 T:norx3261v2 7.56 7.57 7.57 T:norx3261v1 7.55 7.57 7.61 T:ascon128av11 7.57 7.58 7.62 ascon128av12 7.62 7.64 7.66 T:riverkeyakv2 7.63 7.65 7.67 T:ascon96v1 7.90 7.91 7.94 T:lunarkeyakv2 8.24 8.25 8.27 T:acorn128v2 8.32 8.37 8.41 T:ketjemajorv2 8.46 8.47 8.48 T:acorn128v3 10.12 10.16 10.20 T:ketjeminorv2 10.94 10.96 10.97 T:ascon128v1 10.95 10.96 10.97 T:ascon128v11 11.09 11.10 11.11 ascon128v12 13.43 13.45 13.46 T:aes128otrsv2 13.55 13.58 13.69 T:aes128otrpv1 13.60 13.61 13.63 T:aes128otrsv1 13.64 13.65 13.67 T:aes128otrpv2 14.71 14.72 14.73 T:twine80n6t4clocv3 15.61 15.62 15.63 T:twine80n6t4clocv2 17.28 17.30 17.32 T:aes128n12clocv1 17.49 17.49 17.51 T:aes128n8clocv1 17.63 17.65 17.67 T:aes256otrsv2 17.72 17.75 17.75 T:aes256otrsv1 17.83 17.87 17.93 T:aes256otrpv2 17.86 17.89 18.00 T:aes256otrpv1 29.33 29.35 29.37 T:ketjesrv1 29.54 29.55 29.58 T:aeadaes128ocbtaglen64v1 29.54 29.56 29.58 T:aeadaes128ocbtaglen96v1 29.69 29.71 29.73 T:proest256otrv1 30.62 30.65 30.68 T:ketjesrv2 35.04 35.08 35.12 T:aeadaes192ocbtaglen64v1 35.06 35.10 35.12 T:aeadaes192ocbtaglen96v1 40.66 40.68 40.73 T:aeadaes256ocbtaglen64v1 40.69 40.72 40.74 T:aeadaes256ocbtaglen96v1 49.87 49.90 49.96 T:colm127v1 53.33 53.36 53.39 T:proest128otrv1 54.53 54.56 54.71 T:ketjejrv1 71.84 71.90 71.94 T:present80n6t4silcv3 92.00 92.03 92.05 T:ketjejrv2 95.20 95.24 95.28 T:deoxysneq128128v13 103.06 103.22 103.73 T:aezv1 125.70 125.75 125.82 T:led80n6t4silcv3 127.36 127.39 127.45 T:deoxyseq128128v13 131.85 132.42 132.85 T:deoxysneq256128v13 169.06 169.13 169.25 T:deoxyseq256128v13 377.87 379.78 379.96 T:acorn128 3040.78 3040.91 3044.30 T:led80n6silcv1 3049.55 3049.65 3049.73 T:led80n6t4silcv2 3226.08 3226.13 3226.47 T:present80n6silcv1 3225.91 3226.15 3226.29 T:present80n6t4silcv2

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 1.76 1.79 1.85 T:aegis128 1.77? 1.79? 2.17? T:aegis128l 1.80 1.80 1.95 aegis128l 2.05 2.14 2.18 T:aegis256 2.24 2.31 2.45 T:aezv5 2.30 2.33 2.35 aegis256 2.32 2.34 2.50 T:aezv3 2.37 2.38 2.46 T:tiaoxinv1 2.36 2.39 2.55 T:tiaoxinv2 2.35? 2.41? 2.64? T:aezv4 3.25 3.28 3.54 T:aeadaes128ocbtaglen128v1 3.51 3.53 3.55 T:aes128otrpv3 3.99 4.01 4.16 T:deoxysneq128128v1 4.18 4.19 4.21 T:aes128otrsv3 4.26 4.27 4.41 T:morus640128v1 4.38 4.41 4.57 T:morus1280128v1 4.38 4.44 4.59 T:morus1280256v1 4.41? 4.46? 4.92? T:colm0v1 4.48 4.48 4.72 T:aeadaes256ocbtaglen128v1 4.48 4.58 4.71 T:morus640128v2 4.64 4.66 4.69 T:aes256otrpv3 4.66 4.68 4.99 T:morus1280256v2 4.30? 4.69? 