VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260302 18:25:57]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 7.63 7.69 7.83 T:norx6441v2 7.67 7.72 7.81 T:norx6441v3 9.02 9.14 9.23 T:norx3241v3 9.08 9.15 9.23 T:norx3241v2 9.18 9.31 9.36 T:morus640128v1 9.17 9.33 9.65 T:norx6441v1 9.45 9.50 9.57 T:morus640128v2 10.73 10.90 11.11 T:norx3241v1 11.26 11.31 11.41 T:norx6461v2 11.21 11.36 11.43 T:norx6461v3 12.20 12.44 12.56 T:morus1280128v1 13.34 13.46 13.60 T:norx3261v2 13.36 13.48 13.71 T:norx3261v3 13.44 13.67 14.29 T:morus1280128v2 13.59 13.69 14.10 T:norx6461v1 15.85 15.98 16.12 T:morus1280256v2 15.88 15.98 16.13 T:morus1280256v1 16.04 16.10 16.15 T:norx3261v1 17.97 18.34 19.24 T:norx6444v2 17.94? 18.48? 20.65? T:norx6444v3 19.71 19.80 19.89 T:aegis128l 21.68 21.94 22.69 T:acorn128v2 21.91 22.04 22.22 T:aegis128 21.71 22.17 22.81 T:norx6444v1 18.90? 23.30? 29.71? T:lunarkeyakv2 24.74 24.94 25.75 T:acorn128v3 24.98 25.15 25.41 T:tiaoxinv1 24.98 25.46 26.94 T:tiaoxinv2 26.60 26.76 27.22 T:aegis256 29.29 29.83 30.38 T:riverkeyakv2 31.65 31.78 31.94 ascon128av12 31.84 32.15 32.81 T:ketjeminorv2 31.95 32.60 34.06 T:lakekeyakv2 32.46 32.85 33.56 T:lakekeyakv1 32.26? 33.20? 37.58? T:oceankeyakv2 32.19? 33.74? 37.85? T:seakeyakv2 35.49 35.58 36.02 T:aeadaes128ocbtaglen64v1 35.36 35.65 35.89 T:aeadaes128ocbtaglen128v1 35.49 35.79 37.39 T:aeadaes128ocbtaglen96v1 40.60 40.83 41.52 T:aeadaes192ocbtaglen96v1 40.63 40.98 43.04 T:aeadaes192ocbtaglen64v1 40.73 41.04 42.56 T:aeadaes192ocbtaglen128v1 43.15 43.28 43.49 ascon128v12 42.99 44.31 46.70 T:ketjemajorv2 45.20 45.40 46.93 T:aeadaes256ocbtaglen128v1 44.90 45.43 47.15 T:aeadaes256ocbtaglen96v1 45.12 45.45 46.53 T:aeadaes256ocbtaglen64v1 47.30 47.72 48.17 T:aes128otrpv2 47.56 47.97 48.47 T:aes128otrpv1 48.04 48.26 48.50 T:aes128otrsv3 48.01 48.26 48.45 T:ascon96v1 47.96 48.29 50.30 T:aes128otrsv2 48.12 48.32 48.85 T:aes128otrpv3 48.21 48.38 49.78 T:ascon128av11 48.05 48.46 50.11 T:ascon128v11 48.07 48.52 50.85 T:aes128otrsv1 47.98 48.62 49.39 T:ascon128v1 47.89 48.83 50.43 T:aes128gcmv1 52.38 52.63 52.88 T:aes128otrcv3 55.38 56.54 59.65 T:aes256gcmv1 56.57 57.86 59.85 T:proest256otrv1 59.63 60.06 62.80 aegis128l 61.87 62.34 64.56 T:aes256otrpv1 61.97 62.61 64.98 T:aes256otrpv2 62.31 62.64 63.44 T:aes256otrpv3 62.25 62.76 64.81 T:aes256otrsv1 62.31 62.83 63.56 T:aes256otrsv3 62.31 62.90 65.25 T:aes256otrsv2 63.98 64.41 67.21 T:deoxysi128v141 68.56 68.82 69.77 T:aes256otrcv3 72.37 73.39 73.98 T:deoxysi256v141 77.40 78.03 80.56 T:colm0v1 80.06 80.38 83.02 T:colm127v1 84.26 84.55 86.66 T:aesjambuv1 84.39 85.14 87.92 T:ketjesrv2 85.45 85.94 88.23 T:ketjesrv1 87.07 88.11 90.30 T:aes128n8t8silcv2 87.61 88.64 90.42 T:aes128n12t8silcv3 87.99 88.70 90.85 T:aes128n12t8silcv2 98.44 99.58 101.60 T:aes128n12t8clocv2 99.08 99.70 102.51 T:aes128n12t8clocv3 98.58 99.97 101.96 T:aes128n8t8clocv2 99.15 100.06 101.94 T:aes128n12clocv1 99.85 100.34 102.71 T:aes128n8clocv1 133.29 134.22 136.43 T:proest128otrv1 138.05 139.95 144.95 T:deoxysii128v141 143.93 144.97 151.18 T:ketjejrv1 174.94 177.99 189.41 T:aezv4 185.54 188.69 202.20 T:aezv5 210.16 212.30 222.81 T:deoxysneq128128v1 209.94 215.42 224.48 T:deoxysneq128128v13 256.50 258.26 269.11 T:ketjejrv2 363.16 370.00 376.23 T:deoxysneq256128v13 362.05 372.24 378.43 T:deoxysneq256128v1 413.34 419.71 421.96 T:deoxysii256v141 418.60 428.14 432.83 T:deoxyseq128128v1 425.00 432.88 448.13 T:deoxyseq128128v13 544.10 550.68 556.38 T:aezv3 585.87 597.42 606.22 T:aezv1 626.65 636.68 644.17 T:twine80n6t4clocv3 636.10 637.51 641.19 T:twine80n6t4clocv2 728.36 736.19 748.99 T:deoxyseq256128v13 730.07 737.10 741.23 T:deoxyseq256128v1 2227.53 2253.22 2276.22 T:acorn128 4570.01 4580.82 4624.70 T:led80n6t4silcv2 4567.43 4583.10 4600.62 T:led80n6t4silcv3 4567.43 4615.66 4629.16 T:led80n6silcv1 10610.99 10631.25 10655.76 T:present80n6t4silcv3 10618.02 10634.40 10689.61 T:present80n6silcv1 10619.17 10638.89 10658.76 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 7.33 7.74 7.82 T:norx6441v2 7.64 7.81 7.98 T:norx6441v3 9.08 9.14 9.24 T:norx3241v2 8.94? 9.18? 10.02? T:norx3241v3 9.11 9.20 9.40 T:norx6441v1 9.20 9.27 9.34 T:morus640128v2 9.23 9.30 9.62 T:morus640128v1 10.92 10.99 11.11 T:norx3241v1 11.23 11.36 11.53 T:norx6461v2 11.30 11.40 11.49 T:norx6461v3 11.48 11.56 11.70 T:morus1280128v1 13.14 13.40 13.69 T:norx3261v2 13.36 13.43 13.49 T:norx3261v3 13.41 13.45 13.56 T:norx6461v1 13.24 13.52 13.66 T:morus1280128v2 15.90 16.00 16.25 T:morus1280256v2 15.92 16.01 16.38 T:morus1280256v1 16.14 16.25 16.53 T:norx3261v1 18.05 18.33 18.70 T:norx6444v3 18.01? 18.51? 20.35? T:norx6444v2 19.83 20.17 21.02 T:aegis128l 20.95 21.02 21.16 T:acorn128v2 21.90 22.31 24.19 T:norx6444v1 22.18 22.43 22.93 T:aegis128 18.87? 22.65? 