VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20241011

[Page version: 20241013 18:38:25]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 0.23 0.25 0.25 T:tiaoxinv2 0.22? 0.25? 0.27? T:tiaoxinv1 0.28 0.28 0.29 aegis128l 0.51 0.52 0.52 aegis256 0.55 0.56 0.57 T:aegis128 0.65 0.66 0.66 T:morus1280128v2 0.65 0.66 0.67 T:morus1280128v1 0.65 0.66 0.67 T:morus1280256v2 0.65 0.66 0.67 T:morus1280256v1 0.47? 0.70? 0.73? T:aeadaes128ocbtaglen128v1 0.69 0.71 0.72 T:aezv4 0.72 0.72 0.72 T:aes128otrcv3 0.72 0.72 0.73 T:aezv3 0.72 0.73 0.73 T:aes128otrpv3 0.73 0.73 0.74 T:aes128otrsv3 0.76 0.77 0.78 T:aezv5 0.43? 0.78? 0.82? T:aeadaes192ocbtaglen128v1 0.93 0.94 0.94 T:aes256otrsv3 0.94 0.94 0.94 T:aes256otrcv3 0.93 0.94 0.96 T:deoxysi128v141 0.95 0.97 0.97 T:aes256otrpv3 0.93? 1.07? 1.15? T:aeadaes256ocbtaglen128v1 1.02 1.07 1.11 T:aes128gcmv1 1.07 1.07 1.08 T:morus640128v1 1.06 1.07 1.08 T:morus640128v2 1.06 1.08 1.10 T:deoxysi256v141 1.23 1.24 1.29 T:norx6444v3 1.26 1.32 1.36 T:aes256gcmv1 1.32 1.33 1.34 T:deoxysneq128128v1 1.51 1.53 1.55 T:deoxysneq256128v1 1.87 1.94 1.96 T:deoxysii128v141 2.13 2.15 2.17 T:norx6441v2 2.14 2.16 2.19 T:norx6441v3 2.14 2.19 2.21 T:deoxysii256v141 2.20 2.26 2.32 T:lunarkeyakv2 2.33 2.35 2.42 T:colm0v1 2.35 2.37 2.38 T:deoxyseq128128v1 2.55 2.56 2.57 T:deoxyseq256128v1 2.57 2.58 2.60 T:norx6441v1 2.88 2.93 2.95 T:seakeyakv2 3.03 3.10 3.13 T:oceankeyakv2 3.24 3.25 3.26 T:norx6461v3 3.24 3.25 3.27 T:norx6461v2 3.43? 3.77? 4.59? T:norx6444v2 3.86 3.88 3.89 T:norx3241v2 3.86 3.88 3.90 T:norx3241v3 3.90 3.91 3.92 T:norx6461v1 4.06 4.08 4.09 T:norx6444v1 4.13 4.17 4.19 T:lakekeyakv1 4.46 4.51 4.54 T:lakekeyakv2 4.56 4.56 4.56 T:aes128n8t8clocv2 4.56 4.56 4.56 T:aes128n12t8clocv2 4.56 4.56 4.56 T:aes128n12t8clocv3 4.56 4.56 4.57 T:aes128n12t8silcv3 4.56 4.56 4.57 T:aes128n12t8silcv2 4.56 4.57 4.57 T:aes128n8t8silcv2 4.66 4.69 4.71 T:norx3241v1 5.85 5.86 5.88 T:norx3261v3 5.90 5.91 5.92 T:norx3261v2 6.81 6.82 6.84 T:ascon128av11 6.82 6.84 6.85 T:ascon96v1 7.17 7.21 7.23 ascon128av12 7.45 7.46 7.48 T:norx3261v1 7.60 7.64 7.66 T:ketjemajorv2 9.12 9.14 9.14 T:aesjambuv1 9.37 9.38 9.41 T:ketjeminorv2 9.66 9.72 9.74 T:riverkeyakv2 10.17 10.22 10.27 T:ascon128v1 10.22 10.27 10.30 T:ascon128v11 10.57 10.61 10.62 ascon128v12 14.43 14.53 14.59 T:oceankeyakv1 15.60 15.61 15.63 T:twine80n6t4clocv2 15.74 15.77 15.81 T:aes128otrsv1 15.75 15.78 15.89 T:aes128otrsv2 15.76 15.79 15.82 T:aes128otrpv2 15.80 15.82 15.86 T:aes128otrpv1 16.07 16.11 16.13 T:twine80n6t4clocv3 17.48 17.63 17.93 T:seakeyakv1 19.69 19.72 19.78 T:aes256otrsv1 19.69 19.75 19.86 T:aes256otrpv2 19.75 19.80 19.83 T:aes256otrsv2 19.78 19.81 19.87 T:aes256otrpv1 24.20 24.29 24.43 T:proest256otrv1 24.77 24.82 24.87 T:aes128n8clocv1 25.04 25.11 25.15 T:aes128n12clocv1 26.68 26.83 26.91 T:aes128n12silcv1 26.85 26.88 26.93 T:aes128n8silcv1 32.88 33.63 33.80 T:riverkeyakv1 35.98 36.03 36.24 T:ketjesrv1 37.51 37.56 37.72 T:ketjesrv2 59.95 60.01 60.07 T:proest128otrv1 63.54 63.66 63.75 T:ketjejrv1 74.58 74.99 75.11 T:deoxysneq128128v13 75.65 75.68 75.73 T:present80n6t4silcv3 105.06 105.12 105.20 T:ketjejrv2 115.84 116.07 118.94 T:deoxysneq256128v13 130.79 130.84 130.88 T:led80n6t4silcv3 136.35 136.47 136.54 T:twine80n6clocv1 152.50 152.70 153.35 T:deoxyseq128128v13 197.15 197.42 199.99 T:aezv1 232.77 232.89 233.89 T:deoxyseq256128v13 290.19 290.33 290.62 aes256gcmv1 347.41 350.29 361.42 T:acorn128v3 297.43? 370.05? 699.60? T:acorn128v2 155.16? 371.01? 1334.66? T:acorn128 4515.14 4520.86 4526.37 T:present80n6silcv1 4489.10 4522.23 4966.46 T:present80n6t4silcv2 8284.35 8289.45 8293.96 T:led80n6t4silcv2 8286.69 8298.04 8303.27 T:led80n6silcv1

Cycles/byte for long+0 decrypt 25% 50% 75% aead 0.29 0.30 0.31 aegis128l 0.38 0.39 0.39 T:tiaoxinv1 0.38 0.39 0.40 T:tiaoxinv2 0.56 0.56 0.57 T:aegis128 0.59 0.60 0.60 aegis256 0.66 0.67 0.68 T:morus1280256v2 0.67 0.67 0.68 T:morus1280128v1 0.66 0.68 0.69 T:morus1280128v2 0.67 0.68 0.69 T:morus1280256v1 0.68 0.69 0.70 T:aezv4 0.70 0.70 0.70 T:aezv3 0.53? 0.71? 0.74? T:aeadaes128ocbtaglen128v1 0.74 0.75 0.75 T:aes128otrsv3 0.74 0.75 0.76 T:aes128otrpv3 0.74 0.75 0.77 T:aes128otrcv3 0.75 0.79 0.80 T:aezv5 0.65? 0.85? 0.86? T:aeadaes192ocbtaglen128v1 0.96 0.97 0.99 T:aes256otrsv3 0.96 0.97 0.97 T:aes256otrcv3 0.94? 1.03? 1.08? T:aes128gcmv1 1.01 1.03 1.04 T:aes256otrpv3 1.06 1.07 1.07 T:morus640128v1 1.06 1.07 1.08 T:morus640128v2 0.99? 1.08? 1.11? T:aeadaes256ocbtaglen128v1 1.23 1.24 1.25 T:norx6444v3 1.24 1.27 1.28 T:deoxysi128v141 1.13? 1.30? 1.37? T:aes256gcmv1 1.36 1.38 1.40 T:deoxysi256v141 1.53 1.54 1.55 T:deoxysneq256128v1 1.61 1.62 1.64 T:deoxysneq128128v1 1.86 1.89 1.92 T:deoxysii128v141 2.07 2.09 2.10 T:norx6441v2 2.08 2.10 2.11 T:norx6441v3 2.16 2.19 2.22 T:deoxysii256v141 2.26 2.28 2.31 T:colm0v1 2.24 2.33 2.37 T:lunarkeyakv2 2.52 2.53 2.54 T:norx6441v1 2.94 2.97 2.99 T:seakeyakv2 3.03 3.12 3.23 T:oceankeyakv2 3.16 3.18 3.21 T:norx6461v2 3.17 3.19 3.20 T:norx6461v3 3.18 3.19 3.20 T:deoxyseq128128v1 3.33 3.35 3.36 T:deoxyseq256128v1 3.41? 3.72? 4.49? T:norx6444v2 3.76 3.78 3.79 T:norx3241v2 3.76 3.80 3.82 T:norx3241v3 3.82 3.83 3.85 T:norx6461v1 3.98 4.00 4.03 T:norx6444v1 4.20 4.25 4.28 T:lakekeyakv1 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n8t8clocv2 4.48 4.50 4.50 T:aes128n8t8silcv2 4.51 4.55 4.57 T:lakekeyakv2 4.57 4.58 4.58 T:norx3241v1 5.81 5.83 5.84 T:norx3261v3 5.84 5.86 5.88 T:norx3261v2 7.08 7.10 7.11 T:ascon96v1 7.08 7.12 7.13 T:ascon128av11 7.14 7.15 7.18 ascon128av12 7.36 7.38 7.39 T:norx3261v1 8.16 8.22 8.27 T:ketjemajorv2 9.12 9.14 9.18 T:ketjeminorv2 9.43 9.43 9.44 T:aesjambuv1 10.01 10.05 10.10 T:riverkeyakv2 10.24 10.29 10.38 T:ascon128v11 10.30 10.38 10.43 T:ascon128v1 10.58 10.60 10.61 ascon128v12 14.63 14.68 14.77 T:oceankeyakv1 15.54 15.57 15.63 T:twine80n6t4clocv2 15.77 15.80 15.84 T:aes128otrsv1 15.75 15.81 15.83 T:aes128otrpv2 15.79 15.83 15.92 T:aes128otrpv1 15.81 15.84 15.94 T:aes128otrsv2 16.04 16.09 16.14 T:twine80n6t4clocv3 17.54 17.68 17.98 T:seakeyakv1 19.73 19.77 19.80 T:aes256otrsv1 19.72 19.77 19.82 T:aes256otrpv1 19.71 19.77 19.85 T:aes256otrpv2 19.74 19.77 19.80 T:aes256otrsv2 24.03 24.11 24.17 T:proest256otrv1 24.17 24.24 24.31 T:aes128n12clocv1 25.70 25.77 25.84 T:aes128n8clocv1 26.86 26.93 26.97 T:aes128n8silcv1 26.87 26.96 27.01 T:aes128n12silcv1 33.37 34.11 34.34 T:riverkeyakv1 36.14 36.37 36.57 T:ketjesrv2 36.57 36.64 36.91 T:ketjesrv1 59.82 59.91 59.94 T:proest128otrv1 64.21 64.28 64.37 T:ketjejrv1 76.39 76.43 76.45 T:present80n6t4silcv3 105.35 105.87 108.86 T:deoxysneq128128v13 106.93 107.25 107.45 T:ketjejrv2 131.62 131.68 131.73 T:led80n6t4silcv3 136.24 136.32 136.39 T:twine80n6clocv1 149.46 149.91 152.86 T:deoxysneq256128v13 152.38 152.66 153.41 T:deoxyseq128128v13 197.03 197.22 199.61 T:aezv1 232.69 232.86 233.94 T:deoxyseq256128v13 289.99 290.13 291.11 aes256gcmv1 342.90 345.25 355.59 T:acorn128v3 144.43? 