9.57? T:aeadaes192ocbtaglen128v1 4.67 4.71 4.99 T:morus1280128v2 4.73 4.78 4.86 T:deoxysi128v141 4.76 4.79 5.12 T:deoxysneq256128v1 4.80 4.82 4.84 T:aes128n8t8clocv2 4.80 4.84 5.01 T:aes128n12t8clocv2 4.80 4.84 4.88 T:aes128otrcv3 4.86 5.02 5.06 T:aes128n12t8clocv3 5.52 5.54 5.62 T:aes256otrsv3 5.68 5.69 5.70 T:aes128n12t8silcv2 5.68 5.69 5.71 T:aes128n12t8silcv3 5.68 5.70 5.73 T:aes128n8t8silcv2 5.76 5.80 6.01 T:deoxysi256v141 5.91 5.95 6.00 T:aes128gcmv1 6.18 6.26 6.35 T:aes256otrcv3 6.55 6.60 6.67 T:deoxyseq128128v1 7.79 7.82 7.88 T:deoxyseq256128v1 7.95 7.99 8.22 aes256gcmv1 8.38 8.43 8.94 T:deoxysii128v141 8.37 8.50 8.60 T:norx6441v3 8.45 8.55 8.65 T:norx6441v1 8.50 8.67 8.73 T:norx6441v2 9.33 9.34 9.38 T:aesjambuv1 9.89 9.92 10.19 T:deoxysii256v141 10.62 10.73 10.83 T:norx3241v1 10.66 10.73 10.91 T:norx3241v2 10.80 10.98 11.11 T:norx3241v3 11.46 11.58 11.75 T:ascon128av11 11.59 11.66 11.74 T:ascon96v1 12.14 12.30 12.70 ascon128av12 12.45 12.51 12.65 T:norx6461v3 12.36 12.55 12.58 T:norx6461v1 12.50 12.62 12.80 T:norx6461v2 14.72 14.96 15.54 T:norx6444v3 14.96 15.16 15.41 T:ascon128v11 14.96 15.26 15.66 ascon128v12 14.96 15.27 15.38 T:ascon128v1 15.23 15.46 15.81 T:lakekeyakv1 15.98 16.11 16.27 T:norx3261v2 16.09 16.16 16.23 T:norx3261v3 16.17 16.22 16.43 T:norx3261v1 17.78 17.98 18.10 T:riverkeyakv2 18.84 19.08 19.35 T:lakekeyakv2 21.68 21.77 21.92 T:aes128n12clocv1 21.81 21.91 22.21 T:aes128n8clocv1 21.86 21.92 22.02 T:aes128otrsv2 21.87 21.96 22.37 T:twine80n6t4clocv3 21.90 22.09 22.27 T:aes128otrsv1 22.40 22.55 22.76 T:aes128otrpv1 22.56 22.61 22.95 T:aes128otrpv2 22.70 22.73 22.80 T:twine80n6t4clocv2 28.33 28.47 28.54 T:aes256otrsv2 28.41 28.60 28.78 T:aes256otrsv1 28.70 28.88 29.08 T:aes256otrpv1 29.35 29.52 29.69 T:aes256otrpv2 31.30 31.48 31.65 T:seakeyakv2 31.54 31.73 32.84 T:acorn128v3 31.68 31.91 32.26 T:acorn128v2 36.18 36.48 36.68 T:norx6444v2 36.80 37.14 37.27 T:ketjeminorv2 39.90 39.95 40.24 T:aeadaes128ocbtaglen64v1 39.99 40.05 40.07 T:aeadaes128ocbtaglen96v1 42.39 42.52 42.74 T:norx6444v1 45.81 46.07 46.17 T:ketjesrv1 46.20 46.24 46.33 T:aeadaes192ocbtaglen64v1 46.22 46.28 46.54 T:aeadaes192ocbtaglen96v1 51.02 51.32 52.20 T:oceankeyakv2 52.92 53.34 53.65 T:ketjesrv2 53.62 53.72 54.05 T:aeadaes256ocbtaglen96v1 53.73 53.91 54.69 T:aeadaes256ocbtaglen64v1 53.70 54.02 54.43 T:ketjemajorv2 59.87 59.99 60.34 T:colm127v1 71.87 72.19 72.75 T:ketjejrv1 84.98 85.17 85.30 T:proest256otrv1 89.70 89.95 90.14 T:present80n6t4silcv3 92.09 92.28 92.95 T:deoxysneq128128v13 102.95 103.16 103.26 T:proest128otrv1 119.10 119.59 120.88 T:aezv1 122.22 122.53 123.20 T:ketjejrv2 127.70 128.40 128.91 T:deoxysneq256128v13 128.11 128.48 129.43 T:lunarkeyakv2 149.55 149.80 149.90 T:led80n6t4silcv3 158.90 159.08 159.36 T:deoxyseq128128v13 211.05 211.23 211.60 T:deoxyseq256128v13 1270.31 1278.12 1280.47 T:acorn128 3405.66 3406.84 3408.03 T:led80n6silcv1 3415.01 3415.47 3416.35 T:led80n6t4silcv2 3613.97 3614.38 3615.03 T:present80n6t4silcv2 3616.57 3617.07 3617.66 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 1.77? 