28.09? T:lunarkeyakv2 24.92 25.12 25.38 T:tiaoxinv2 24.86 25.17 27.50 T:tiaoxinv1 25.09 25.24 25.46 T:acorn128v3 26.25 26.53 27.27 T:aegis256 30.54 30.61 30.85 T:ketjeminorv2 30.13 30.66 31.76 T:riverkeyakv2 31.68 31.77 32.85 ascon128av12 31.50 32.32 33.03 T:lakekeyakv2 31.80 32.88 33.60 T:oceankeyakv2 32.72 33.14 34.30 T:seakeyakv2 32.76 33.26 34.10 T:lakekeyakv1 35.27 35.83 36.06 T:aeadaes128ocbtaglen64v1 35.67 35.96 36.50 T:aeadaes128ocbtaglen128v1 35.77 36.02 36.61 T:aeadaes128ocbtaglen96v1 40.32 40.82 43.06 T:aeadaes192ocbtaglen128v1 40.37 40.85 43.07 T:aeadaes192ocbtaglen64v1 40.57 40.86 41.76 T:aeadaes192ocbtaglen96v1 42.42 42.57 43.07 ascon128v12 43.13 43.66 43.88 T:ketjemajorv2 45.17 45.36 45.52 T:aeadaes256ocbtaglen64v1 44.98 45.54 47.99 T:aeadaes256ocbtaglen96v1 45.16 45.71 48.06 T:aeadaes256ocbtaglen128v1 46.92 47.31 47.61 T:aes128otrpv2 47.19 47.34 47.83 T:aes128otrpv1 47.55 47.83 48.68 T:aes128otrsv2 47.53 47.95 50.72 T:aes128otrsv1 48.02 48.18 48.92 T:aes128otrpv3 48.04 48.27 48.96 T:aes128otrsv3 47.98 48.83 51.72 T:aes128gcmv1 48.74 48.96 49.48 T:ascon128v1 48.87 49.32 51.10 T:ascon128v11 51.38 51.67 52.44 T:aes128otrcv3 53.20 53.31 53.67 T:ascon96v1 53.17 53.41 53.73 T:ascon128av11 55.78 57.02 59.50 T:aes256gcmv1 56.54 57.08 59.05 T:proest256otrv1 59.63 59.74 60.36 aegis128l 61.37 61.81 62.33 T:aes256otrpv1 61.33 61.83 62.66 T:aes256otrpv2 61.84 62.00 62.65 T:aes256otrsv2 62.15 62.43 63.33 T:aes256otrpv3 62.01 62.55 63.15 T:aes256otrsv3 62.25 62.63 63.57 T:aes256otrsv1 67.07 67.23 67.75 T:aes256otrcv3 77.02 77.37 79.51 T:colm0v1 79.27 79.83 84.50 T:colm127v1 79.46 80.56 84.53 T:deoxysi128v141 82.71 82.86 83.73 T:aesjambuv1 84.13 85.12 90.21 T:ketjesrv1 84.77 85.95 87.86 T:deoxysi256v141 85.30 86.13 87.79 T:ketjesrv2 86.66 87.48 90.35 T:aes128n8t8silcv2 86.87 88.42 93.29 T:aes128n12t8silcv3 87.13 88.42 90.23 T:aes128n12t8silcv2 104.30 104.55 107.21 T:aes128n8t8clocv2 103.96 104.78 107.60 T:aes128n12t8clocv2 104.14 104.96 107.44 T:aes128n12clocv1 105.59 106.10 109.21 T:aes128n8clocv1 105.07? 107.68? 119.84? T:aes128n12t8clocv3 133.23 133.73 137.47 T:proest128otrv1 138.05 138.66 144.05 T:deoxysii128v141 146.54 147.20 160.70 T:ketjejrv1 175.90 177.97 181.00 T:aezv4 184.87 187.65 198.15 T:aezv5 251.03 253.09 263.70 T:ketjejrv2 307.62 309.93 321.68 T:deoxysneq128128v1 308.54 312.22 326.06 T:deoxysneq128128v13 410.21 418.99 423.41 T:deoxysii256v141 431.87 434.94 438.84 T:deoxyseq128128v13 470.18 476.95 483.90 T:deoxysneq256128v13 472.04 482.28 486.50 T:deoxysneq256128v1 539.10 546.77 557.45 T:aezv3 597.85 606.19 611.18 T:aezv1 614.51 629.38 640.90 T:deoxyseq128128v1 633.63 635.36 645.80 T:twine80n6t4clocv3 632.31 638.62 642.64 T:twine80n6t4clocv2 735.02 737.38 746.67 T:deoxyseq256128v13 945.35 953.10 965.26 T:deoxyseq256128v1 2275.15 2287.63 2308.46 T:acorn128 4558.92 4581.54 4590.93 T:led80n6t4silcv3 4545.69 4582.80 4624.35 T:led80n6t4silcv2 4604.94 4621.40 4648.28 T:led80n6silcv1 10590.77 10625.67 10650.54 T:present80n6t4silcv3 10602.81 10634.15 10658.89 T:present80n6t4silcv2 10620.35 10647.42 10685.78 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 7.66 7.72 7.84 T:norx6441v2 7.73 7.78 7.90 T:norx6441v3 9.08 9.14 9.20 T:norx3241v2 9.10 9.14 9.29 T:norx3241v3 9.11 9.17 9.20 T:norx6441v1 9.22 9.25 9.35 T:morus640128v1 9.20 9.26 9.35 T:morus640128v2 10.94 11.00 11.11 T:norx3241v1 11.29 11.35 11.42 T:norx6461v2 11.32 11.39 11.45 T:norx6461v3 11.49 11.58 11.67 T:morus1280128v1 13.35 13.42 13.49 T:norx3261v3 13.38 13.44 13.55 T:norx3261v2 13.39 13.49 13.66 T:norx6461v1 13.19 13.54 13.68 T:morus1280128v2 15.86 15.96 16.01 T:morus1280256v1 15.93 15.98 16.20 T:morus1280256v2 16.16 16.18 16.29 T:norx3261v1 18.18 18.45 18.79 T:norx6444v3 18.23 18.48 18.87 T:norx6444v2 19.80 19.89 19.95 T:aegis128l 20.99 21.04 21.28 T:acorn128v2 21.78 22.10 22.33 T:norx6444v1 22.15 22.22 22.50 T:aegis128 19.45? 23.79? 28.79? T:lunarkeyakv2 24.75 25.02 25.38 T:tiaoxinv2 25.02 25.39 26.33 T:acorn128v3 24.84? 25.45? 27.74? T:tiaoxinv1 26.38 26.48 27.00 T:aegis256 30.65 30.97 31.74 T:riverkeyakv2 30.75 31.08 32.08 T:ketjeminorv2 31.62 31.69 31.76 ascon128av12 32.20 32.52 33.47 T:lakekeyakv2 32.27 33.31 35.04 T:seakeyakv2 31.92? 33.38? 37.35? T:oceankeyakv2 33.31? 33.84? 37.24? T:lakekeyakv1 35.72 35.93 36.26 T:aeadaes128ocbtaglen96v1 35.80 36.02 38.16 T:aeadaes128ocbtaglen64v1 35.78 36.08 38.30 T:aeadaes128ocbtaglen128v1 40.49 40.72 42.95 T:aeadaes192ocbtaglen128v1 40.64 40.88 41.66 T:aeadaes192ocbtaglen64v1 40.71 41.03 43.06 T:aeadaes192ocbtaglen96v1 42.30 42.77 43.13 ascon128v12 43.22 43.64 45.27 T:ketjemajorv2 44.69 45.22 45.57 T:aeadaes256ocbtaglen128v1 45.26 45.50 47.35 T:aeadaes256ocbtaglen64v1 45.25 45.88 47.85 T:aeadaes256ocbtaglen96v1 47.50 47.62 48.55 T:aes128otrpv2 47.32 47.66 48.30 T:aes128otrpv1 47.70 47.81 48.00 T:ascon96v1 47.73 47.94 48.35 T:ascon128av11 47.83 48.17 48.91 T:aes128otrsv2 48.18 48.34 48.99 T:aes128otrsv3 48.21 48.43 48.88 T:aes128otrpv3 47.82 48.66 50.98 T:aes128otrsv1 47.03 48.67 49.97 T:aes128gcmv1 48.85 49.10 49.71 T:ascon128v1 48.93 49.19 51.19 T:ascon128v11 51.26 51.88 53.60 T:aes128otrcv3 56.56 57.10 57.63 T:proest256otrv1 55.67 57.27 60.62 T:aes256gcmv1 59.88 60.05 61.03 aegis128l 61.71 62.03 63.06 T:aes256otrpv2 62.18 62.33 63.27 T:aes256otrpv1 62.25 62.69 63.60 T:aes256otrsv1 62.48 62.79 64.37 T:aes256otrpv3 62.23 62.82 64.97 T:aes256otrsv2 62.26 62.83 63.57 T:aes256otrsv3 67.06 67.31 70.38 T:aes256otrcv3 77.06 77.63 78.73 T:colm0v1 77.35 78.10 81.03 T:colm127v1 79.65 80.37 83.02 T:deoxysi128v141 82.47 82.92 85.54 T:aesjambuv1 84.53 85.08 86.84 T:ketjesrv1 85.31 85.89 87.80 T:ketjesrv2 85.43 86.92 91.27 T:deoxysi256v141 