363.14? 1349.39? T:acorn128 299.95? 373.42? 684.12? T:acorn128v2 4512.59 4513.98 4519.51 T:present80n6silcv1 4513.72 4514.76 4524.10 T:present80n6t4silcv2 8277.12 8293.24 8296.69 T:led80n6t4silcv2 8297.36 8302.58 8309.08 T:led80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 0.27 0.27 0.28 T:aezv4 0.27 0.28 0.28 T:aezv3 0.29 0.30 0.30 aegis128l 0.29 0.31 0.32 T:aezv5 0.39 0.39 0.41 T:tiaoxinv1 0.39 0.40 0.40 T:tiaoxinv2 0.56 0.57 0.57 T:aegis128 0.59 0.59 0.60 aegis256 0.66 0.67 0.68 T:morus1280256v2 0.67 0.68 0.69 T:morus1280128v2 0.67 0.68 0.68 T:morus1280128v1 0.67 0.68 0.69 T:morus1280256v1 0.62? 0.72? 0.74? T:aeadaes128ocbtaglen128v1 0.74 0.75 0.75 T:aes128otrsv3 0.74 0.75 0.75 T:aes128otrcv3 0.75 0.75 0.76 T:aes128otrpv3 0.73? 0.84? 1.21? T:aeadaes192ocbtaglen128v1 0.97 0.97 0.97 T:aes256otrsv3 0.97 0.97 0.97 T:aes256otrcv3 1.01 1.02 1.02 T:aes256otrpv3 0.95? 1.03? 1.09? T:aes128gcmv1 1.06 1.07 1.08 T:morus640128v2 1.07 1.08 1.09 T:morus640128v1 0.70? 1.09? 1.43? T:aeadaes256ocbtaglen128v1 1.22 1.24 1.25 T:norx6444v3 1.26 1.27 1.28 T:deoxysi128v141 1.16? 1.30? 1.34? T:aes256gcmv1 1.37 1.38 1.39 T:deoxysi256v141 1.52 1.54 1.56 T:deoxysneq256128v1 1.61 1.62 1.64 T:deoxysneq128128v1 1.87 1.90 1.92 T:deoxysii128v141 2.08 2.09 2.11 T:norx6441v2 2.08 2.09 2.11 T:norx6441v3 2.17 2.18 2.20 T:deoxysii256v141 2.27 2.28 2.30 T:colm0v1 2.27 2.35 2.37 T:lunarkeyakv2 2.52 2.53 2.54 T:norx6441v1 2.98 3.00 3.02 T:seakeyakv2 3.13 3.15 3.19 T:oceankeyakv2 3.16 3.17 3.18 T:norx6461v2 3.16 3.18 3.20 T:norx6461v3 3.18 3.19 3.21 T:deoxyseq128128v1 3.33 3.34 3.36 T:deoxyseq256128v1 3.43? 3.74? 4.52? T:norx6444v2 3.76 3.78 3.79 T:norx3241v2 3.78 3.80 3.81 T:norx3241v3 3.81 3.82 3.84 T:norx6461v1 4.00 4.03 4.04 T:norx6444v1 4.25 4.27 4.29 T:lakekeyakv1 4.48 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.48 4.50 4.50 T:aes128n12t8clocv2 4.49 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.53 4.56 4.58 T:lakekeyakv2 4.57 4.58 4.60 T:norx3241v1 5.81 5.83 5.84 T:norx3261v3 5.84 5.85 5.87 T:norx3261v2 7.08 7.09 7.12 T:ascon96v1 7.10 7.12 7.15 T:ascon128av11 7.12 7.16 7.18 ascon128av12 7.35 7.37 7.38 T:norx3261v1 8.20 8.25 8.28 T:ketjemajorv2 9.16 9.18 9.22 T:ketjeminorv2 9.43 9.44 9.44 T:aesjambuv1 10.09 10.15 10.17 T:riverkeyakv2 10.23 10.35 10.40 T:ascon128v1 10.37 10.45 10.48 T:ascon128v11 10.55 10.56 10.62 ascon128v12 14.65 14.74 14.80 T:oceankeyakv1 15.56 15.58 15.62 T:twine80n6t4clocv2 15.78 15.81 15.95 T:aes128otrpv1 15.83 15.86 15.89 T:aes128otrsv1 15.82 15.87 15.89 T:aes128otrpv2 15.84 15.88 15.94 T:aes128otrsv2 16.00 16.05 16.14 T:twine80n6t4clocv3 17.56 17.67 17.98 T:seakeyakv1 19.76 19.78 19.82 T:aes256otrsv2 19.73 19.79 19.86 T:aes256otrpv1 19.77 19.81 19.85 T:aes256otrsv1 19.74 19.82 19.90 T:aes256otrpv2 23.97 24.06 24.17 T:proest256otrv1 24.12 24.24 24.32 T:aes128n12clocv1 25.67 25.73 25.80 T:aes128n8clocv1 26.87 26.92 26.98 T:aes128n12silcv1 26.86 26.92 26.97 T:aes128n8silcv1 33.29 34.15 34.29 T:riverkeyakv1 36.20 36.57 36.61 T:ketjesrv2 36.62 36.66 36.92 T:ketjesrv1 59.84 59.92 60.01 T:proest128otrv1 64.16 64.26 64.55 T:ketjejrv1 76.39 76.42 76.46 T:present80n6t4silcv3 105.15 105.65 108.96 T:deoxysneq128128v13 106.81 107.15 107.47 T:ketjejrv2 131.63 131.68 131.74 T:led80n6t4silcv3 136.24 136.33 136.40 T:twine80n6clocv1 149.66 149.99 152.91 T:deoxysneq256128v13 152.43 152.61 153.40 T:deoxyseq128128v13 196.75 197.02 199.51 T:aezv1 232.76 233.05 233.98 T:deoxyseq256128v13 278.74 279.08 279.74 aes256gcmv1 342.92 345.29 355.86 T:acorn128v3 148.60? 363.18? 1349.75? T:acorn128 299.27? 373.93? 677.30? T:acorn128v2 4513.25 4513.83 4519.48 T:present80n6silcv1 4514.12 4515.40 4524.27 T:present80n6t4silcv2 8283.36 8288.49 8293.68 T:led80n6t4silcv2 8292.95 8296.51 8310.23 T:led80n6silcv1

Cycles/byte for long+long encrypt 25% 50% 75% aead 0.20 0.21 0.22 T:tiaoxinv1 0.20? 0.22? 0.23? T:tiaoxinv2 0.26 0.27 0.27 aegis128l 0.48 0.50 0.52 T:aezv4 0.50 0.51 0.52 aegis256 0.50 0.52 0.53 T:aezv3 0.53 0.54 0.55 T:aezv5 0.56 0.56 0.57 T:aegis128 0.63 0.64 0.64 T:morus1280256v2 0.63 0.64 0.65 T:morus1280128v1 0.64 0.64 0.65 T:morus1280256v1 0.64 0.64 0.64 T:morus1280128v2 0.61? 0.65? 0.72? T:aeadaes128ocbtaglen128v1 0.73 0.74 0.74 T:aes128otrcv3 0.73 0.75 0.78 T:aes128gcmv1 0.66? 0.77? 0.89? T:aeadaes192ocbtaglen128v1 0.82 0.82 0.83 T:aes128otrpv3 0.86 0.88 0.91 T:aes256gcmv1 0.91 0.94 0.95 T:deoxysi128v141 0.95 0.96 0.96 T:aes256otrcv3 1.01 1.02 1.03 T:morus640128v2 1.02 1.02 1.03 T:morus640128v1 0.85? 1.04? 1.24? T:aeadaes256ocbtaglen128v1 1.04 1.05 1.08 T:deoxysi256v141 1.07 1.07 1.08 T:aes256otrpv3 1.34 1.35 1.36 T:deoxysneq128128v1 1.40 1.42 1.43 T:deoxysii128v141 1.53 1.54 1.54 T:deoxysneq256128v1 1.60 1.63 1.64 T:deoxysii256v141 1.64 1.65 1.69 T:colm0v1 1.69 1.70 1.72 T:norx6444v3 1.76 1.77 1.78 T:deoxyseq128128v1 1.89 1.92 1.94 T:deoxyseq256128v1 2.13 2.15 2.16 T:norx6441v2 2.15 2.16 2.17 T:norx6441v3 2.46 2.47 2.49 T:seakeyakv2 2.58 2.59 2.60 T:norx6441v1 2.55 2.59 2.63 T:oceankeyakv2 2.61 2.62 2.62 T:aes128otrsv3 3.06 3.09 3.12 T:lunarkeyakv2 3.24 3.26 3.27 T:norx6461v3 3.26 3.27 3.29 T:norx6461v2 3.59 3.60 3.60 T:aes256otrsv3 3.54? 3.74? 4.13? T:norx6444v2 3.87 3.87 3.89 T:norx3241v2 3.87 3.89 3.90 T:norx3241v3 3.89 3.90 3.91 T:norx6461v1 3.92 3.94 3.96 T:lakekeyakv1 3.96 3.97 3.99 T:lakekeyakv2 4.04 4.05 4.06 T:norx6444v1 4.53 4.53 4.54 T:aes128n12t8clocv2 4.53 4.53 4.53 T:aes128n8t8clocv2 4.53 4.53 4.53 T:aes128n12t8silcv3 4.53 4.53 4.53 T:aes128n12t8silcv2 4.53 4.53 4.53 T:aes128n8t8silcv2 4.53 4.53 4.53 T:aes128n12t8clocv3 4.69 4.70 4.70 T:norx3241v1 5.85 5.86 5.87 T:norx3261v3 5.86 5.87 5.89 T:norx3261v2 6.53 6.55 6.56 T:ketjemajorv2 6.74 6.78 6.88 T:ascon128av11 6.77 6.80 6.82 T:ascon96v1 7.00 7.02 7.04 T:riverkeyakv2 7.16 7.17 7.19 ascon128av12 7.46 7.47 7.48 T:norx3261v1 8.32 8.35 8.39 T:ketjeminorv2 9.17 9.17 9.18 T:aesjambuv1 10.01 10.08 10.15 T:ascon128v1 10.07 10.13 10.17 T:ascon128v11 10.57 10.60 10.62 ascon128v12 14.14 14.17 14.19 T:aes128otrsv1 14.14 14.18 14.26 T:aes128otrsv2 14.37 14.40 14.44 T:oceankeyakv1 15.34 15.35 15.37 T:twine80n6t4clocv2 15.82 15.86 15.89 T:aes128otrpv1 15.81 15.86 15.96 T:aes128otrpv2 15.89 15.91 15.94 T:twine80n6t4clocv3 17.41 17.49 17.76 T:seakeyakv1 18.06 18.08 18.12 T:aes256otrsv1 18.12 18.16 18.19 T:aes256otrsv2 18.73 18.76 18.80 T:aes128n8clocv1 19.18 19.21 19.24 T:aes128n12clocv1 19.79 19.81 19.84 T:aes256otrpv1 19.77 19.81 19.84 T:aes256otrpv2 19.98 20.06 20.09 T:aes128n8silcv1 20.07 20.10 20.12 T:aes128n12silcv1 24.52 24.54 24.58 T:proest256otrv1 31.04 31.83 32.04 T:riverkeyakv1 32.89 32.92 33.01 T:ketjesrv1 34.33 34.39 34.54 T:ketjesrv2 59.97 60.00 60.03 T:proest128otrv1 60.16 60.31 60.42 T:ketjejrv1 75.26 75.32 75.37 T:deoxysneq128128v13 75.49 75.52 75.54 T:present80n6t4silcv3 102.07 102.17 102.55 T:twine80n6clocv1 102.66 103.74 106.19 T:ketjejrv2 114.01 114.14 114.67 T:deoxyseq128128v13 115.74 115.96 119.12 T:deoxysneq256128v13 130.35 130.52 131.67 T:aezv1 130.60 130.62 130.66 T:led80n6t4silcv3 174.26 174.41 175.12 T:deoxyseq256128v13 284.47 284.59 284.82 aes256gcmv1 344.12 345.77 356.21 T:acorn128v3 315.84? 364.43? 672.96? T:acorn128v2 233.78? 370.56? 1246.75? T:acorn128 3388.13 3390.53 3391.61 T:present80n6silcv1 3374.25 3391.86 3614.54 T:present80n6t4silcv2 6214.26 6216.60 6221.10 T:led80n6t4silcv2 6219.31 6222.49 6226.91 T:led80n6silcv1