1.79? 2.01? T:aegis128l 1.86 1.88 1.91 T:aegis128 1.95 1.95 1.98 aegis128l 2.09 2.11 2.27 T:aegis256 2.30? 2.34? 2.67? T:aezv5 2.35? 2.35? 2.83? T:tiaoxinv1 2.35 2.38 2.55 T:tiaoxinv2 2.34? 2.38? 2.66? T:aezv4 2.35 2.38 2.50 T:aezv3 2.40 2.41 2.42 aegis256 3.60 3.63 3.66 T:aes128otrpv3 3.59 3.70 3.98 T:aeadaes128ocbtaglen128v1 4.20 4.26 4.48 T:morus640128v1 4.54 4.55 4.57 T:aes128otrsv3 4.54 4.59 4.74 T:morus1280128v1 4.60 4.63 4.70 T:morus1280256v1 4.73? 4.76? 7.57? T:aeadaes192ocbtaglen128v1 4.77 4.79 5.00 T:aeadaes256ocbtaglen128v1 4.80 4.82 4.86 T:aes256otrpv3 4.86 4.87 4.93 T:aes128n8t8clocv2 4.89 4.92 5.14 T:morus1280256v2 4.82 4.94 5.27 T:morus1280128v2 4.88 4.95 5.05 T:morus640128v2 4.88 5.01 5.09 T:aes128n12t8clocv2 5.01 5.03 5.06 T:aes128otrcv3 4.89 5.05 5.09 T:aes128n12t8clocv3 5.20 5.23 5.58 T:colm0v1 5.76 5.77 5.79 T:aes128n8t8silcv2 5.74 5.77 5.80 T:aes128n12t8silcv3 5.77 5.77 5.78 T:aes128n12t8silcv2 5.91 5.92 6.08 T:deoxysneq128128v1 5.91 5.93 5.95 T:aes256otrsv3 5.98 6.01 6.08 T:deoxysneq256128v1 5.99 6.04 6.15 T:aes128gcmv1 6.54 6.62 6.70 T:aes256otrcv3 7.02 7.12 7.28 T:deoxysi128v141 7.55 7.64 7.68 T:deoxysi256v141 8.15 8.19 8.24 aes256gcmv1 8.58 8.64 8.73 T:norx6441v3 8.73 8.79 8.84 T:norx6441v1 8.81 8.95 9.34 T:norx6441v2 9.16 9.20 9.31 T:deoxyseq128128v1 9.33 9.38 9.42 T:deoxysii128v141 9.34 9.38 9.45 T:deoxyseq256128v1 9.55 9.57 9.59 T:aesjambuv1 10.81 10.89 10.94 T:norx3241v1 10.87 10.93 10.98 T:norx3241v3 10.89 10.96 11.02 T:norx3241v2 11.38 11.44 11.68 T:deoxysii256v141 11.55 11.70 11.91 T:ascon96v1 11.76 11.84 12.02 T:ascon128av11 12.01 12.30 12.83 ascon128av12 12.61 12.76 12.97 T:norx6461v2 12.70 12.80 12.93 T:norx6461v3 12.71 12.88 12.93 T:norx6461v1 14.75 14.84 15.10 T:norx6444v3 14.95 15.12 15.35 T:ascon128v1 15.05 15.20 15.58 T:ascon128v11 15.09 15.33 15.59 ascon128v12 15.31 15.66 15.91 T:lakekeyakv1 16.05 16.12 16.33 T:norx3261v2 16.26 16.28 16.34 T:norx3261v3 16.34 16.37 16.53 T:norx3261v1 17.79 17.86 18.10 T:riverkeyakv2 18.77 18.81 18.96 T:lakekeyakv2 21.47 21.58 21.68 T:aes128n12clocv1 21.56 21.63 21.70 T:aes128n8clocv1 21.87 21.90 22.34 T:twine80n6t4clocv3 22.43 22.52 22.72 T:aes128otrsv2 22.51 22.58 22.86 T:aes128otrsv1 22.77 22.80 23.14 T:twine80n6t4clocv2 