86.40 87.06 88.86 T:aes128n12t8silcv2 86.90 87.27 90.00 T:aes128n8t8silcv2 86.87 87.34 88.94 T:aes128n12t8silcv3 103.88 104.60 107.60 T:aes128n8t8clocv2 104.28 104.68 107.56 T:aes128n12clocv1 104.03 104.76 113.37 T:aes128n12t8clocv2 104.28 104.98 107.36 T:aes128n12t8clocv3 106.05 106.73 109.83 T:aes128n8clocv1 133.49 135.01 144.73 T:proest128otrv1 137.97 140.26 141.88 T:deoxysii128v141 146.36 148.25 151.71 T:ketjejrv1 175.81 177.56 187.93 T:aezv4 185.25 186.83 189.66 T:aezv5 251.69 253.31 262.78 T:ketjejrv2 308.23 310.78 324.57 T:deoxysneq128128v1 308.76 313.62 328.17 T:deoxysneq128128v13 410.01 418.91 427.47 T:deoxysii256v141 424.18 432.25 436.93 T:deoxyseq128128v13 471.09 472.75 485.89 T:deoxysneq256128v1 468.05 480.15 491.54 T:deoxysneq256128v13 541.55 552.97 562.45 T:aezv3 587.99 601.87 608.66 T:aezv1 620.81 627.17 639.08 T:deoxyseq128128v1 624.65 635.67 641.85 T:twine80n6t4clocv2 624.86 638.26 643.23 T:twine80n6t4clocv3 737.58 747.94 755.86 T:deoxyseq256128v13 947.12 956.97 965.24 T:deoxyseq256128v1 2275.37 2309.67 2337.27 T:acorn128 4549.13 4577.05 4599.18 T:led80n6t4silcv3 4548.91 4583.01 4614.24 T:led80n6t4silcv2 4605.79 4615.10 4629.77 T:led80n6silcv1 10599.39 10621.83 10651.71 T:present80n6silcv1 10580.04 10652.65 10697.82 T:present80n6t4silcv3 10611.42 10655.00 10693.00 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 7.53 7.58 7.75 T:norx6441v3 7.53 7.59 7.75 T:norx6441v2 8.92 8.98 9.10 T:norx3241v3 8.94 8.99 9.10 T:norx3241v2 8.96 9.06 9.27 T:morus640128v1 9.09 9.20 10.03 T:norx6441v1 9.37 9.42 9.50 T:morus640128v2 10.74 10.81 10.93 T:norx3241v1 11.10 11.16 11.31 T:norx6461v2 11.15 11.21 12.17 T:norx6461v3 11.37 11.42 11.69 T:morus1280128v1 13.20 13.26 13.57 T:norx3261v2 13.23 13.30 13.64 T:norx3261v3 13.50 13.56 14.45 T:norx6461v1 13.70 13.77 13.85 T:morus1280128v2 15.91 15.94 16.05 T:norx3261v1 15.91 15.94 16.07 T:morus1280256v2 15.88 15.98 16.38 T:morus1280256v1 17.13 17.46 17.86 T:norx6444v3 17.41 17.59 18.19 T:norx6444v2 19.78 19.89 20.58 T:aegis128l 20.78 20.92 21.40 T:norx6444v1 21.43 21.88 22.77 T:riverkeyakv2 21.77 22.05 23.32 T:aegis128 22.86 23.27 24.11 T:acorn128v2 23.70 23.78 24.29 T:tiaoxinv1 23.59 23.80 24.18 T:tiaoxinv2 23.65 24.00 24.49 T:acorn128v3 26.11 26.30 27.46 T:aegis256 27.84 28.04 29.07 T:ketjeminorv2 26.69? 28.34? 30.55? T:oceankeyakv2 27.41? 28.34? 30.71? T:seakeyakv2 28.41 28.99 31.07 T:lakekeyakv2 29.71 29.84 31.00 ascon128av12 31.49 32.08 33.80 T:lakekeyakv1 30.65? 33.40? 40.44? T:lunarkeyakv2 34.50 34.63 35.88 T:aeadaes128ocbtaglen128v1 34.49 34.64 34.93 T:aeadaes128ocbtaglen64v1 34.49 34.70 35.87 T:aeadaes128ocbtaglen96v1 37.23 37.78 40.28 T:aes128gcmv1 38.66 38.90 39.83 T:ketjemajorv2 39.58 39.75 40.96 T:aeadaes192ocbtaglen96v1 39.39 39.77 40.90 T:aeadaes192ocbtaglen128v1 39.52 39.93 40.96 T:aeadaes192ocbtaglen64v1 40.42 40.74 41.24 ascon128v12 41.04 41.99 44.00 T:aes256gcmv1 43.86 44.17 45.28 T:aeadaes256ocbtaglen128v1 43.98 44.41 45.36 T:aeadaes256ocbtaglen96v1 44.01 44.43 45.94 T:aeadaes256ocbtaglen64v1 44.41 44.71 46.00 T:aes128otrsv3 44.46 44.76 46.05 T:aes128otrsv1 44.53 44.83 46.11 T:aes128otrsv2 47.25 47.42 50.41 T:aes128otrpv2 47.32 47.61 48.90 T:aes128otrpv3 47.21 47.97 49.15 T:aes128otrpv1 47.91 48.14 49.12 T:ascon128av11 47.87 48.15 49.18 aegis128l 48.11 48.28 49.16 T:ascon96v1 48.39 49.16 50.25 T:ascon128v11 48.76 49.81 50.54 T:ascon128v1 52.37 52.58 55.11 T:aes128otrcv3 55.82 56.07 57.84 T:colm0v1 57.20 57.56 58.98 T:colm127v1 56.59 58.01 58.81 T:proest256otrv1 58.66 58.93 60.82 T:aes256otrsv1 58.60 58.95 61.95 T:aes256otrsv3 58.45 59.04 60.22 T:aes256otrsv2 61.36 61.59 62.86 T:aes256otrpv2 61.69 61.98 63.37 T:aes256otrpv3 61.44 62.08 63.06 T:aes256otrpv1 63.84 64.50 65.85 T:deoxysi128v141 65.72 66.12 69.15 T:aes128n8t8silcv2 65.64 66.39 72.93 T:aes128n12t8silcv2 65.95 66.43 67.79 T:aes128n12t8silcv3 67.73 68.32 69.96 T:aes256otrcv3 72.70 73.07 79.36 T:deoxysi256v141 73.30 74.27 80.40 T:aes128n8t8clocv2 73.85 74.40 75.80 T:aes128n12t8clocv3 74.00 74.91 80.91 T:aes128n12t8clocv2 74.36 75.03 76.68 T:aes128n8clocv1 74.30 75.62 81.71 T:aes128n12clocv1 78.16 79.30 81.74 T:ketjesrv1 80.21 80.59 86.12 T:ketjesrv2 84.76 85.20 87.32 T:aesjambuv1 102.21 103.17 109.16 T:deoxysii128v141 133.77 134.88 141.66 T:proest128otrv1 134.74 135.63 140.97 T:ketjejrv1 146.58 151.21 152.79 T:aezv5 148.76 153.12 157.06 T:aezv4 210.13 216.05 218.43 T:deoxysneq128128v1 210.41 216.17 218.92 T:deoxysneq128128v13 250.33 251.75 253.92 T:ketjejrv2 307.75 311.66 313.72 T:deoxysii256v141 318.81 321.40 325.06 T:deoxyseq128128v1 317.96 326.15 329.28 T:deoxyseq128128v13 361.07 366.87 369.52 T:deoxysneq256128v1 364.99 366.98 368.51 T:deoxysneq256128v13 389.76 395.41 397.81 T:aezv1 406.64 410.12 413.78 T:aezv3 478.15 481.91 483.48 T:twine80n6t4clocv3 481.00 484.08 487.21 T:twine80n6t4clocv2 549.56 551.67 553.91 T:deoxyseq256128v1 550.36 555.31 558.74 T:deoxyseq256128v13 2233.79 2245.20 2271.64 T:acorn128 3418.85 3427.31 3439.14 T:led80n6t4silcv3 3422.84 3430.15 3439.54 T:led80n6t4silcv2 3454.95 3462.37 3475.14 T:led80n6silcv1 7958.28 7968.85 8014.98 T:present80n6silcv1 7958.56 7974.87 8033.60 T:present80n6t4silcv3 7958.62 7984.60 8009.41 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 7.49 7.56 7.63 T:norx6441v2 7.52 7.62 7.72 T:norx6441v3 8.90 8.95 9.03 T:morus640128v1 8.91 8.96 9.10 T:morus640128v2 8.92 8.97 9.09 T:norx3241v3 8.88 8.98 9.08 T:norx6441v1 8.93 8.99 9.13 T:norx3241v2 10.72 10.80 10.95 T:norx3241v1 10.96 11.06 11.72 T:morus1280128v1 11.11 11.17 11.36 T:norx6461v2 11.14 11.24 11.40 T:norx6461v3 13.10 13.30 13.45 T:norx3261v2 13.24 13.32 13.42 T:norx3261v3 13.20 13.34 13.65 T:norx6461v1 13.13 13.90 14.52 T:morus1280128v2 15.90 15.99 16.11 T:norx3261v1 15.64 16.01 17.17 T:morus1280256v1 15.92 16.06 17.20 T:morus1280256v2 17.18 17.44 19.05 T:norx6444v3 16.87? 