Cycles/byte for long+long decrypt 25% 50% 75% aead 0.27 0.28 0.28 aegis128l 0.29 0.29 0.30 T:tiaoxinv1 0.28 0.29 0.29 T:tiaoxinv2 0.48 0.49 0.50 T:aezv4 0.50 0.51 0.52 T:aezv3 0.53 0.54 0.55 T:aezv5 0.55 0.55 0.55 aegis256 0.56 0.56 0.57 T:aegis128 0.64 0.64 0.65 T:morus1280256v2 0.64 0.64 0.65 T:morus1280128v2 0.64 0.64 0.65 T:morus1280128v1 0.64 0.65 0.65 T:morus1280256v1 0.62? 0.67? 0.69? T:aeadaes128ocbtaglen128v1 0.70 0.72 0.76 T:aes128gcmv1 0.75 0.75 0.75 T:aes128otrcv3 0.62? 0.80? 0.98? T:aeadaes192ocbtaglen128v1 0.84 0.85 0.86 T:aes128otrpv3 0.82 0.85 0.89 T:aes256gcmv1 0.97 0.97 0.98 T:aes256otrcv3 1.02 1.03 1.03 T:morus640128v2 1.02 1.03 1.04 T:morus640128v1 0.87? 1.05? 1.21? T:aeadaes256ocbtaglen128v1 1.09 1.10 1.11 T:deoxysi128v141 1.10 1.11 1.12 T:aes256otrpv3 1.20 1.22 1.23 T:deoxysi256v141 1.40 1.42 1.45 T:deoxysii128v141 1.47 1.49 1.49 T:deoxysneq128128v1 1.53 1.55 1.55 T:deoxysneq256128v1 1.59 1.62 1.64 T:deoxysii256v141 1.61 1.62 1.65 T:colm0v1 1.70 1.72 1.72 T:norx6444v3 2.11 2.12 2.13 T:norx6441v3 2.11 2.12 2.14 T:norx6441v2 2.18 2.19 2.20 T:deoxyseq128128v1 2.30 2.31 2.33 T:deoxyseq256128v1 2.49 2.50 2.53 T:seakeyakv2 2.56 2.57 2.57 T:norx6441v1 2.56 2.62 2.66 T:oceankeyakv2 2.62 2.62 2.63 T:aes128otrsv3 3.08 3.12 3.15 T:lunarkeyakv2 3.20 3.21 3.23 T:norx6461v3 3.22 3.22 3.24 T:norx6461v2 3.61 3.61 3.61 T:aes256otrsv3 3.54? 3.70? 4.08? T:norx6444v2 3.82 3.84 3.86 T:norx6461v1 3.84 3.85 3.86 T:norx3241v3 3.84 3.86 3.86 T:norx3241v2 3.98 3.99 4.01 T:lakekeyakv1 3.98 4.00 4.02 T:lakekeyakv2 4.00 4.01 4.02 T:norx6444v1 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.51 T:aes128n8t8clocv2 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.51 4.51 T:aes128n12t8clocv3 4.61 4.63 4.65 T:norx3241v1 5.83 5.85 5.86 T:norx3261v3 5.83 5.85 5.86 T:norx3261v2 6.89 6.91 6.96 T:ascon96v1 6.88 6.92 6.96 T:ketjemajorv2 6.89 6.92 6.94 T:ascon128av11 7.15 7.17 7.18 ascon128av12 7.17 7.19 7.22 T:riverkeyakv2 7.41 7.44 7.45 T:norx3261v1 8.19 8.21 8.24 T:ketjeminorv2 9.32 9.32 9.33 T:aesjambuv1 10.20 10.23 10.30 T:ascon128v11 10.13 10.25 10.28 T:ascon128v1 10.49 10.52 10.53 ascon128v12 14.17 14.19 14.21 T:aes128otrsv1 14.17 14.20 14.26 T:aes128otrsv2 14.46 14.50 14.55 T:oceankeyakv1 15.34 15.37 15.47 T:twine80n6t4clocv2 15.81 15.84 15.94 T:aes128otrpv2 15.83 15.87 15.93 T:aes128otrpv1 15.89 15.91 15.94 T:twine80n6t4clocv3 17.42 17.51 17.77 T:seakeyakv1 18.09 18.13 18.15 T:aes256otrsv2 18.12 18.15 18.16 T:aes256otrsv1 18.70 18.75 18.78 T:aes128n12clocv1 19.19 19.23 19.25 T:aes128n8clocv1 19.76 19.81 19.84 T:aes256otrpv1 19.77 19.81 19.87 T:aes256otrpv2 20.10 20.13 20.16 T:aes128n8silcv1 20.10 20.15 20.18 T:aes128n12silcv1 24.37 24.47 24.61 T:proest256otrv1 31.43 32.18 32.31 T:riverkeyakv1 33.21 33.25 33.41 T:ketjesrv1 33.76 33.81 33.95 T:ketjesrv2 59.93 59.98 60.02 T:proest128otrv1 60.61 60.69 60.86 T:ketjejrv1 75.84 75.88 75.90 T:present80n6t4silcv3 90.32 90.52 91.15 T:deoxysneq128128v13 102.09 102.16 102.37 T:twine80n6clocv1 103.13 103.24 103.32 T:ketjejrv2 113.46 114.10 115.09 T:deoxyseq128128v13 130.30 130.57 131.34 T:aezv1 131.03 131.07 131.09 T:led80n6t4silcv3 132.81 133.11 135.95 T:deoxysneq256128v13 174.23 174.35 175.56 T:deoxyseq256128v13 284.42 284.51 285.16 aes256gcmv1 342.06 343.71 353.40 T:acorn128v3 227.80? 366.63? 1254.20? T:acorn128 327.08? 367.45? 657.76? T:acorn128v2 3384.87 3385.42 3392.38 T:present80n6silcv1 3385.98 3386.79 3392.24 T:present80n6t4silcv2 6211.71 6218.37 6220.60 T:led80n6t4silcv2 6220.24 6223.47 6227.36 T:led80n6silcv1

Cycles/byte for long+long forgery 25% 50% 75% aead 0.28 0.28 0.28 aegis128l 0.27 0.28 0.29 T:aezv4 0.29 0.29 0.29 T:tiaoxinv2 0.29 0.29 0.30 T:tiaoxinv1 0.29 0.30 0.31 T:aezv3 0.30 0.31 0.33 T:aezv5 0.55 0.55 0.55 aegis256 0.56 0.56 0.57 T:aegis128 0.64 0.64 0.65 T:morus1280128v2 0.64 0.65 0.65 T:morus1280256v2 0.64 0.65 0.65 T:morus1280256v1 0.64 0.65 0.65 T:morus1280128v1 0.67 0.67 0.68 T:aeadaes128ocbtaglen128v1 0.70 0.72 0.75 T:aes128gcmv1 0.75 0.75 0.75 T:aes128otrcv3 0.79 0.80 0.81 T:aeadaes192ocbtaglen128v1 0.81 0.84 0.88 T:aes256gcmv1 0.84 0.84 0.85 T:aes128otrpv3 0.97 0.97 0.97 T:aes256otrcv3 1.03 1.03 1.04 T:morus640128v2 1.03 1.03 1.04 T:morus640128v1 1.04 1.05 1.06 T:aeadaes256ocbtaglen128v1 1.08 1.10 1.11 T:deoxysi128v141 1.10 1.10 1.11 T:aes256otrpv3 1.21 1.21 1.22 T:deoxysi256v141 1.41 1.42 1.43 T:deoxysii128v141 1.48 1.48 1.49 T:deoxysneq128128v1 1.54 1.54 1.56 T:deoxysneq256128v1 1.59 1.61 1.64 T:deoxysii256v141 1.61 1.62 1.63 T:colm0v1 1.70 1.71 1.72 T:norx6444v3 2.11 2.12 2.12 T:norx6441v3 2.11 2.13 2.13 T:norx6441v2 2.17 2.19 2.20 T:deoxyseq128128v1 2.31 2.32 2.33 T:deoxyseq256128v1 2.50 2.51 2.53 T:seakeyakv2 2.55 2.56 2.57 T:norx6441v1 2.61 2.62 2.63 T:oceankeyakv2 2.62 2.62 2.62 T:aes128otrsv3 3.09 3.12 3.16 T:lunarkeyakv2 3.20 3.21 3.22 T:norx6461v3 3.21 3.22 3.24 T:norx6461v2 3.61 3.61 3.61 T:aes256otrsv3 3.55? 3.71? 