22.88 22.97 23.07 T:aes128otrpv1 23.22 23.34 23.73 T:aes128otrpv2 29.08 29.17 29.48 T:aes256otrsv1 29.05 29.30 29.41 T:aes256otrsv2 29.48 29.72 30.25 T:aes256otrpv1 30.05 30.32 30.45 T:aes256otrpv2 31.41 31.50 32.09 T:seakeyakv2 32.11 32.18 32.24 T:acorn128v3 32.15 32.26 32.38 T:acorn128v2 36.05 36.28 36.58 T:norx6444v2 36.34 36.66 36.98 T:ketjeminorv2 42.77 43.05 43.20 T:norx6444v1 46.19 46.55 46.73 T:ketjesrv1 47.87 47.99 48.20 T:aeadaes128ocbtaglen64v1 48.00 48.05 48.27 T:aeadaes128ocbtaglen96v1 51.27 51.63 52.56 T:oceankeyakv2 52.19 52.65 53.05 T:ketjemajorv2 53.14 53.57 53.87 T:ketjesrv2 55.53 55.64 55.77 T:aeadaes192ocbtaglen64v1 55.49 55.81 56.06 T:aeadaes192ocbtaglen96v1 64.84 64.98 65.28 T:aeadaes256ocbtaglen64v1 64.79 65.05 65.21 T:aeadaes256ocbtaglen96v1 69.02 69.36 69.78 T:colm127v1 72.20 72.41 72.71 T:ketjejrv1 85.78 85.91 86.38 T:proest256otrv1 89.80 89.94 90.25 T:present80n6t4silcv3 104.12 105.66 106.29 T:proest128otrv1 105.74 106.09 106.44 T:deoxysneq128128v13 123.30 123.73 124.41 T:aezv1 123.34 123.76 124.27 T:ketjejrv2 128.04 128.61 129.14 T:lunarkeyakv2 146.99 147.81 148.31 T:deoxysneq256128v13 150.03 150.21 150.54 T:led80n6t4silcv3 159.35 159.62 160.36 T:deoxyseq128128v13 211.98 212.13 212.84 T:deoxyseq256128v13 1301.16 1305.98 1306.77 T:acorn128 3406.01 3407.30 3410.62 T:led80n6silcv1 3415.20 3415.44 3415.79 T:led80n6t4silcv2 3613.59 3614.02 3614.82 T:present80n6t4silcv2 3616.69 3617.16 3618.55 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 1.78 1.79 1.85 T:aegis128l 1.84 1.88 1.99 T:aegis128 1.98 1.98 1.99 aegis128l 2.00 2.04 2.19 T:aezv5 2.02 2.05 2.18 T:aezv3 2.03 2.05 2.15 T:aezv4 2.09 2.11 2.22 T:aegis256 2.36 2.37 2.55 T:tiaoxinv2 2.37 2.38 2.59 T:tiaoxinv1 2.38 2.39 2.41 aegis256 3.57 3.60 3.64 T:aeadaes128ocbtaglen128v1 3.59 3.61 3.62 T:aes128otrpv3 4.25 4.29 4.34 T:morus640128v1 4.55 4.55 4.58 T:aes128otrsv3 4.55 4.56 4.57 T:morus1280128v1 4.54 4.61 4.64 T:morus1280256v1 4.72? 4.77? 10.08? T:aeadaes192ocbtaglen128v1 4.78 4.79 4.80 T:aeadaes256ocbtaglen128v1 4.78 4.81 5.22 T:aes128n12t8clocv2 4.80 4.82 4.84 T:aes256otrpv3 4.82 4.84 4.87 T:morus1280128v2 4.81 4.87 4.88 T:aes128n8t8clocv2 4.84 4.88 4.91 T:morus1280256v2 4.85 4.93 5.00 T:morus640128v2 4.98 5.03 5.23 T:aes128n12t8clocv3 5.02 5.03 5.05 T:aes128otrcv3 5.27 5.34 5.59 T:colm0v1 5.67 5.70 6.04 T:aes128n8t8silcv2 5.69 5.70 6.03 T:aes128n12t8silcv2 5.70 5.70 5.73 T:aes128n12t8silcv3 5.87 5.91 6.08 T:deoxysneq256128v1 5.81 5.91 6.12 T:deoxysneq128128v1 5.91 5.94 5.95 T:aes256otrsv3 5.97 6.00 6.07 T:aes128gcmv1 6.52 6.55 6.64 T:aes256otrcv3 7.05 7.16 