17.75? 19.46? T:norx6444v2 19.64 19.93 20.48 T:aegis128l 21.07 21.26 21.79 T:norx6444v1 21.26 21.58 22.74 T:aegis128 21.94 22.27 23.54 T:riverkeyakv2 22.80 23.27 24.01 T:acorn128v2 23.40 23.74 25.28 T:tiaoxinv2 23.61 23.75 23.84 T:tiaoxinv1 24.30 24.88 25.02 T:acorn128v3 25.14 25.78 27.46 T:aegis256 27.22 27.43 28.08 T:ketjeminorv2 27.60 28.02 28.72 T:seakeyakv2 27.65 28.27 30.29 T:oceankeyakv2 28.10 28.69 29.56 T:lakekeyakv2 29.65 29.76 30.89 ascon128av12 31.77 31.96 32.37 T:lakekeyakv1 31.54? 34.04? 39.42? T:lunarkeyakv2 34.33 34.78 36.34 T:aeadaes128ocbtaglen128v1 34.68 34.94 35.43 T:aeadaes128ocbtaglen64v1 34.69 35.15 36.52 T:aeadaes128ocbtaglen96v1 37.10 38.02 40.81 T:aes128gcmv1 38.41 38.66 39.57 T:ketjemajorv2 39.52 39.71 40.45 T:aeadaes192ocbtaglen128v1 39.43 39.75 41.22 T:aeadaes192ocbtaglen96v1 39.32 40.12 41.19 T:aeadaes192ocbtaglen64v1 40.12 40.54 40.85 ascon128v12 41.04 42.28 44.84 T:aes256gcmv1 43.78 44.10 45.37 T:aeadaes256ocbtaglen96v1 43.57 44.21 45.54 T:aeadaes256ocbtaglen128v1 43.98 44.37 45.55 T:aeadaes256ocbtaglen64v1 44.31 44.59 45.86 T:aes128otrsv3 44.36 44.68 45.71 T:aes128otrsv1 44.20 44.69 45.69 T:aes128otrsv2 46.59 47.08 48.37 T:aes128otrpv2 46.86 47.20 48.61 T:aes128otrpv1 46.82 47.47 48.56 T:aes128otrpv3 47.68 48.64 49.56 aegis128l 48.88 49.33 50.58 T:ascon128v11 48.95 49.44 51.00 T:ascon128v1 50.53 50.72 51.71 T:ascon96v1 50.69 51.06 51.99 T:ascon128av11 51.58 52.39 53.43 T:aes128otrcv3 55.38 55.77 61.29 T:colm0v1 56.87 57.29 58.91 T:colm127v1 56.89 57.57 58.61 T:proest256otrv1 58.59 59.05 62.34 T:aes256otrsv3 58.49 59.08 60.15 T:aes256otrsv2 58.31 60.09 63.98 T:aes256otrsv1 61.25 61.54 62.83 T:aes256otrpv2 61.55 61.87 63.17 T:aes256otrpv3 61.29? 61.99? 68.99? T:aes256otrpv1 65.06 65.40 67.26 T:aes128n12t8silcv2 65.32 65.74 66.99 T:aes128n8t8silcv2 65.10 66.21 67.72 T:aes128n12t8silcv3 67.28 67.53 71.95 T:aes256otrcv3 72.38 73.18 75.46 T:deoxysi128v141 76.37 76.98 78.41 T:aes128n12clocv1 76.65 77.06 82.37 T:aes128n8t8clocv2 76.60 77.14 78.42 T:aes128n12t8clocv2 76.80 77.26 84.14 T:aes128n12t8clocv3 77.04 77.62 79.31 T:aes128n8clocv1 77.70 78.71 84.91 T:ketjesrv1 79.02 80.97 83.16 T:deoxysi256v141 80.63 81.67 88.55 T:ketjesrv2 83.84 84.29 87.47 T:aesjambuv1 102.48 103.41 104.54 T:deoxysii128v141 134.02 134.88 138.80 T:proest128otrv1 135.44 137.26 142.76 T:ketjejrv1 146.29 151.23 153.76 T:aezv5 148.00 153.40 155.14 T:aezv4 243.57 249.69 250.64 T:ketjejrv2 264.85 267.45 269.84 T:deoxysneq128128v1 261.79 267.57 271.11 T:deoxysneq128128v13 310.12 311.63 313.80 T:deoxysii256v141 318.64 321.99 324.99 T:deoxyseq128128v13 392.61 396.04 397.88 T:aezv1 404.32 409.63 411.75 T:aezv3 420.13 422.02 427.62 T:deoxyseq128128v1 418.96 426.30 429.09 T:deoxysneq256128v13 422.12 427.27 430.16 T:deoxysneq256128v1 481.43 483.63 485.03 T:twine80n6t4clocv2 474.05 483.73 486.46 T:twine80n6t4clocv3 551.96 555.30 559.68 T:deoxyseq256128v13 658.52 664.12 670.19 T:deoxyseq256128v1 2282.83 2292.59 2311.82 T:acorn128 3418.27 3431.19 3443.41 T:led80n6t4silcv3 3424.11 3439.38 3454.74 T:led80n6t4silcv2 3449.03 3459.85 3472.35 T:led80n6silcv1 7964.81 7972.40 7983.96 T:present80n6silcv1 7962.08 7986.70 8011.65 T:present80n6t4silcv3 7971.70 7991.60 8022.08 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 7.53 7.56 7.71 T:norx6441v2 7.57 7.61 7.69 T:norx6441v3 8.91 8.96 9.09 T:morus640128v1 8.94 8.97 9.13 T:morus640128v2 8.95 8.98 9.04 T:norx3241v2 8.94 8.99 9.16 T:norx3241v3 9.00 9.18 9.93 T:norx6441v1 10.75 10.81 10.96 T:norx3241v1 10.98 11.01 11.08 T:morus1280128v1 11.13 11.21 11.47 T:norx6461v2 11.20 11.23 11.29 T:norx6461v3 13.22 13.30 14.16 T:norx3261v3 13.25 13.31 13.44 T:norx3261v2 13.28 13.34 13.41 T:norx6461v1 13.78 13.87 13.97 T:morus1280128v2 15.90 15.95 16.12 T:morus1280256v1 15.94 15.98 16.19 T:norx3261v1 15.88 16.14 17.23 T:morus1280256v2 17.03 17.48 17.83 T:norx6444v3 17.73 18.01 18.81 T:norx6444v2 19.80 20.10 21.62 T:aegis128l 21.08 21.29 21.64 T:norx6444v1 21.25 21.39 22.61 T:aegis128 21.99 22.10 22.64 T:riverkeyakv2 22.97 23.10 23.60 T:acorn128v2 23.57 23.72 23.94 T:tiaoxinv2 23.59 23.73 23.92 T:tiaoxinv1 24.35 24.87 25.20 T:acorn128v3 25.34 25.63 26.91 T:aegis256 27.34 27.72 29.10 T:ketjeminorv2 26.78? 27.95? 31.05? T:oceankeyakv2 26.31? 28.70? 30.24? T:seakeyakv2 28.75 28.96 29.30 T:lakekeyakv2 29.60 29.70 30.71 ascon128av12 31.85 32.15 33.14 T:lakekeyakv1 31.74? 33.80? 