4.08? T:norx6444v2 3.83 3.84 3.85 T:norx6461v1 3.84 3.85 3.86 T:norx3241v3 3.84 3.85 3.86 T:norx3241v2 3.99 4.00 4.02 T:lakekeyakv1 4.00 4.02 4.04 T:lakekeyakv2 4.01 4.02 4.03 T:norx6444v1 4.49 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.49 4.51 4.51 T:aes128n12t8clocv2 4.50 4.51 4.51 T:aes128n8t8clocv2 4.50 4.51 4.51 T:aes128n12t8clocv3 4.62 4.63 4.64 T:norx3241v1 5.82 5.83 5.84 T:norx3261v3 5.83 5.84 5.85 T:norx3261v2 6.89 6.90 6.93 T:ascon128av11 6.92 6.94 6.99 T:ketjemajorv2 6.92 6.95 6.97 T:ascon96v1 7.15 7.17 7.19 ascon128av12 7.19 7.20 7.22 T:riverkeyakv2 7.41 7.42 7.43 T:norx3261v1 8.21 8.23 8.26 T:ketjeminorv2 9.32 9.32 9.33 T:aesjambuv1 10.08 10.13 10.24 T:ascon128v1 10.17 10.22 10.27 T:ascon128v11 10.52 10.54 10.56 ascon128v12 14.18 14.19 14.31 T:aes128otrsv2 14.18 14.20 14.22 T:aes128otrsv1 14.46 14.51 14.57 T:oceankeyakv1 15.33 15.35 15.47 T:twine80n6t4clocv2 15.83 15.86 15.96 T:aes128otrpv2 15.84 15.88 15.93 T:aes128otrpv1 15.88 15.91 15.93 T:twine80n6t4clocv3 17.43 17.53 17.79 T:seakeyakv1 18.12 18.14 18.15 T:aes256otrsv1 18.11 18.14 18.19 T:aes256otrsv2 18.72 18.76 18.79 T:aes128n12clocv1 19.18 19.21 19.25 T:aes128n8clocv1 19.77 19.81 19.86 T:aes256otrpv1 19.79 19.84 19.89 T:aes256otrpv2 20.10 20.12 20.14 T:aes128n8silcv1 20.10 20.14 20.18 T:aes128n12silcv1 24.39 24.49 24.56 T:proest256otrv1 31.36 32.18 32.34 T:riverkeyakv1 33.22 33.27 33.42 T:ketjesrv1 33.76 33.84 33.94 T:ketjesrv2 59.96 60.01 60.13 T:proest128otrv1 60.57 60.65 60.74 T:ketjejrv1 75.87 75.89 75.90 T:present80n6t4silcv3 89.83 90.58 91.13 T:deoxysneq128128v13 102.10 102.13 102.17 T:twine80n6clocv1 103.13 103.32 103.47 T:ketjejrv2 113.78 114.05 114.97 T:deoxyseq128128v13 130.19 130.41 131.20 T:aezv1 131.02 131.04 131.09 T:led80n6t4silcv3 132.81 133.07 136.02 T:deoxysneq256128v13 174.25 174.32 175.57 T:deoxyseq256128v13 278.76 278.92 279.14 aes256gcmv1 342.14 343.68 353.72 T:acorn128v3 230.54? 366.63? 1254.27? T:acorn128 327.08? 368.20? 655.30? T:acorn128v2 3384.88 3385.65 3392.19 T:present80n6silcv1 3386.24 3387.28 3392.18 T:present80n6t4silcv2 6215.63 6217.59 6221.00 T:led80n6t4silcv2 6222.55 6225.54 6228.55 T:led80n6silcv1

Cycles/byte for 0+long encrypt 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv1 0.18? 0.19? 0.20? T:tiaoxinv2 0.25 0.25 0.26 aegis128l 0.29 0.30 0.30 T:aezv4 0.31 0.32 0.33 T:aezv3 0.31 0.33 0.34 T:aezv5 0.37? 0.42? 0.46? T:aes128gcmv1 0.36? 0.42? 0.46? T:aes256gcmv1 0.50 0.50 0.51 aegis256 0.56 0.56 0.57 T:aegis128 0.61 0.61 0.62 T:morus1280256v1 0.61 0.61 0.62 T:morus1280128v2 0.61 0.62 0.63 T:morus1280256v2 0.51? 0.62? 0.66? T:aeadaes128ocbtaglen128v1 0.61 0.62 0.63 T:morus1280128v1 0.75 0.75 0.75 T:aes128otrcv3 0.62? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.91 0.92 0.94 T:deoxysii128v141 0.92 0.92 0.93 T:aes128otrpv3 0.89 0.92 0.95 T:deoxysi128v141 0.96 0.97 0.98 T:morus640128v1 0.96 0.97 0.98 T:colm0v1 0.96 0.97 0.98 T:aes256otrcv3 0.97 0.98 0.99 T:morus640128v2 0.65? 1.04? 1.37? T:aeadaes256ocbtaglen128v1 1.03 1.05 1.08 T:deoxysi256v141 1.05 1.06 1.09 T:deoxysii256v141 1.17 1.17 1.19 T:deoxyseq128128v1 1.18 1.20 1.21 T:aes256otrpv3 1.28 1.30 1.31 T:deoxyseq256128v1 1.34 1.36 1.37 T:deoxysneq128128v1 1.51 1.54 1.55 T:deoxysneq256128v1 1.97 2.01 2.03 T:oceankeyakv2 1.96 2.01 2.06 T:lunarkeyakv2 2.13 2.15 2.18 T:norx6444v3 2.14 2.15 2.16 T:norx6441v2 2.13 2.15 2.16 T:norx6441v3 2.35 2.38 2.40 T:seakeyakv2 2.57 2.59 2.60 T:norx6441v1 3.25 3.27 3.28 T:norx6461v3 3.28 3.29 3.30 T:norx6461v2 3.58 3.61 3.64 T:lakekeyakv2 3.63 3.66 3.72 T:norx6444v2 3.65 3.70 3.72 T:lakekeyakv1 3.86 3.88 3.89 T:norx3241v2 3.86 3.88 3.89 T:norx3241v3 3.88 3.90 3.91 T:norx6461v1 4.00 4.01 4.03 T:norx6444v1 4.50 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n8t8clocv2 4.68 4.69 4.72 T:norx3241v1 5.40 5.46 5.52 T:ketjemajorv2 5.81 5.82 5.84 T:norx3261v2 5.83 5.87 5.88 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.56 6.62 6.64 T:riverkeyakv2 6.67 6.69 6.75 T:ascon96v1 6.65 6.69 6.70 T:ascon128av11 7.09 7.12 7.15 ascon128av12 7.21 7.30 7.34 T:ketjeminorv2 7.47 7.48 7.49 T:norx3261v1 9.21 9.21 9.22 T:aesjambuv1 9.82 9.85 9.88 T:ascon128v11 9.81 9.87 10.12 T:ascon128v1 10.59 10.62 10.63 ascon128v12 12.46 12.49 12.63 T:aes128otrsv2 12.49 12.51 12.53 T:aes128otrsv1 12.65 12.70 12.72 T:aes128n8clocv1 13.23 13.26 13.28 T:aes128n12clocv1 13.27 13.29 13.33 T:aes128n8silcv1 13.28 13.30 13.32 T:aes128n12silcv1 14.30 14.38 14.44 T:oceankeyakv1 15.05 15.06 15.07 T:twine80n6t4clocv2 15.66 15.68 15.71 T:twine80n6t4clocv3 15.76 15.80 15.96 T:aes128otrpv2 15.79 15.83 15.87 T:aes128otrpv1 16.39 16.43 16.50 T:aes256otrsv1 16.42 16.47 16.51 T:aes256otrsv2 17.29 17.41 17.68 T:seakeyakv1 19.75 19.78 19.83 T:aes256otrpv2 19.75 19.78 19.82 T:aes256otrpv1 24.73 24.79 24.87 T:proest256otrv1 29.82 29.85 29.94 T:ketjesrv1 29.44 30.10 30.33 T:riverkeyakv1 31.19 31.26 31.40 T:ketjesrv2 56.93 57.05 57.30 T:ketjejrv1 60.06 60.14 60.17 T:proest128otrv1 63.56 63.73 64.03 T:aezv1 67.89 67.94 67.98 T:twine80n6clocv1 75.19 75.23 75.62 T:deoxysneq128128v13 75.32 75.35 75.41 T:present80n6t4silcv3 75.76 75.92 76.08 T:deoxyseq128128v13 99.09 99.23 99.28 T:ketjejrv2 115.68 115.78 116.50 T:deoxyseq256128v13 115.90 116.23 118.97 T:deoxysneq256128v13 130.44 130.49 130.52 T:led80n6t4silcv3 278.75 279.72 280.00 aes256gcmv1 338.76 341.79 353.40 T:acorn128v3 276.17? 362.59? 700.53? T:acorn128v2 155.26? 370.05? 1315.80? T:acorn128 2257.99 2260.69 2261.65 T:present80n6t4silcv2 2257.65 2261.54 2263.81 T:present80n6silcv1 4145.74 4150.62 4156.75 T:led80n6silcv1 4142.08 4152.07 4156.21 T:led80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv1 0.17? 0.19? 0.21? T:tiaoxinv2 0.25 0.26 0.26 aegis128l 0.29 0.29 0.30 T:aezv4 0.31 0.32 0.32 T:aezv3 0.32 0.33 0.33 T:aezv5 0.36? 0.42? 0.49? T:aes256gcmv1 0.39? 0.42? 0.45? T:aes128gcmv1 0.50 0.50 0.51 aegis256 0.56 0.56 0.57 T:aegis128 0.59 0.61 0.65 T:aeadaes128ocbtaglen128v1 0.60 0.61 0.62 T:morus1280128v2 0.61 0.61 0.62 T:morus1280256v2 0.60 0.61 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.75 0.75 0.75 T:aes128otrcv3 0.40? 0.75? 0.76? T:aeadaes192ocbtaglen128v1 0.90 0.92 0.95 T:deoxysii128v141 0.92 0.92 0.96 T:aes128otrpv3 0.93 0.94 0.95 T:deoxysi128v141 0.97 0.97 0.97 T:colm0v1 0.97 0.97 0.98 T:aes256otrcv3 0.98 0.99 1.00 T:morus640128v2 0.98 0.99 1.00 T:morus640128v1 0.67? 1.02? 1.36? T:aeadaes256ocbtaglen128v1 1.03 1.05 1.08 T:deoxysii256v141 1.03 1.05 1.07 T:deoxysi256v141 1.19 1.19 1.19 T:aes256otrpv3 1.18 1.19 1.20 T:deoxyseq128128v1 1.27 1.29 1.30 T:deoxyseq256128v1 1.33 1.35 1.35 T:deoxysneq128128v1 1.53 1.55 1.56 T:deoxysneq256128v1 1.94 1.99 2.04 T:lunarkeyakv2 1.94 2.01 2.04 T:oceankeyakv2 2.14 2.15 2.17 T:norx6441v2 2.14 2.15 2.16 T:norx6441v3 2.16 2.19 2.20 T:norx6444v3 2.36 2.39 2.43 T:seakeyakv2 2.59 2.60 2.62 T:norx6441v1 3.23 3.25 3.26 T:norx6461v3 3.26 3.27 3.28 T:norx6461v2 3.59 3.60 3.62 T:lakekeyakv2 3.63 3.67 3.71 T:norx6444v2 3.68 3.70 3.72 T:lakekeyakv1 3.85 3.86 3.89 T:norx6461v1 3.88 3.89 3.91 T:norx3241v3 3.91 3.92 3.93 T:norx3241v2 3.99 4.00 4.02 T:norx6444v1 4.49 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.50 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.66 4.70 4.72 T:norx3241v1 5.45 5.49 5.56 T:ketjemajorv2 5.81 5.83 5.85 T:norx3261v2 5.83 5.86 5.89 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.58 6.61 6.64 T:riverkeyakv2 6.66 6.69 6.72 T:ascon128av11 6.67 6.70 6.79 T:ascon96v1 7.14 7.17 7.18 ascon128av12 7.22 7.24 7.27 T:ketjeminorv2 7.46 7.48 7.49 T:norx3261v1 9.21 9.21 9.22 T:aesjambuv1 9.78 9.81 9.90 T:ascon128v1 10.07 10.11 10.14 T:ascon128v11 10.46 