7.21 T:deoxysi128v141 7.54 7.57 7.62 T:deoxysi256v141 8.14 8.16 8.20 aes256gcmv1 8.59 8.62 8.68 T:norx6441v3 8.73 8.84 8.89 T:norx6441v2 8.78 8.86 8.97 T:norx6441v1 9.16 9.19 9.35 T:deoxyseq128128v1 9.31 9.34 9.40 T:deoxysii128v141 9.32 9.36 9.46 T:deoxyseq256128v1 9.55 9.55 9.58 T:aesjambuv1 10.78 10.82 10.88 T:norx3241v1 10.76 10.90 10.96 T:norx3241v3 10.91 10.97 11.02 T:norx3241v2 11.40 11.45 11.50 T:deoxysii256v141 11.51 11.63 11.77 T:ascon96v1 11.62 11.72 11.82 T:ascon128av11 11.91 12.00 12.20 ascon128av12 12.61 12.62 12.68 T:norx6461v3 12.64 12.72 12.85 T:norx6461v2 12.79 12.88 12.96 T:norx6461v1 14.80 14.89 15.02 T:norx6444v3 14.92 15.04 15.16 T:ascon128v11 14.84 15.11 15.16 T:ascon128v1 15.02 15.11 15.25 ascon128v12 15.34 15.43 15.79 T:lakekeyakv1 16.07 16.07 16.20 T:norx3261v2 16.10 16.19 16.32 T:norx3261v3 16.34 16.36 16.45 T:norx3261v1 17.85 18.16 18.35 T:riverkeyakv2 18.88 19.11 19.25 T:lakekeyakv2 21.45 21.70 21.81 T:aes128n12clocv1 21.61 21.70 21.81 T:aes128n8clocv1 21.82 21.87 22.09 T:twine80n6t4clocv3 22.65 22.77 23.01 T:aes128otrsv2 22.70 22.77 22.84 T:twine80n6t4clocv2 22.59 22.98 23.16 T:aes128otrsv1 22.98 23.02 23.18 T:aes128otrpv1 23.37 23.48 23.64 T:aes128otrpv2 29.02 29.13 29.39 T:aes256otrsv2 29.16 29.30 29.55 T:aes256otrsv1 29.66 30.03 30.46 T:aes256otrpv1 30.06 30.21 30.43 T:aes256otrpv2 31.52 31.73 31.77 T:seakeyakv2 32.06 32.15 32.27 T:acorn128v3 32.16 32.27 32.45 T:acorn128v2 36.10 36.15 36.25 T:norx6444v2 36.46 36.88 37.23 T:ketjeminorv2 42.64 42.75 42.86 T:norx6444v1 46.26 46.43 46.59 T:ketjesrv1 47.83 47.94 48.03 T:aeadaes128ocbtaglen64v1 47.92 48.08 48.20 T:aeadaes128ocbtaglen96v1 51.34 51.56 51.95 T:oceankeyakv2 53.19 53.44 53.76 T:ketjesrv2 53.87 54.46 54.77 T:ketjemajorv2 55.45 55.56 55.63 T:aeadaes192ocbtaglen64v1 55.59 55.67 55.77 T:aeadaes192ocbtaglen96v1 64.79 64.88 64.96 T:aeadaes256ocbtaglen64v1 64.84 64.95 65.03 T:aeadaes256ocbtaglen96v1 68.85 69.05 69.34 T:colm127v1 73.27 73.59 73.90 T:ketjejrv1 84.21 84.28 84.41 T:proest256otrv1 89.77 89.97 90.05 T:present80n6t4silcv3 104.04 104.44 104.69 T:proest128otrv1 106.55 106.87 107.22 T:deoxysneq128128v13 123.38 123.81 124.19 T:aezv1 124.12 124.52 124.95 T:ketjejrv2 128.56 128.77 128.92 T:lunarkeyakv2 147.34 147.78 148.36 T:deoxysneq256128v13 149.71 149.96 150.23 T:led80n6t4silcv3 160.13 160.37 160.55 T:deoxyseq128128v13 212.13 212.68 213.05 T:deoxyseq256128v13 1301.52 1305.86 1307.27 T:acorn128 3406.16 3406.92 3411.20 T:led80n6silcv1 3414.86 3415.18 3415.55 T:led80n6t4silcv2 3613.37 3614.16 3614.88 T:present80n6t4silcv2 3616.20 3616.82 3617.16 T:present80n6silcv1