36.33? T:lunarkeyakv2 34.56 34.84 35.49 T:aeadaes128ocbtaglen64v1 34.68 34.87 36.34 T:aeadaes128ocbtaglen96v1 34.77 35.03 36.45 T:aeadaes128ocbtaglen128v1 37.14 38.12 39.31 T:aes128gcmv1 38.48 39.17 40.39 T:ketjemajorv2 39.55 39.75 41.28 T:aeadaes192ocbtaglen128v1 39.63 39.99 41.23 T:aeadaes192ocbtaglen96v1 39.63 40.07 41.36 T:aeadaes192ocbtaglen64v1 40.22 40.52 40.82 ascon128v12 41.51 42.55 43.74 T:aes256gcmv1 43.98 44.20 45.42 T:aeadaes256ocbtaglen64v1 43.82 44.21 45.46 T:aeadaes256ocbtaglen96v1 43.86 44.29 45.65 T:aeadaes256ocbtaglen128v1 44.36 44.52 45.66 T:aes128otrsv1 44.28 44.67 45.55 T:aes128otrsv2 44.56 45.59 47.77 T:aes128otrsv3 46.81 47.10 48.27 T:aes128otrpv1 46.99 47.28 48.74 T:aes128otrpv2 47.24 47.61 48.96 T:aes128otrpv3 47.78 48.16 49.04 T:ascon96v1 47.98 48.31 49.67 T:ascon128av11 48.00 48.42 49.53 aegis128l 49.02 49.33 50.35 T:ascon128v1 49.13 49.76 50.53 T:ascon128v11 51.30 52.32 53.14 T:aes128otrcv3 55.38 55.91 56.86 T:colm0v1 56.12? 56.60? 62.94? T:colm127v1 56.83 57.47 62.88 T:proest256otrv1 58.59 59.02 64.56 T:aes256otrsv1 58.69 59.05 60.16 T:aes256otrsv3 58.44? 59.59? 65.23? T:aes256otrsv2 61.31 61.68 62.79 T:aes256otrpv1 61.37 61.71 62.94 T:aes256otrpv2 61.49 62.16 63.33 T:aes256otrpv3 65.24 65.82 67.06 T:aes128n8t8silcv2 65.25 65.96 67.25 T:aes128n12t8silcv2 65.33 67.01 71.18 T:aes128n12t8silcv3 67.20 68.18 69.68 T:aes256otrcv3 72.51 74.00 76.02 T:deoxysi128v141 76.38 76.62 77.83 T:aes128n8t8clocv2 76.50 76.94 82.66 T:aes128n12clocv1 76.47 77.38 78.51 T:aes128n12t8clocv3 76.62 77.46 78.66 T:aes128n12t8clocv2 77.79 78.30 80.59 T:ketjesrv1 77.38 78.65 84.19 T:aes128n8clocv1 78.98 80.07 85.79 T:deoxysi256v141 80.77 81.38 82.20 T:ketjesrv2 83.81 84.28 89.69 T:aesjambuv1 102.64 103.57 108.02 T:deoxysii128v141 134.50 135.66 140.87 T:proest128otrv1 135.67 138.28 142.38 T:ketjejrv1 146.14 147.02 152.69 T:aezv5 147.64 149.82 153.35 T:aezv4 243.85 248.74 253.07 T:ketjejrv2 260.73 267.04 269.32 T:deoxysneq128128v13 265.58 268.07 271.04 T:deoxysneq128128v1 308.08 313.37 317.24 T:deoxysii256v141 316.86 322.25 324.72 T:deoxyseq128128v13 388.30 396.67 398.25 T:aezv1 405.95 409.80 412.10 T:aezv3 415.87 421.64 425.16 T:deoxyseq128128v1 421.16 425.56 429.19 T:deoxysneq256128v13 423.46 428.71 429.95 T:deoxysneq256128v1 479.06 481.60 482.38 T:twine80n6t4clocv3 478.90 482.27 485.97 T:twine80n6t4clocv2 550.48 554.27 560.39 T:deoxyseq256128v13 656.76 661.95 672.26 T:deoxyseq256128v1 2279.57 2306.10 2321.02 T:acorn128 3423.00 3430.72 3436.86 T:led80n6t4silcv2 3421.82 3439.07 3476.52 T:led80n6t4silcv3 3453.75 3463.74 3477.41 T:led80n6silcv1 7958.82 7973.16 8009.73 T:present80n6silcv1 7959.03 7982.66 8033.47 T:present80n6t4silcv2 7968.91 7985.13 8020.26 T:present80n6t4silcv3

Cycles/byte for 0+long encrypt 25% 50% 75% aead 7.29 7.40 7.54 T:norx6441v2 7.35 7.41 7.64 T:norx6441v3 8.66 8.77 8.85 T:norx3241v3 8.71 8.82 8.88 T:norx3241v2 8.73 8.83 8.90 T:morus640128v1 8.89 9.03 9.22 T:norx6441v1 9.22 9.33 9.53 T:morus640128v2 10.27 10.36 10.52 T:morus1280128v1 10.50 10.58 10.67 T:norx3241v1 10.94 11.05 11.41 T:norx6461v3 10.94 11.06 11.48 T:norx6461v2 13.03 13.10 13.17 T:norx3261v3 13.00 13.10 13.19 T:norx3261v2 13.28 13.37 13.54 T:norx6461v1 13.79 13.95 14.11 T:morus1280128v2 15.68 15.75 15.83 T:norx3261v1 15.64 15.85 15.96 T:morus1280256v1 15.53 15.90 16.61 T:morus1280256v2 15.78 16.60 17.24 T:norx6444v2 16.39? 16.95? 18.90? T:norx6444v3 19.36 19.78 20.51 T:norx6444v1 19.42 19.85 20.13 T:aegis128l 19.90 20.06 20.27 T:riverkeyakv2 19.78? 21.05? 22.75? T:oceankeyakv2 21.34 21.46 21.54 T:aegis128 21.93 22.30 22.92 T:tiaoxinv2 18.50? 22.33? 25.69? T:lunarkeyakv2 22.20 22.56 24.57 T:tiaoxinv1 22.80 23.04 23.77 T:acorn128v3 23.68 23.74 24.18 T:acorn128v2 23.98 24.59 24.78 T:ketjeminorv2 25.38 25.56 25.66 T:aegis256 25.46 25.88 26.69 T:lakekeyakv2 25.76 26.37 27.46 T:seakeyakv2 26.50 27.10 28.47 T:aes128gcmv1 26.08? 27.46? 30.05? T:aes256gcmv1 27.48 27.60 27.84 ascon128av12 29.43 30.36 31.27 T:lakekeyakv1 33.35 33.50 33.71 T:aeadaes128ocbtaglen128v1 33.39 33.66 34.41 T:aeadaes128ocbtaglen96v1 33.60 33.84 34.46 T:aeadaes128ocbtaglen64v1 33.39 33.98 36.34 T:ketjemajorv2 34.11 34.22 35.14 T:colm0v1 34.12 34.57 35.23 T:colm127v1 36.16 36.39 37.88 aegis128l 37.95 38.06 38.27 ascon128v12 38.39 38.57 39.03 T:aeadaes192ocbtaglen64v1 38.39 38.66 39.38 T:aeadaes192ocbtaglen96v1 38.46 39.06 41.92 T:aeadaes192ocbtaglen128v1 40.45 40.65 41.40 T:aes128otrsv3 40.41 40.76 41.47 T:aes128otrsv2 40.53 40.97 42.76 T:aes128otrsv1 42.72 42.91 44.18 T:aeadaes256ocbtaglen96v1 42.71 42.94 43.68 T:aeadaes256ocbtaglen64v1 42.77 43.00 44.80 T:aeadaes256ocbtaglen128v1 42.96 43.54 44.87 T:aes128n8t8silcv2 43.42 44.08 46.62 T:aes128n12t8silcv3 43.61 44.09 46.38 T:aes128n12t8silcv2 46.22 46.40 46.92 T:aes128otrpv3 46.39 46.68 48.83 T:aes128otrpv1 46.27 46.88 47.07 T:aes128otrpv2 47.69 47.98 48.45 T:ascon96v1 47.74 48.05 49.21 T:ascon128av11 47.98 48.52 49.28 T:aes128n12t8clocv2 48.04 48.69 49.62 T:aes128n12clocv1 48.70 48.94 49.39 T:aes128n8t8clocv2 48.22 48.94 50.29 T:aes128n8clocv1 48.48 48.99 49.52 T:ascon128v1 48.98 49.14 49.42 T:aes128n12t8clocv3 48.62 49.27 50.34 T:ascon128v11 51.87 52.29 54.84 T:aes128otrcv3 54.61 54.89 55.35 T:aes256otrsv2 54.84 55.00 55.96 T:aes256otrsv3 54.65 55.30 57.02 T:aes256otrsv1 57.01 58.29 60.23 T:proest256otrv1 60.43 60.71 61.53 T:aes256otrpv3 60.52 61.06 62.91 T:aes256otrpv2 60.45 61.08 62.97 T:aes256otrpv1 63.91 64.47 66.54 T:deoxysi128v141 66.46 66.62 67.37 T:deoxysii128v141 66.81 67.62 70.71 T:aes256otrcv3 70.55 70.81 72.48 T:ketjesrv1 71.57 72.16 72.88 T:deoxysi256v141 75.61 76.17 77.80 T:ketjesrv2 85.01 85.43 87.12 T:aesjambuv1 105.23 105.67 108.39 T:aezv5 118.73 120.91 122.19 T:aezv4 123.81? 