10.49 10.51 ascon128v12 12.45 12.48 12.51 T:aes128otrsv1 12.46 12.48 12.62 T:aes128otrsv2 12.66 12.70 12.72 T:aes128n8clocv1 13.23 13.27 13.28 T:aes128n12clocv1 13.28 13.30 13.32 T:aes128n8silcv1 13.28 13.30 13.32 T:aes128n12silcv1 14.32 14.39 14.44 T:oceankeyakv1 15.03 15.07 15.09 T:twine80n6t4clocv2 15.67 15.69 15.72 T:twine80n6t4clocv3 15.76 15.80 15.97 T:aes128otrpv2 15.80 15.83 15.90 T:aes128otrpv1 16.35 16.40 16.45 T:aes256otrsv1 16.38 16.41 16.45 T:aes256otrsv2 17.28 17.37 17.69 T:seakeyakv1 19.72 19.77 19.81 T:aes256otrpv2 19.72 19.79 19.87 T:aes256otrpv1 24.68 24.78 25.11 T:proest256otrv1 29.78 29.82 29.87 T:ketjesrv1 29.37 30.20 30.30 T:riverkeyakv1 31.15 31.26 31.49 T:ketjesrv2 56.89 56.98 57.11 T:ketjejrv1 60.07 60.13 60.16 T:proest128otrv1 63.66 63.73 64.72 T:aezv1 67.92 67.95 67.99 T:twine80n6clocv1 75.12 75.19 75.43 T:deoxysneq128128v13 75.31 75.36 75.41 T:present80n6t4silcv3 75.78 75.95 76.11 T:deoxyseq128128v13 99.16 99.26 99.55 T:ketjejrv2 115.62 115.74 116.54 T:deoxyseq256128v13 115.79 116.14 119.09 T:deoxysneq256128v13 130.44 130.48 130.55 T:led80n6t4silcv3 278.77 278.86 279.28 aes256gcmv1 339.63 342.49 353.03 T:acorn128v3 150.06? 370.05? 1338.96? T:acorn128 297.00? 370.21? 676.28? T:acorn128v2 2256.03 2257.15 2265.24 T:present80n6silcv1 2258.40 2259.01 2260.62 T:present80n6t4silcv2 4148.12 4150.11 4155.45 T:led80n6t4silcv2 4149.82 4153.56 4160.71 T:led80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 0.17? 0.19? 0.21? T:tiaoxinv1 0.19 0.19 0.20 T:tiaoxinv2 0.25 0.26 0.26 aegis128l 0.29 0.30 0.30 T:aezv4 0.31 0.32 0.33 T:aezv3 0.32 0.33 0.33 T:aezv5 0.38? 0.42? 0.45? T:aes256gcmv1 0.39? 0.42? 0.44? T:aes128gcmv1 0.50 0.50 0.51 aegis256 0.56 0.56 0.57 T:aegis128 0.60 0.61 0.62 T:morus1280128v2 0.60 0.61 0.62 T:morus1280256v2 0.61 0.62 0.62 T:morus1280256v1 0.61 0.62 0.62 T:morus1280128v1 0.61 0.62 0.63 T:aeadaes128ocbtaglen128v1 0.75 0.75 0.76 T:aes128otrcv3 0.74? 0.75? 1.10? T:aeadaes192ocbtaglen128v1 0.91 0.92 0.96 T:aes128otrpv3 0.92 0.92 0.94 T:deoxysii128v141 0.92 0.94 0.95 T:deoxysi128v141 0.97 0.97 0.97 T:colm0v1 0.97 0.97 0.98 T:aes256otrcv3 0.98 0.99 1.00 T:morus640128v2 0.98 0.99 1.01 T:morus640128v1 1.00 1.01 1.02 T:aeadaes256ocbtaglen128v1 1.02 1.04 1.06 T:deoxysi256v141 1.04 1.06 1.07 T:deoxysii256v141 1.17 1.19 1.20 T:deoxyseq128128v1 1.19 1.19 1.19 T:aes256otrpv3 1.27 1.28 1.29 T:deoxyseq256128v1 1.34 1.34 1.36 T:deoxysneq128128v1 1.54 1.54 1.56 T:deoxysneq256128v1 1.97 2.00 2.02 T:oceankeyakv2 1.98 2.01 2.04 T:lunarkeyakv2 2.14 2.15 2.16 T:norx6441v3 2.14 2.15 2.17 T:norx6441v2 2.17 2.19 2.20 T:norx6444v3 2.36 2.38 2.40 T:seakeyakv2 2.59 2.60 2.61 T:norx6441v1 3.23 3.24 3.26 T:norx6461v3 3.25 3.26 3.28 T:norx6461v2 3.59 3.60 3.61 T:lakekeyakv2 3.63 3.67 3.71 T:norx6444v2 3.68 3.71 3.72 T:lakekeyakv1 3.84 3.86 3.89 T:norx6461v1 3.88 3.89 3.91 T:norx3241v3 3.90 3.92 3.93 T:norx3241v2 3.99 4.00 4.02 T:norx6444v1 4.48 4.50 4.50 T:aes128n12t8clocv3 4.50 4.50 4.50 T:aes128n12t8clocv2 4.48 4.50 4.50 T:aes128n12t8silcv2 4.50 4.50 4.50 T:aes128n8t8silcv2 4.50 4.50 4.50 T:aes128n12t8silcv3 4.50 4.50 4.50 T:aes128otrsv3 4.50 4.50 4.50 T:aes128n8t8clocv2 4.68 4.69 4.71 T:norx3241v1 5.45 5.50 5.53 T:ketjemajorv2 5.81 5.82 5.84 T:norx3261v2 5.84 5.86 5.87 T:norx3261v3 6.25 6.25 6.25 T:aes256otrsv3 6.59 6.62 6.63 T:riverkeyakv2 6.67 6.69 6.81 T:ascon96v1 6.67 6.69 6.78 T:ascon128av11 7.15 7.17 7.18 ascon128av12 7.21 7.24 7.28 T:ketjeminorv2 7.46 7.48 7.49 T:norx3261v1 9.21 9.21 9.22 T:aesjambuv1 9.78 9.82 10.09 T:ascon128v1 10.07 10.11 10.14 T:ascon128v11 10.47 10.48 10.49 ascon128v12 12.48 12.49 12.52 T:aes128otrsv1 12.47 12.49 12.60 T:aes128otrsv2 12.68 12.70 12.72 T:aes128n8clocv1 13.25 13.27 13.29 T:aes128n12clocv1 13.26 13.28 13.31 T:aes128n8silcv1 13.28 13.31 13.34 T:aes128n12silcv1 14.30 14.37 14.44 T:oceankeyakv1 15.04 15.07 15.10 T:twine80n6t4clocv2 15.65 15.70 15.72 T:twine80n6t4clocv3 15.76 15.79 15.91 T:aes128otrpv2 15.81 15.85 15.90 T:aes128otrpv1 16.38 16.41 16.44 T:aes256otrsv2 16.39 16.41 16.50 T:aes256otrsv1 17.25 17.34 17.62 T:seakeyakv1 19.75 19.79 19.88 T:aes256otrpv1 19.76 19.80 19.84 T:aes256otrpv2 24.64 24.80 25.12 T:proest256otrv1 29.80 29.82 29.90 T:ketjesrv1 29.33 30.18 30.30 T:riverkeyakv1 31.23 31.29 31.44 T:ketjesrv2 56.88 56.95 57.07 T:ketjejrv1 60.03 60.08 60.16 T:proest128otrv1 63.63 63.70 64.69 T:aezv1 67.90 67.96 68.02 T:twine80n6clocv1 75.11 75.27 75.72 T:deoxysneq128128v13 75.32 75.36 75.38 T:present80n6t4silcv3 75.75 75.98 76.19 T:deoxyseq128128v13 99.03 99.22 99.32 T:ketjejrv2 115.62 115.77 116.54 T:deoxyseq256128v13 116.19 116.58 118.99 T:deoxysneq256128v13 130.45 130.50 130.52 T:led80n6t4silcv3 278.82 278.98 279.43 aes256gcmv1 339.71 342.52 352.93 T:acorn128v3 155.21? 370.07? 1338.77? T:acorn128 296.94? 370.20? 676.30? T:acorn128v2 2256.03 2257.05 2265.54 T:present80n6silcv1 2258.34 2258.88 2260.49 T:present80n6t4silcv2 4147.97 4155.07 4158.15 T:led80n6t4silcv2 4151.42 4155.13 4160.65 T:led80n6silcv1

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 0.31 0.31 0.32 T:tiaoxinv1 0.31 0.31 0.32 T:tiaoxinv2 0.36 0.36 0.36 aegis128l 0.61 0.62 0.62 aegis256 0.62 0.62 0.63 T:aezv4 0.63 0.63 0.64 T:aegis128 0.64 0.64 0.66 T:aezv3 0.64 0.65 0.66 T:aezv5 0.80 0.80 0.81 T:morus1280128v1 0.80 0.80 0.81 T:morus1280256v1 0.81 0.81 0.82 T:morus1280256v2 0.81 0.81 0.82 T:morus1280128v2 0.83 0.85 0.88 T:aeadaes128ocbtaglen128v1 0.96? 0.97? 1.07? T:aeadaes192ocbtaglen128v1 1.01 1.02 1.02 T:aes128otrpv3 1.05 1.05 1.07 T:aes128otrcv3 1.13 1.14 1.15 T:deoxysi128v141 1.17 1.17 1.18 T:morus640128v1 1.17 1.18 1.18 T:morus640128v2 1.25? 1.27? 1.47? T:aeadaes256ocbtaglen128v1 1.31 1.32 1.34 T:deoxysi256v141 1.33 1.34 1.34 T:aes256otrpv3 1.40 1.40 1.41 T:aes256otrcv3 1.50 1.50 1.50 T:deoxysneq128128v1 1.66 1.66 1.70 T:deoxysii128v141 1.70 1.70 1.71 T:deoxysneq256128v1 1.88 1.88 1.89 T:colm0v1 1.92 1.92 1.93 T:deoxysii256v141 1.93 1.94 1.94 T:aes128gcmv1 1.99 2.00 2.00 T:deoxyseq128128v1 2.08 2.08 2.09 T:aes256gcmv1 2.18 2.18 2.20 T:deoxyseq256128v1 2.35 2.36 2.38 T:norx6444v3 2.52 2.52 2.55 T:norx6441v2 2.53 2.54 2.55 T:norx6441v3 2.77 2.77 2.77 T:aes128otrsv3 2.91 2.92 2.92 T:norx6441v1 3.61 3.61 3.62 T:seakeyakv2 3.78 3.79 3.80 T:norx6461v3 3.80 3.80 3.80 T:norx6461v2 3.82 3.82 3.82 T:aes256otrsv3 4.20 4.21 4.23 T:norx3241v2 4.20 4.21 4.24 T:norx3241v3 4.35 4.36 4.38 T:lakekeyakv2 4.38 4.38 4.40 T:norx6461v1 4.61 4.62 4.63 T:lakekeyakv1 4.63 4.63 4.63 T:aes128n8t8clocv2 4.63 4.63 4.63 T:aes128n12t8clocv3 4.63 4.63 4.63 T:aes128n12t8clocv2 4.69 4.69 4.69 T:aes128n12t8silcv3 4.69 4.69 4.69 T:aes128n8t8silcv2 4.69 4.69 4.69 T:aes128n12t8silcv2 4.88 4.89 4.92 T:oceankeyakv2 4.96 4.98 4.98 T:norx3241v1 5.31 5.33 