124.67? 138.41? T:ketjejrv1 133.31 134.76 144.90 T:proest128otrv1 188.24 190.97 197.34 T:aezv1 202.54 204.38 215.73 T:deoxysii256v141 209.06 209.75 223.38 T:deoxyseq128128v1 209.67 212.39 222.89 T:deoxyseq128128v13 209.45 212.49 221.98 T:deoxysneq128128v1 209.64 212.58 222.79 T:deoxysneq128128v13 235.41 243.76 248.73 T:ketjejrv2 264.66 275.34 278.94 T:aezv3 324.07 332.52 336.57 T:twine80n6t4clocv2 324.23 333.50 337.53 T:twine80n6t4clocv3 362.68 368.69 378.06 T:deoxyseq256128v1 362.65 370.37 374.24 T:deoxysneq256128v13 362.74 371.69 378.91 T:deoxyseq256128v13 362.16 372.04 377.03 T:deoxysneq256128v1 2223.29 2245.42 2262.60 T:acorn128 2273.81 2292.28 2304.29 T:led80n6t4silcv3 2284.75 2298.75 2311.86 T:led80n6t4silcv2 2302.83 2319.61 2330.63 T:led80n6silcv1 5292.95 5312.27 5337.25 T:present80n6silcv1 5296.28 5320.08 5361.43 T:present80n6t4silcv3 5302.23 5320.78 5342.97 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 7.33 7.40 7.45 T:norx6441v2 7.37 7.46 7.57 T:norx6441v3 8.57 8.62 8.80 T:morus640128v1 8.55 8.64 8.71 T:morus640128v2 8.68 8.80 9.09 T:norx6441v1 8.72 8.81 8.92 T:norx3241v3 8.73 8.82 8.87 T:norx3241v2 10.39 10.53 10.91 T:morus1280128v1 10.53 10.60 10.67 T:norx3241v1 10.94 11.00 11.08 T:norx6461v2 10.97 11.10 11.43 T:norx6461v3 13.03 13.12 13.21 T:norx3261v3 13.05 13.13 13.16 T:norx3261v2 13.04 13.14 13.25 T:norx6461v1 13.95 14.14 14.51 T:morus1280128v2 15.76 15.86 16.09 T:norx3261v1 15.79 15.91 15.98 T:morus1280256v2 15.84 15.94 16.05 T:morus1280256v1 16.16 16.53 17.19 T:norx6444v3 16.89 17.16 17.46 T:norx6444v2 19.76 19.90 20.11 T:aegis128l 20.21 20.33 20.60 T:norx6444v1 20.18? 20.40? 22.70? T:aegis128 20.02 20.52 21.03 T:riverkeyakv2 18.71? 20.93? 22.16? T:oceankeyakv2 17.19? 21.28? 24.80? T:lunarkeyakv2 21.69 22.25 23.39 T:tiaoxinv2 22.14 22.58 24.36 T:tiaoxinv1 23.68 23.93 24.11 T:ketjeminorv2 24.06 24.18 24.68 T:aegis256 24.35 24.50 24.69 T:acorn128v3 24.97 25.13 25.99 T:acorn128v2 25.73 26.05 27.24 T:lakekeyakv2 25.71 26.31 27.92 T:seakeyakv2 26.33 26.82 27.85 T:aes128gcmv1 26.51 27.13 27.93 T:aes256gcmv1 27.34 27.73 28.27 ascon128av12 29.71 30.23 30.93 T:lakekeyakv1 33.40 33.56 34.01 T:aeadaes128ocbtaglen128v1 33.50 33.64 34.11 T:aeadaes128ocbtaglen96v1 33.52 33.67 34.45 T:aeadaes128ocbtaglen64v1 33.61 34.00 36.32 T:ketjemajorv2 34.05 34.37 36.11 T:colm0v1 34.32 34.59 36.58 T:colm127v1 36.06 36.17 36.39 aegis128l 38.04 38.16 38.70 ascon128v12 38.50 38.64 39.12 T:aeadaes192ocbtaglen64v1 38.50 38.76 39.77 T:aeadaes192ocbtaglen128v1 38.54 38.90 40.97 T:aeadaes192ocbtaglen96v1 40.33 40.55 41.51 T:aes128otrsv3 40.08 40.69 41.52 T:aes128otrsv2 40.32 40.69 41.96 T:aes128otrsv1 42.69 42.85 43.09 T:aeadaes256ocbtaglen96v1 42.64 43.03 45.08 T:aeadaes256ocbtaglen128v1 42.49 43.10 45.09 T:aeadaes256ocbtaglen64v1 43.02 43.47 44.10 T:aes128n12t8silcv3 43.04 43.69 46.07 T:aes128n12t8silcv2 43.42 43.99 46.42 T:aes128n8t8silcv2 46.08 46.39 47.45 T:aes128otrpv3 46.09 46.40 46.88 T:aes128otrpv2 46.23 46.63 49.44 T:aes128otrpv1 47.76 47.84 48.05 T:ascon96v1 47.96 48.16 48.73 T:ascon128av11 48.09 48.62 50.06 T:aes128n8t8clocv2 48.49 48.82 49.26 T:aes128n12t8clocv2 48.43 49.06 51.91 T:aes128n8clocv1 48.23 49.15 49.41 T:aes128n12clocv1 48.85 49.24 50.02 T:aes128n12t8clocv3 48.96 49.25 49.52 T:ascon128v1 48.86 49.53 51.38 T:ascon128v11 51.55 52.28 54.16 T:aes128otrcv3 54.83 55.07 55.78 T:aes256otrsv3 54.30 55.20 55.69 T:aes256otrsv2 54.87 55.42 57.40 T:aes256otrsv1 57.21 57.87 60.32 T:proest256otrv1 60.51 60.75 61.46 T:aes256otrpv3 60.38 60.93 62.37 T:aes256otrpv1 60.58 61.00 62.25 T:aes256otrpv2 63.98 64.88 65.20 T:deoxysi128v141 66.55 67.18 70.35 T:deoxysii128v141 67.14 67.49 70.65 T:aes256otrcv3 70.11 71.14 72.63 T:ketjesrv1 72.01 72.32 73.61 T:deoxysi256v141 75.18 75.73 77.37 T:ketjesrv2 84.95 85.11 86.85 T:aesjambuv1 105.17 105.86 108.15 T:aezv5 118.62 119.25 122.56 T:aezv4 124.24 126.10 132.04 T:ketjejrv1 133.60 134.29 145.13 T:proest128otrv1 188.02 191.05 198.24 T:aezv1 202.44 204.64 214.92 T:deoxysii256v141 208.72 210.80 222.16 T:deoxyseq128128v13 209.21 211.05 225.74 T:deoxysneq128128v13 210.35 214.29 223.55 T:deoxyseq128128v1 213.88 216.92 224.85 T:deoxysneq128128v1 235.20 237.04 247.14 T:ketjejrv2 264.42 272.61 277.46 T:aezv3 321.88 325.24 336.74 T:twine80n6t4clocv3 323.62 327.03 334.12 T:twine80n6t4clocv2 366.36 368.93 377.20 T:deoxysneq256128v1 362.40 369.88 376.23 T:deoxyseq256128v13 362.28 372.10 377.02 T:deoxyseq256128v1 362.73 372.82 377.77 T:deoxysneq256128v13 2279.55 2295.12 2302.35 T:led80n6t4silcv2 2271.66 2296.24 2317.52 T:acorn128 2276.16 2299.00 2353.81 T:led80n6t4silcv3 2306.29 2319.71 2329.24 T:led80n6silcv1 5303.28 5314.78 5332.77 T:present80n6t4silcv2 5306.94 5326.50 5343.83 T:present80n6t4silcv3 5310.03 5334.21 5355.98 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 7.34 7.40 7.51 T:norx6441v2 7.36 7.44 7.47 T:norx6441v3 8.59 8.64 8.72 T:morus640128v2 8.57 8.69 8.79 T:morus640128v1 8.74 8.79 8.84 T:norx6441v1 8.73 8.80 8.84 T:norx3241v2 8.77 8.81 8.88 T:norx3241v3 10.43 10.49 10.60 T:morus1280128v1 10.50 10.61 10.74 T:norx3241v1 10.95 10.99 11.05 T:norx6461v2 11.01 11.06 11.19 T:norx6461v3 12.98 13.14 13.20 T:norx6461v1 13.13 13.17 13.28 T:norx3261v3 13.09 13.31 14.50 T:norx3261v2 14.02 14.17 14.49 T:morus1280128v2 15.68 15.76 15.86 T:norx3261v1 15.82 15.90 15.98 T:morus1280256v2 15.82 15.99 16.55 T:morus1280256v1 16.29 16.44 16.67 T:norx6444v3 17.06 17.36 17.68 T:norx6444v2 19.99 20.18 20.32 T:riverkeyakv2 19.96 20.23 21.18 T:aegis128l 20.19 20.25 20.92 T:aegis128 20.23 20.36 20.58 T:norx6444v1 20.30? 