5.66 T:norx6444v2 5.69 5.70 5.71 T:norx6444v1 6.34 6.36 6.39 T:norx3261v3 6.35 6.37 6.39 T:norx3261v2 6.93 6.94 6.96 T:ascon128av11 6.95 6.96 7.01 T:ascon96v1 7.34 7.35 7.36 ascon128av12 7.41 7.42 7.43 T:riverkeyakv2 7.89 7.90 7.92 T:norx3261v1 8.36 8.37 8.42 T:lunarkeyakv2 8.89 8.90 8.90 T:ketjemajorv2 9.34 9.35 9.35 T:aesjambuv1 9.51 9.53 9.58 T:ketjeminorv2 10.22 10.25 10.32 T:ascon128v11 10.23 10.31 10.39 T:ascon128v1 10.75 10.76 10.78 ascon128v12 14.61 14.62 14.65 T:aes128otrsv1 14.61 14.64 14.74 T:aes128otrsv2 15.72 15.72 15.73 T:twine80n6t4clocv2 16.24 16.24 16.27 T:twine80n6t4clocv3 16.28 16.30 16.40 T:aes128otrpv2 16.28 16.30 16.34 T:aes128otrpv1 18.65 18.67 18.70 T:aes256otrsv1 18.70 18.74 18.76 T:aes256otrsv2 19.01 19.03 19.06 T:aes128n8clocv1 19.42 19.44 19.46 T:aes128n12clocv1 20.36 20.38 20.47 T:aes256otrpv2 20.36 20.39 20.45 T:aes256otrpv1 20.35 20.44 20.48 T:aes128n12silcv1 20.42 20.45 20.47 T:aes128n8silcv1 21.33 21.37 21.57 T:seakeyakv1 22.23 22.24 22.29 T:oceankeyakv1 26.71 26.75 26.80 T:proest256otrv1 32.52 33.21 33.32 T:riverkeyakv1 33.74 33.77 33.89 T:ketjesrv1 35.48 35.54 35.63 T:ketjesrv2 61.12 61.23 61.30 T:ketjejrv1 62.58 62.64 62.70 T:proest128otrv1 75.75 75.78 75.81 T:deoxysneq128128v13 76.30 76.31 76.35 T:present80n6t4silcv3 102.62 102.66 102.68 T:twine80n6clocv1 104.21 104.50 108.06 T:ketjejrv2 115.38 115.41 115.90 T:deoxyseq128128v13 116.61 116.68 120.30 T:deoxysneq256128v13 123.87 124.00 124.52 T:aezv1 131.71 131.75 131.77 T:led80n6t4silcv3 176.40 177.00 177.07 T:deoxyseq256128v13 286.20 286.32 287.21 aes256gcmv1 387.79 388.07 397.99 T:acorn128v3 404.10? 409.82? 705.63? T:acorn128v2 407.69? 416.98? 1261.09? T:acorn128 3406.42 3408.04 3409.78 T:present80n6silcv1 3406.32 3409.02 3617.23 T:present80n6t4silcv2 6240.13 6244.24 6245.08 T:led80n6t4silcv2 6250.83 6254.53 6255.43 T:led80n6silcv1

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 0.37 0.37 0.37 aegis128l 0.38 0.38 0.38 T:tiaoxinv1 0.38 0.38 0.39 T:tiaoxinv2 0.61 0.61 0.62 T:aezv4 0.63 0.64 0.64 T:aezv3 0.64 0.64 0.64 T:aegis128 0.64 0.65 0.65 T:aezv5 0.65 0.65 0.66 aegis256 0.82 0.82 0.82 T:morus1280128v1 0.82 0.82 0.83 T:morus1280256v1 0.83 0.83 0.84 T:morus1280128v2 0.83 0.84 0.84 T:morus1280256v2 0.86 0.86 0.87 T:aeadaes128ocbtaglen128v1 0.99? 1.00? 1.22? T:aeadaes192ocbtaglen128v1 1.04 1.05 1.07 T:aes128otrpv3 1.09 1.09 1.09 T:aes128otrcv3 1.18 1.18 1.19 T:morus640128v1 1.19 1.19 1.20 T:morus640128v2 1.29? 1.31? 1.48? T:aeadaes256ocbtaglen128v1 1.35 1.36 1.36 T:aes256otrpv3 1.37 1.38 1.39 T:deoxysi128v141 1.44 1.45 1.45 T:aes256otrcv3 1.54 1.55 1.57 T:deoxysi256v141 1.69 1.71 1.72 T:deoxysii128v141 1.74 1.75 1.75 T:deoxysneq128128v1 1.78 1.78 1.79 T:deoxysneq256128v1 1.89 1.89 1.90 T:colm0v1 1.92 1.93 1.95 T:aes128gcmv1 1.99 2.00 2.03 T:deoxysii256v141 2.07 2.08 2.15 T:aes256gcmv1 2.36 2.37 2.38 T:norx6444v3 2.49 2.49 2.50 T:norx6441v2 2.49 2.50 2.50 T:norx6441v3 2.54 2.54 2.56 T:deoxyseq128128v1 2.66 2.67 2.67 T:deoxyseq256128v1 2.80 2.80 2.80 T:aes128otrsv3 2.90 2.91 2.92 T:norx6441v1 3.64 3.65 3.68 T:seakeyakv2 3.75 3.76 3.77 T:norx6461v3 3.76 3.77 3.77 T:norx6461v2 3.85 3.85 3.85 T:aes256otrsv3 4.18 4.19 4.20 T:norx3241v3 4.19 4.19 4.20 T:norx3241v2 4.34 4.36 4.37 T:norx6461v1 4.39 4.40 4.41 T:lakekeyakv2 4.60 4.60 4.61 T:aes128n8t8clocv2 4.60 4.60 4.61 T:aes128n12t8clocv2 4.60 4.60 4.62 T:aes128n12t8clocv3 4.66 4.66 4.66 T:aes128n12t8silcv2 4.66 4.66 4.66 T:aes128n12t8silcv3 4.66 4.66 4.66 T:aes128n8t8silcv2 4.66 4.67 4.69 T:lakekeyakv1 4.91 4.92 4.93 T:norx3241v1 4.92 4.94 5.01 T:oceankeyakv2 5.28 5.29 5.74 T:norx6444v2 5.65 5.66 5.66 T:norx6444v1 6.32 6.33 6.34 T:norx3261v3 6.33 6.34 6.35 T:norx3261v2 7.08 7.09 7.10 T:ascon128av11 7.07 7.11 7.15 T:ascon96v1 7.34 7.35 7.36 ascon128av12 7.59 7.60 7.63 T:riverkeyakv2 7.85 7.86 7.88 T:norx3261v1 8.44 8.46 8.54 T:lunarkeyakv2 9.25 9.28 9.32 T:ketjemajorv2 9.37 9.39 9.40 T:ketjeminorv2 9.49 9.49 9.50 T:aesjambuv1 10.29 10.30 10.34 T:ascon128v1 10.36 10.38 10.42 T:ascon128v11 10.66 10.67 10.68 ascon128v12 14.61 14.63 14.64 T:aes128otrsv1 14.65 14.67 14.74 T:aes128otrsv2 15.72 15.74 15.75 T:twine80n6t4clocv2 16.23 16.25 16.27 T:twine80n6t4clocv3 16.28 16.32 16.40 T:aes128otrpv2 16.31 16.34 16.43 T:aes128otrpv1 18.69 18.70 18.74 T:aes256otrsv2 18.68 18.70 18.72 T:aes256otrsv1 18.99 19.02 19.05 T:aes128n12clocv1 19.45 19.48 19.51 T:aes128n8clocv1 20.36 20.40 20.42 T:aes256otrpv1 20.37 20.41 20.45 T:aes256otrpv2 20.48 20.50 20.53 T:aes128n8silcv1 20.48 20.51 20.54 T:aes128n12silcv1 21.37 21.41 21.62 T:seakeyakv1 22.33 22.36 22.41 T:oceankeyakv1 26.66 26.77 26.82 T:proest256otrv1 32.90 33.57 33.63 T:riverkeyakv1 34.07 34.11 34.23 T:ketjesrv1 34.88 34.92 35.04 T:ketjesrv2 61.52 61.58 61.68 T:ketjejrv1 62.67 62.71 62.73 T:proest128otrv1 76.65 76.66 76.70 T:present80n6t4silcv3 90.70 91.06 93.21 T:deoxysneq128128v13 102.58 102.63 102.68 T:twine80n6clocv1 104.61 104.79 104.90 T:ketjejrv2 115.38 115.49 115.90 T:deoxyseq128128v13 123.85 123.95 124.07 T:aezv1 132.14 132.18 132.21 T:led80n6t4silcv3 133.64 133.79 137.18 T:deoxysneq256128v13 176.10 176.17 177.13 T:deoxyseq256128v13 286.07 286.11 286.19 aes256gcmv1 385.70 385.96 395.57 T:acorn128v3 405.06? 413.08? 1279.21? T:acorn128 412.92? 415.46? 685.44? T:acorn128v2 3403.08 3403.43 3409.65 T:present80n6silcv1 3404.02 3405.07 3409.59 T:present80n6t4silcv2 6244.59 6249.35 6253.59 T:led80n6t4silcv2 6251.64 6254.08 6256.77 T:led80n6silcv1

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 0.37 0.37 0.37 aegis128l 0.38 0.38 0.39 T:tiaoxinv1 0.38 0.38 0.38 T:tiaoxinv2 0.39 0.39 0.39 T:aezv4 0.40 0.40 0.41 T:aezv5 0.40 0.40 0.41 T:aezv3 0.64 0.64 0.64 T:aegis128 0.65 0.66 0.66 aegis256 0.82 0.82 0.82 T:morus1280128v1 0.82 0.82 0.83 T:morus1280256v1 0.83 0.83 0.84 T:morus1280128v2 0.83 0.83 0.84 T:morus1280256v2 0.86 0.86 0.86 T:aeadaes128ocbtaglen128v1 0.99 0.99 1.00 T:aeadaes192ocbtaglen128v1 1.04 1.05 1.05 T:aes128otrpv3 1.09 1.09 1.09 T:aes128otrcv3 1.18 1.18 1.19 T:morus640128v1 1.19 1.20 1.20 T:morus640128v2 1.28 1.29 1.29 T:aeadaes256ocbtaglen128v1 1.35 1.35 1.35 T:aes256otrpv3 1.37 1.38 1.39 T:deoxysi128v141 1.44 1.45 1.45 T:aes256otrcv3 1.54 1.55 1.55 T:deoxysi256v141 1.69 1.70 1.71 T:deoxysii128v141 1.73 1.74 1.75 T:deoxysneq128128v1 1.77 1.78 1.79 T:deoxysneq256128v1 1.89 1.90 1.90 T:colm0v1 1.91 1.92 1.93 T:aes128gcmv1 1.99 2.00 2.01 T:deoxysii256v141 2.06 2.08 2.09 T:aes256gcmv1 2.36 2.37 2.38 T:norx6444v3 2.49 2.49 2.50 T:norx6441v3 2.50 2.50 2.51 T:norx6441v2 2.53 2.53 2.55 T:deoxyseq128128v1 2.66 2.67 2.68 T:deoxyseq256128v1 2.80 2.80 2.80 T:aes128otrsv3 2.90 2.90 2.92 T:norx6441v1 3.65 3.66 3.68 T:seakeyakv2 3.76 3.76 3.77 T:norx6461v2 3.76 3.77 3.78 T:norx6461v3 3.85 3.85 3.85 T:aes256otrsv3 4.17 4.18 4.19 T:norx3241v3 4.19 4.19 4.19 T:norx3241v2 4.34 4.35 4.36 T:norx6461v1 4.40 4.41 4.42 T:lakekeyakv2 4.60 4.60 4.61 T:aes128n12t8clocv2 4.60 4.61 4.61 T:aes128n8t8clocv2 4.61 4.61 4.61 T:aes128n12t8clocv3 4.65 4.65 4.65 T:aes128n12t8silcv3 4.65 4.65 4.65 T:aes128n12t8silcv2 4.65 4.65 4.65 T:aes128n8t8silcv2 4.66 4.68 4.70 T:lakekeyakv1 4.91 4.92 4.93 T:norx3241v1 4.93 4.94 4.95 T:oceankeyakv2 5.30 5.31 5.74 T:norx6444v2 5.66 5.66 5.68 T:norx6444v1 6.32 6.32 6.33 T:norx3261v3 6.32 6.33 6.34 T:norx3261v2 7.07 7.09 7.10 T:ascon128av11 7.07 7.09 7.14 T:ascon96v1 7.34 7.34 7.35 ascon128av12 7.60 7.61 7.62 T:riverkeyakv2 7.85 7.86 7.87 T:norx3261v1 8.43 8.44 8.47 T:lunarkeyakv2 9.30 9.32 9.35 T:ketjemajorv2 9.38 9.40 9.41 T:ketjeminorv2 9.49 9.50 9.50 T:aesjambuv1 10.28 10.31 10.42 T:ascon128v1 10.35 10.41 10.43 T:ascon128v11 10.69 10.69 10.70 ascon128v12 14.64 14.66 14.68 T:aes128otrsv1 14.67 14.69 14.77 T:aes128otrsv2 15.72 15.73 15.75 T:twine80n6t4clocv2 16.22 16.24 16.26 T:twine80n6t4clocv3 16.32 16.33 16.40 T:aes128otrpv2 16.32 16.35 16.38 T:aes128otrpv1 18.68 18.72 18.76 T:aes256otrsv2 18.70 18.72 18.74 T:aes256otrsv1 18.96 19.00 19.06 T:aes128n12clocv1 19.44 19.46 19.48 T:aes128n8clocv1 20.36 20.38 20.46 T:aes256otrpv1 20.39 20.43 20.47 T:aes256otrpv2 20.47 20.49 20.52 T:aes128n8silcv1 20.49 20.52 20.54 T:aes128n12silcv1 21.34 21.39 21.60 T:seakeyakv1 22.33 22.36 22.42 T:oceankeyakv1 26.61 26.66 26.75 T:proest256otrv1 32.82 33.47 33.63 T:riverkeyakv1 34.10 34.12 34.25 T:ketjesrv1 34.91 34.94 35.03 T:ketjesrv2 61.52 61.62 61.70 T:ketjejrv1 62.74 62.75 62.77 T:proest128otrv1 76.65 76.67 76.70 T:present80n6t4silcv3 90.44 90.85 92.51 T:deoxysneq128128v13 102.62 102.65 102.70 T:twine80n6clocv1 104.67 104.84 105.00 T:ketjejrv2 115.39 115.50 115.97 T:deoxyseq128128v13 123.79 123.90 124.02 T:aezv1 132.15 132.16 132.21 T:led80n6t4silcv3 133.68 133.80 137.19 T:deoxysneq256128v13 176.09 176.16 177.19 T:deoxyseq256128v13 280.40 280.47 280.61 aes256gcmv1 385.64 386.08 395.75 T:acorn128v3 405.16? 413.09? 1267.87? T:acorn128 412.90? 415.68? 690.18? T:acorn128v2 3403.00 3403.61 3409.78 T:present80n6silcv1 3404.21 3404.56 3409.26 T:present80n6t4silcv2 6247.25 6249.75 6251.65 T:led80n6t4silcv2 6254.77 6258.35 6262.43 T:led80n6silcv1

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 2.21 2.27 2.30 T:aegis128 2.36 2.41 2.51 aegis128l 2.42 2.44 2.55 T:tiaoxinv2 2.43? 2.45? 2.84? T:tiaoxinv1 2.87 2.89 2.99 aegis256 2.92? 3.01? 3.39? T:aezv5 3.25 3.27 3.45 T:aezv4 3.34 3.34 3.51 T:aezv3 4.39 4.46 4.59 T:morus640128v1 4.49 4.57 4.71 T:morus1280256v1 4.52 4.57 4.62 T:morus1280128v1 4.58 4.68 4.78 T:morus640128v2 4.77 4.84 4.96 T:morus1280256v2 4.79 4.84 4.89 T:morus1280128v2 5.00 5.03 5.04 T:aes128otrpv3 5.12? 5.18? 6.59? T:aeadaes128ocbtaglen128v1 5.27 5.31 5.34 T:deoxysneq128128v1 5.47? 5.55? 11.05? T:aeadaes192ocbtaglen128v1 5.70 5.71 5.73 T:aes128otrsv3 6.01 6.07 6.15 T:deoxysneq256128v1 6.45 6.46 6.64 T:aes256otrpv3 6.39? 6.47? 11.84? T:aeadaes256ocbtaglen128v1 6.37 6.55 6.72 T:colm0v1 6.82 6.84 6.89 T:aes128otrcv3 6.88 6.89 6.91 T:aes128n12t8clocv3 6.88 6.89 6.91 T:aes128n8t8clocv2 6.89 6.95 7.00 T:aes128n12t8clocv2 7.09 7.12 7.18 T:deoxysi128v141 7.71 7.73 7.79 T:aes256otrsv3 8.23 8.26 8.27 T:aes128n12t8silcv2 8.24 8.26 8.28 T:aes128n12t8silcv3 8.25 8.27 8.28 T:aes128n8t8silcv2 8.30 8.35 8.40 T:deoxysi256v141 8.62 8.69 8.74 T:norx6441v1 8.68 8.70 8.73 T:deoxyseq128128v1 8.90 8.97 9.01 T:norx6441v2 8.92 8.97 9.08 T:norx6441v3 9.05 9.13 9.22 T:deoxysii128v141 9.12 9.19 9.32 T:aes256otrcv3 10.58 10.60 10.80 T:norx3241v1 10.59 10.69 10.87 T:deoxyseq256128v1 10.62 10.71 11.10 T:ascon96v1 10.58 10.73 10.95 T:ascon128av11 10.77 10.88 10.95 T:norx3241v2 10.86 10.93 11.04 T:norx3241v3 11.30 11.40 11.59 ascon128av12 12.66 12.70 12.91 T:norx6461v1 12.98 13.05 13.10 T:norx6461v2 13.01 13.08 13.14 T:norx6461v3 13.23 13.25 13.27 T:aesjambuv1 13.66 13.73 14.11 T:ascon128v11 13.93 14.04 14.18 T:ascon128v1 14.13 14.18 14.27 T:deoxysii256v141 14.40 14.43 14.55 ascon128v12 15.56 15.76 15.87 T:lakekeyakv1 15.78 15.84 15.89 T:norx6444v3 15.88 15.95 16.02 T:norx3261v2 15.87 15.95 16.05 T:norx3261v3 16.75 16.84 16.84 T:norx3261v1 18.21 18.45 18.91 T:riverkeyakv2 19.09 19.17 19.59 T:lakekeyakv2 23.66 23.73 23.95 T:twine80n6t4clocv3 24.07 24.18 24.24 T:twine80n6t4clocv2 24.34 24.49 24.67 T:aes128n8clocv1 24.77 24.90 24.99 T:aes128n12clocv1 24.92 24.98 25.05 T:aes128otrsv2 24.87 24.99 25.05 T:aes128otrsv1 26.60 26.73 26.87 T:aes128otrpv2 26.70 26.77 26.93 T:aes128otrpv1 28.54 28.77 28.99 T:aes128n8silcv1 28.62 28.99 29.20 T:aes128n12silcv1 29.88 30.03 30.59 T:aes128gcmv1 30.84 31.16 31.50 T:aes256gcmv1 31.62 31.73 31.83 T:aes256otrsv2 31.60 31.75 32.02 T:aes256otrsv1 33.42 33.52 33.69 T:aes256otrpv1 33.45 33.70 33.88 T:aes256otrpv2 33.88 34.00 34.38 T:seakeyakv2 35.48 35.60 35.97 T:ketjeminorv2 37.62 37.80 40.96 T:norx6444v2 40.66 40.73 40.84 T:norx6444v1 52.74 52.91 53.08 T:ketjesrv1 54.30 54.38 55.35 T:oceankeyakv2 58.95 59.40 59.84 T:riverkeyakv1 59.74 60.19 60.53 T:ketjesrv2 62.32 62.50 63.10 T:ketjemajorv2 76.59 77.26 77.55 T:proest256otrv1 81.47 82.14 82.66 T:ketjejrv1 85.78 85.95 86.05 T:deoxysneq128128v13 94.43 94.48 94.78 T:present80n6t4silcv3 113.30 113.61 114.16 T:twine80n6clocv1 121.64 121.98 122.42 T:proest128otrv1 130.05 130.30 130.81 T:aezv1 131.70 132.27 135.54 T:deoxysneq256128v13 136.50 136.67 136.95 T:lunarkeyakv2 138.30 138.47 138.73 T:ketjejrv2 143.56 143.69 144.05 T:deoxyseq128128v13 156.98 157.21 157.50 T:led80n6t4silcv3 161.61 162.20 163.01 T:seakeyakv1 219.45 219.84 220.44 T:deoxyseq256128v13 243.93 244.34 244.50 T:oceankeyakv1 323.55 323.92 324.45 aes256gcmv1 1360.31 1361.47 1396.84 T:acorn128v3 1406.62? 1451.05? 2484.04? T:acorn128v2 1444.69? 1484.76? 4554.45? T:acorn128 3817.29 3819.12 3820.48 T:present80n6silcv1 3815.81 3820.80 4028.34 T:present80n6t4silcv2 6907.90 6933.34 6960.15 T:led80n6t4silcv2 6965.85 6984.02 7001.92 T:led80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 2.33 2.35 2.42 T:aegis128 2.41 2.43 2.48 aegis128l 2.49 2.51 2.73 T:tiaoxinv2 2.55? 2.56? 2.93? T:tiaoxinv1 2.94 2.95 2.96 T:aezv5 3.02 3.04 3.08 aegis256 3.30 3.30 3.45 T:aezv3 3.26 3.31 3.60 T:aezv4 4.48 4.57 4.69 T:morus640128v1 4.83 4.88 5.09 T:morus640128v2 4.85 4.92 5.02 T:morus1280256v1 4.89 5.02 5.18 T:morus1280128v1 5.10 5.16 5.28 T:aes128otrpv3 5.18 5.22 5.43 T:morus1280128v2 5.20 5.24 5.41 T:morus1280256v2 5.72? 5.82? 8.30? T:aeadaes128ocbtaglen128v1 5.96 5.98 6.03 T:aes128otrsv3 6.30? 6.40? 8.63? T:aeadaes192ocbtaglen128v1 6.57 6.73 6.77 T:aes256otrpv3 6.92 6.95 6.96 T:aes128n12t8clocv3 6.95 6.96 6.98 T:aes128n12t8clocv2 6.95 6.96 6.98 T:aes128n8t8clocv2 6.83? 