21.10? 22.86? T:oceankeyakv2 22.11 22.37 22.84 T:tiaoxinv1 22.02 22.45 23.51 T:tiaoxinv2 18.47? 22.89? 25.84? T:lunarkeyakv2 23.75 23.90 24.54 T:ketjeminorv2 23.96 24.18 24.49 T:aegis256 24.47 24.53 24.79 T:acorn128v3 24.91 25.05 25.20 T:acorn128v2 23.74? 26.00? 27.69? T:seakeyakv2 25.80? 26.18? 29.68? T:lakekeyakv2 25.98 26.98 28.01 T:aes256gcmv1 27.31 27.45 27.63 ascon128av12 26.08? 27.58? 30.26? T:aes128gcmv1 29.79? 30.35? 33.65? T:lakekeyakv1 33.48 33.57 34.02 T:aeadaes128ocbtaglen128v1 33.56 33.83 34.83 T:aeadaes128ocbtaglen96v1 33.22 33.86 34.77 T:ketjemajorv2 33.78 34.04 34.45 T:colm0v1 33.62 34.10 35.57 T:aeadaes128ocbtaglen64v1 34.34 34.44 34.58 T:colm127v1 36.06 36.25 36.50 aegis128l 38.07 38.22 38.72 ascon128v12 38.39 38.54 38.81 T:aeadaes192ocbtaglen96v1 38.48 38.63 39.47 T:aeadaes192ocbtaglen64v1 38.65 39.08 41.95 T:aeadaes192ocbtaglen128v1 40.42 40.62 42.56 T:aes128otrsv1 40.31 40.67 41.70 T:aes128otrsv2 40.28 40.70 41.53 T:aes128otrsv3 42.75 42.92 43.68 T:aeadaes256ocbtaglen64v1 42.83 43.02 43.47 T:aeadaes256ocbtaglen96v1 42.65 43.04 44.80 T:aeadaes256ocbtaglen128v1 42.99 43.48 44.07 T:aes128n12t8silcv3 43.18 43.74 43.84 T:aes128n8t8silcv2 43.23 43.88 46.24 T:aes128n12t8silcv2 46.14 46.39 47.03 T:aes128otrpv3 46.33 46.48 47.02 T:aes128otrpv2 46.29 46.64 49.17 T:aes128otrpv1 47.71 47.80 48.07 T:ascon96v1 47.94 48.19 48.74 T:ascon128av11 48.09 48.89 49.43 T:aes128n8t8clocv2 48.39 48.91 51.93 T:aes128n8clocv1 47.99 48.92 49.45 T:aes128n12t8clocv2 48.02 49.00 49.53 T:aes128n12clocv1 48.89 49.08 49.78 T:aes128n12t8clocv3 49.02 49.25 50.48 T:ascon128v1 49.10 49.34 51.32 T:ascon128v11 51.84 53.28 55.84 T:aes128otrcv3 54.75 55.09 55.81 T:aes256otrsv3 54.81 55.43 57.32 T:aes256otrsv1 54.96 55.61 57.87 T:aes256otrsv2 56.92 57.64 58.61 T:proest256otrv1 60.27 60.90 63.20 T:aes256otrpv1 60.61 61.01 63.25 T:aes256otrpv2 60.44 61.05 63.04 T:aes256otrpv3 64.52 65.06 67.74 T:deoxysi128v141 66.50 67.16 70.03 T:deoxysii128v141 67.27 67.98 70.68 T:aes256otrcv3 70.37 70.54 70.93 T:ketjesrv1 72.17 72.49 75.41 T:deoxysi256v141 75.49 76.17 77.32 T:ketjesrv2 85.02 85.16 86.73 T:aesjambuv1 105.07 105.94 109.17 T:aezv5 118.72 119.70 121.58 T:aezv4 124.41 125.44 127.42 T:ketjejrv1 133.45 134.43 136.38 T:proest128otrv1 188.19 190.85 199.42 T:aezv1 202.37 203.19 214.67 T:deoxysii256v141 209.83 211.98 221.22 T:deoxysneq128128v13 209.05 212.41 222.88 T:deoxyseq128128v1 210.46 212.41 219.91 T:deoxyseq128128v13 213.65 215.56 224.52 T:deoxysneq128128v1 234.23 235.70 249.12 T:ketjejrv2 264.05 266.88 275.41 T:aezv3 321.63 324.55 336.80 T:twine80n6t4clocv2 323.28 326.12 335.54 T:twine80n6t4clocv3 361.18 365.79 372.30 T:deoxyseq256128v13 362.67 366.52 376.37 T:deoxysneq256128v13 367.02 371.76 378.51 T:deoxysneq256128v1 363.55 373.61 380.89 T:deoxyseq256128v1 2257.48 2288.05 2313.94 T:led80n6t4silcv3 2272.18 2292.92 2301.59 T:led80n6t4silcv2 2275.63 2297.25 2321.10 T:acorn128 2300.55 2319.14 2330.16 T:led80n6silcv1 5300.57 5318.34 5349.85 T:present80n6t4silcv3 5308.22 5318.90 5347.17 T:present80n6silcv1 5303.13 5330.33 5349.57 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 9.71 9.72 9.93 T:norx6441v2 9.73 9.74 9.81 T:norx6441v3 10.61 10.62 10.68 T:norx3241v2 10.62 10.65 10.72 T:norx3241v3 10.78 10.83 10.93 T:morus640128v1 11.22 11.25 11.41 T:norx6441v1 11.23 11.26 11.31 T:morus640128v2 12.36 12.41 12.58 T:norx3241v1 13.89 13.93 14.10 T:norx6461v2 13.94 14.04 14.51 T:norx6461v3 15.26 15.28 15.38 T:norx3261v2 15.27 15.29 15.36 T:norx3261v3 16.13 16.15 16.24 T:norx6461v1 16.16 16.19 16.50 T:morus1280128v1 17.29 17.38 17.96 T:morus1280128v2 17.80 17.82 17.89 T:norx3261v1 20.50 20.62 20.84 T:morus1280256v1 20.77 20.85 21.10 T:morus1280256v2 23.71 23.77 24.34 T:aegis128l 23.74 23.97 25.31 T:riverkeyakv2 24.56 24.76 26.10 T:aegis128 25.98 25.99 26.32 T:norx6444v2 26.14 26.25 26.86 T:norx6444v3 27.68 27.98 28.88 T:acorn128v2 28.48 28.62 29.26 T:acorn128v3 29.96 30.00 30.35 T:aegis256 30.92 31.01 31.78 T:norx6444v1 31.12 31.19 32.41 ascon128av12 31.61 31.71 31.99 T:ketjeminorv2 32.73 32.78 33.08 T:lakekeyakv2 33.33 33.38 33.75 T:tiaoxinv1 33.34 33.50 34.03 T:tiaoxinv2 36.25 36.26 36.46 T:aeadaes128ocbtaglen96v1 36.25 36.30 36.77 T:aeadaes128ocbtaglen128v1 36.25 36.30 36.52 T:aeadaes128ocbtaglen64v1 37.54 37.68 39.83 T:lakekeyakv1 40.39 40.73 42.97 T:seakeyakv2 41.40 41.44 42.04 T:aeadaes192ocbtaglen128v1 41.39 41.51 42.10 T:aeadaes192ocbtaglen64v1 41.42 41.51 42.73 T:aeadaes192ocbtaglen96v1 41.88 42.04 42.71 ascon128v12 44.11 44.56 46.07 T:aes128gcmv1 45.96 46.03 46.55 T:aeadaes256ocbtaglen128v1 45.95 46.05 47.48 T:aeadaes256ocbtaglen96v1 46.06 46.27 47.56 