7.04? 12.09? T:aeadaes256ocbtaglen128v1 7.09 7.10 7.27 T:aes128otrcv3 7.27 7.29 7.49 T:colm0v1 7.97 7.99 8.26 T:aes256otrsv3 8.26 8.27 8.29 T:aes128n12t8silcv2 8.26 8.27 8.29 T:aes128n12t8silcv3 8.27 8.27 8.29 T:aes128n8t8silcv2 8.75 8.82 8.88 T:norx6441v1 8.84 8.88 9.15 T:deoxysneq256128v1 8.91 8.94 8.99 T:deoxysneq128128v1 8.89 8.95 8.99 T:norx6441v3 8.92 9.00 9.05 T:norx6441v2 9.42 9.45 9.67 T:aes256otrcv3 9.68 9.77 9.82 T:deoxysii128v141 10.00 10.05 10.13 T:deoxysi128v141 10.84 10.88 11.18 T:ascon128av11 10.85 10.88 10.89 T:norx3241v1 10.88 10.97 11.16 T:ascon96v1 10.98 11.01 11.09 T:norx3241v2 11.04 11.11 11.15 T:norx3241v3 11.41 11.49 11.94 ascon128av12 11.60 11.66 11.68 T:deoxysi256v141 12.62 12.77 12.84 T:deoxyseq128128v1 12.84 12.90 12.95 T:norx6461v1 12.84 12.98 13.03 T:norx6461v2 13.06 13.09 13.15 T:norx6461v3 13.09 13.19 13.33 T:deoxyseq256128v1 13.38 13.40 13.43 T:aesjambuv1 13.85 13.95 14.35 T:ascon128v11 13.91 14.08 14.32 T:ascon128v1 14.23 14.42 14.61 ascon128v12 15.45 15.50 15.59 T:deoxysii256v141 15.60 15.69 15.79 T:lakekeyakv1 15.73 15.83 15.91 T:norx6444v3 16.04 16.09 16.20 T:norx3261v3 16.10 16.20 16.28 T:norx3261v2 16.89 16.93 17.02 T:norx3261v1 18.48 18.59 18.97 T:riverkeyakv2 19.15 19.24 19.48 T:lakekeyakv2 23.66 23.75 23.87 T:twine80n6t4clocv3 24.12 24.20 24.30 T:twine80n6t4clocv2 24.62 24.74 24.90 T:aes128n12clocv1 24.87 25.03 25.16 T:aes128otrsv1 24.98 25.07 25.52 T:aes128otrsv2 24.85 25.36 25.49 T:aes128n8clocv1 26.53 26.72 26.84 T:aes128otrpv2 26.74 26.89 26.95 T:aes128otrpv1 28.73 28.97 29.68 T:aes128n8silcv1 28.81 29.25 30.34 T:aes128n12silcv1 29.48 29.81 30.07 T:aes128gcmv1 30.34 30.62 31.41 T:aes256gcmv1 31.73 31.91 31.98 T:aes256otrsv2 31.87 32.03 32.22 T:aes256otrsv1 33.55 33.62 33.88 T:aes256otrpv1 33.43 33.63 33.81 T:aes256otrpv2 33.92 34.16 34.50 T:seakeyakv2 35.10 35.46 35.52 T:ketjeminorv2 37.96? 38.20? 43.15? T:norx6444v2 40.41 40.48 40.59 T:norx6444v1 53.34 53.72 53.80 T:ketjesrv1 54.56 54.72 55.70 T:oceankeyakv2 59.50 59.73 60.45 T:riverkeyakv1 59.70 59.88 60.12 T:ketjesrv2 62.70 63.02 63.21 T:ketjemajorv2 77.98 78.14 78.81 T:proest256otrv1 82.04 82.35 82.78 T:ketjejrv1 94.90 95.21 95.34 T:present80n6t4silcv3 101.01 101.65 103.34 T:deoxysneq128128v13 113.36 113.81 114.36 T:twine80n6clocv1 122.38 123.91 125.65 T:proest128otrv1 133.73 134.05 134.73 T:aezv1 137.30 137.88 138.41 T:lunarkeyakv2 138.52 138.89 139.70 T:ketjejrv2 143.85 144.20 144.76 T:deoxyseq128128v13 148.58 148.95 152.20 T:deoxysneq256128v13 157.54 157.71 158.00 T:led80n6t4silcv3 161.09 162.16 163.16 T:seakeyakv1 218.77 219.14 220.21 T:deoxyseq256128v13 244.38 244.66 244.98 T:oceankeyakv1 324.73 325.43 325.93 aes256gcmv1 1359.80 1361.63 1395.36 T:acorn128v3 1455.65? 1475.09? 2422.75? T:acorn128v2 1442.47? 1481.70? 4634.00? T:acorn128 3813.42 3815.20 3821.32 T:present80n6silcv1 3812.42 3815.55 3819.34 T:present80n6t4silcv2 6898.50 6905.04 6916.72 T:led80n6t4silcv2 6945.33 6963.13 6973.46 T:led80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 2.33 2.35 2.38 T:aegis128 2.41 2.44 2.46 aegis128l 2.49 2.52 2.61 T:tiaoxinv2 2.51 2.54 2.74 T:tiaoxinv1 2.58? 2.64? 2.90? T:aezv5 2.81 2.87 3.02 T:aezv4 2.87 2.88 2.99 T:aezv3 3.03 3.06 3.09 aegis256 4.45 4.53 4.56 T:morus640128v1 4.81 4.84 4.87 T:morus1280128v1 4.87 4.88 4.93 T:morus640128v2 4.82 4.89 4.93 T:morus1280256v1 5.11 5.15 5.18 T:aes128otrpv3 5.13 5.17 5.20 T:morus1280128v2 5.16 5.20 5.23 T:morus1280256v2 5.73 5.78 5.90 T:aeadaes128ocbtaglen128v1 5.98 5.99 6.00 T:aes128otrsv3 6.28? 6.35? 11.59? T:aeadaes192ocbtaglen128v1 6.57 6.69 6.77 T:aes256otrpv3 6.80 6.82 6.87 T:aeadaes256ocbtaglen128v1 6.86 6.88 6.91 T:aes128n12t8clocv3 6.87 6.88 7.20 T:aes128n12t8clocv2 6.88 6.89 6.91 T:aes128n8t8clocv2 7.07 7.09 7.12 T:aes128otrcv3 7.34 7.34 7.42 T:colm0v1 7.96 7.98 8.00 T:aes256otrsv3 8.19 8.20 8.50 T:aes128n8t8silcv2 8.19 8.20 8.51 T:aes128n12t8silcv3 8.19 8.20 8.23 T:aes128n12t8silcv2 8.69 8.77 8.89 T:deoxysneq256128v1 8.75 8.81 9.06 T:deoxysneq128128v1 8.76 8.84 8.87 T:norx6441v1 8.88 8.94 8.98 T:norx6441v3 8.90 8.98 9.09 T:norx6441v2 9.39 9.45 9.48 T:aes256otrcv3 9.67 9.73 9.77 T:deoxysii128v141 10.04 10.09 10.16 T:deoxysi128v141 10.77 10.83 11.05 T:ascon128av11 10.82 10.88 10.92 T:norx3241v1 10.84 10.94 10.96 T:ascon96v1 10.99 11.02 11.09 T:norx3241v2 11.04 11.09 11.14 T:norx3241v3 11.38 11.43 11.66 ascon128av12 11.52 11.59 11.63 T:deoxysi256v141 12.63 12.68 12.77 T:deoxyseq128128v1 12.80 12.88 12.92 T:norx6461v1 12.82 12.91 13.01 T:norx6461v2 12.98 13.04 13.13 T:norx6461v3 13.10 13.16 13.25 T:deoxyseq256128v1 13.35 13.38 13.41 T:aesjambuv1 13.88 14.00 14.25 T:ascon128v11 13.90 14.19 14.25 T:ascon128v1 14.36 14.36 14.55 ascon128v12 15.40 15.47 15.52 T:deoxysii256v141 15.69 15.73 15.96 T:lakekeyakv1 15.69 15.77 15.85 T:norx6444v3 16.05 16.07 16.15 T:norx3261v3 16.16 16.25 16.31 T:norx3261v2 16.90 16.92 17.00 T:norx3261v1 18.58 18.62 18.87 T:riverkeyakv2 19.24 19.38 19.58 T:lakekeyakv2 23.67 23.91 24.14 T:twine80n6t4clocv3 24.14 24.23 24.39 T:twine80n6t4clocv2 24.52 24.75 25.03 T:aes128n12clocv1 24.73 25.04 25.30 T:aes128n8clocv1 25.05 25.12 25.45 T:aes128otrsv1 25.16 25.23 25.48 T:aes128otrsv2 26.93 26.97 27.09 T:aes128otrpv1 26.83 26.98 27.16 T:aes128otrpv2 28.52 28.80 29.05 T:aes128n8silcv1 28.70 29.05 29.19 T:aes128n12silcv1 29.41 29.62 29.77 T:aes128gcmv1 29.97 30.27 30.64 T:aes256gcmv1 31.45 31.79 32.19 T:aes256otrsv1 31.88 31.92 32.25 T:aes256otrsv2 33.59 33.68 33.80 T:aes256otrpv1 33.74 33.88 34.02 T:aes256otrpv2 34.05 34.29 34.83 T:seakeyakv2 35.32 35.41 35.59 T:ketjeminorv2 38.02? 38.22? 43.21? T:norx6444v2 40.45 40.51 40.63 T:norx6444v1 53.55 53.68 53.80 T:ketjesrv1 54.63 54.77 54.87 T:oceankeyakv2 59.30 59.82 60.26 T:riverkeyakv1 59.69 60.04 60.52 T:ketjesrv2 63.14 63.25 63.88 T:ketjemajorv2 75.66 75.87 76.83 T:proest256otrv1 81.65 82.14 82.53 T:ketjejrv1 94.84 95.01 95.22 T:present80n6t4silcv3 101.23 101.88 103.41 T:deoxysneq128128v13 113.10 113.55 113.99 T:twine80n6clocv1 121.91 122.10 122.47 T:proest128otrv1 133.55 134.16 134.94 T:aezv1 137.34 137.69 138.13 T:lunarkeyakv2 139.03 139.38 139.59 T:ketjejrv2 143.97 144.34 144.69 T:deoxyseq128128v13 148.98 149.67 152.32 T:deoxysneq256128v13 157.51 157.65 157.91 T:led80n6t4silcv3 161.68 162.73 163.30 T:seakeyakv1 219.64 220.32 220.81 T:deoxyseq256128v13 243.85 244.35 244.78 T:oceankeyakv1 319.09 319.35 319.80 aes256gcmv1 1360.91 1361.45 1394.57 T:acorn128v3 1448.73? 1475.34? 2423.34? T:acorn128v2 1441.86? 1481.61? 4562.79? T:acorn128 3813.11 3814.06 3820.70 T:present80n6silcv1 3812.17 3814.20 3818.30 T:present80n6t4silcv2 6899.95 6916.29 6925.20 T:led80n6t4silcv2 6939.71 6950.38 6967.03 T:led80n6silcv1