T:aeadaes256ocbtaglen64v1 46.06 46.28 47.56 T:ketjemajorv2 47.05 47.14 47.69 T:aes128otrsv1 47.01 47.24 47.89 T:aes128otrsv2 47.07 47.34 48.71 T:aes128otrsv3 48.49 48.81 49.54 T:aes256gcmv1 49.52 49.69 51.24 T:aes128otrpv2 49.61 49.73 51.35 T:aes128otrpv1 49.76 49.99 51.72 T:aes128otrpv3 50.09 50.15 51.29 T:ascon96v1 50.20 50.34 50.77 T:ascon128v11 50.29 50.36 51.49 T:ascon128v1 50.12 50.38 51.40 T:ascon128av11 50.51 50.84 53.57 T:oceankeyakv2 54.64 54.87 56.00 aegis128l 55.26 55.56 56.61 T:aes128otrcv3 58.40 58.65 60.13 T:colm0v1 59.71 60.02 61.36 T:colm127v1 61.52 61.74 63.12 T:aes256otrsv2 61.66 61.97 63.16 T:aes256otrsv1 61.85 62.16 63.41 T:aes256otrsv3 63.51 64.01 65.65 T:proest256otrv1 64.18 64.34 65.96 T:aes256otrpv2 64.27 64.65 65.99 T:aes256otrpv1 64.78 65.05 66.54 T:aes256otrpv3 66.61 66.85 68.65 T:deoxysi128v141 67.68 67.80 69.99 T:aes128n12t8silcv2 67.52 67.98 69.21 T:aes128n12t8silcv3 67.98 68.37 69.94 T:aes128n8t8silcv2 71.80 72.09 73.54 T:aes256otrcv3 75.32 75.59 77.23 T:aes128n12clocv1 75.40 75.66 77.51 T:aes128n12t8clocv2 75.39 75.74 77.43 T:aes128n8t8clocv2 75.60 76.06 77.70 T:aes128n8clocv1 75.61 76.11 77.77 T:aes128n12t8clocv3 77.28 77.74 79.34 T:deoxysi256v141 81.30 81.68 82.85 T:ketjesrv1 83.69 83.97 85.22 T:ketjesrv2 83.95 85.08 87.13 T:lunarkeyakv2 86.84 87.93 88.41 T:aesjambuv1 105.42 106.45 112.26 T:deoxysii128v141 138.09 140.02 144.85 T:ketjejrv1 140.78 142.11 148.80 T:proest128otrv1 143.95 145.28 152.33 T:aezv5 143.84 145.29 152.97 T:aezv4 212.35 213.44 221.27 T:deoxysneq128128v1 211.87 214.06 220.77 T:deoxysneq128128v13 250.69 253.43 258.47 T:ketjejrv2 308.79 314.02 319.27 T:deoxysii256v141 317.90 320.77 327.20 T:deoxyseq128128v1 324.68 328.35 330.30 T:deoxyseq128128v13 369.97 372.39 375.67 T:deoxysneq256128v1 365.23 372.46 377.47 T:deoxysneq256128v13 380.65 385.22 389.62 T:aezv1 410.96 412.94 416.19 T:aezv3 476.54 483.48 488.69 T:twine80n6t4clocv3 477.42 483.78 489.02 T:twine80n6t4clocv2 552.91 555.28 557.19 T:deoxyseq256128v1 558.70 561.05 562.15 T:deoxyseq256128v13 2524.11 2533.03 2542.74 T:acorn128 3449.31 3457.73 3467.27 T:led80n6t4silcv3 3446.77 3458.01 3491.33 T:led80n6t4silcv2 3478.23 3484.19 3492.21 T:led80n6silcv1 7998.82 8013.23 8065.13 T:present80n6t4silcv2 8013.60 8021.66 8034.81 T:present80n6silcv1 8007.58 8030.68 8074.64 T:present80n6t4silcv3

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 9.72 9.75 9.86 T:norx6441v2 9.77 9.81 9.90 T:norx6441v3 10.63 10.65 10.72 T:norx3241v2 10.64 10.65 10.70 T:norx3241v3 10.72 10.74 10.78 T:morus640128v1 10.79 10.81 10.93 T:morus640128v2 11.09 11.11 11.18 T:norx6441v1 12.37 12.38 12.42 T:norx3241v1 13.87 13.90 14.20 T:norx6461v2 13.95 14.01 14.23 T:norx6461v3 15.28 15.29 15.34 T:norx3261v2 15.28 15.31 15.43 T:norx3261v3 15.77 15.80 15.95 T:morus1280128v1 15.91 15.93 16.11 T:norx6461v1 17.33 17.35 17.45 T:morus1280128v2 17.84 17.89 18.28 T:norx3261v1 20.54 20.58 20.82 T:morus1280256v1 20.86 20.91 21.30 T:morus1280256v2 23.79 23.83 23.92 T:aegis128l 24.09 24.32 25.71 T:aegis128 24.32 24.40 25.15 T:riverkeyakv2 26.06 26.17 26.79 T:norx6444v3 26.28 26.31 26.58 T:norx6444v2 27.81 27.92 28.74 T:acorn128v2 29.08 29.39 30.42 T:aegis256 29.12 29.60 30.02 T:acorn128v3 30.93 30.97 31.59 T:ketjeminorv2 31.03 31.12 31.28 ascon128av12 31.40 31.62 33.37 T:norx6444v1 33.09 33.15 33.58 T:lakekeyakv2 33.30 33.38 34.72 T:tiaoxinv1 33.36 33.75 35.15 T:tiaoxinv2 36.87 36.97 37.39 T:aeadaes128ocbtaglen96v1 36.87 37.02 37.49 T:aeadaes128ocbtaglen128v1 36.94 37.15 38.05 T:aeadaes128ocbtaglen64v1 37.78 37.96 38.61 T:lakekeyakv1 40.89 40.99 41.52 T:seakeyakv2 41.79 42.02 42.13 ascon128v12 42.02 42.13 42.44 T:aeadaes192ocbtaglen128v1 42.05 42.19 43.68 T:aeadaes192ocbtaglen96v1 42.02 42.35 44.12 T:aeadaes192ocbtaglen64v1 44.18 44.48 46.08 T:aes128gcmv1 46.16 46.41 48.08 T:ketjemajorv2 46.71 46.81 47.61 T:aeadaes256ocbtaglen64v1 46.72 46.85 47.31 T:aes128otrsv2 46.89 46.96 47.48 T:aes128otrsv3 46.68 46.98 48.69 T:aeadaes256ocbtaglen128v1 46.85 47.02 47.26 T:aes128otrsv1 46.83 47.13 48.78 T:aeadaes256ocbtaglen96v1 48.78 49.44 51.43 T:aes256gcmv1 49.39 49.46 50.41 T:aes128otrpv1 49.43 49.74 50.50 T:aes128otrpv2 49.72 49.87 50.62 T:aes128otrpv3 50.62 50.82 51.49 T:ascon128v11 50.73 50.91 52.22 T:ascon128v1 50.78 50.97 51.53 T:oceankeyakv2 52.81 52.94 54.47 T:ascon128av11 52.65 53.05 53.87 T:ascon96v1 54.74 54.87 56.72 aegis128l 54.77 55.41 56.96 T:aes128otrcv3 58.16 58.38 60.71 T:colm0v1 59.21 59.39 61.04 T:colm127v1 61.46 61.62 65.23 T:aes256otrsv1 61.54 61.75 62.46 T:aes256otrsv3 61.48 62.00 63.20 T:aes256otrsv2 63.06 63.46 64.71 T:proest256otrv1 64.19 64.56 65.92 T:aes256otrpv2 64.23 64.68 65.96 T:aes256otrpv1 64.50 64.89 66.47 T:aes256otrpv3 67.30 67.63 69.58 T:aes128n12t8silcv2 67.16 67.76 74.37 T:aes128n12t8silcv3 67.34 67.79 69.29 T:aes128n8t8silcv2 71.32 71.71 78.21 T:aes256otrcv3 75.57 76.13 78.99 T:deoxysi128v141 78.15 78.42 80.24 T:aes128n12t8clocv2 78.16 78.44 80.36 T:aes128n12clocv1 78.42 78.89 80.81 T:aes128n12t8clocv3 78.21 79.35 80.45 T:aes128n8t8clocv2 79.06 80.29 81.25 T:aes128n8clocv1 80.85 81.13 82.53 T:ketjesrv1 84.08 84.53 87.07 T:ketjesrv2 84.96 86.16 93.12 T:deoxysi256v141 86.08 86.36 87.77 T:aesjambuv1 84.67 86.44 92.91 T:lunarkeyakv2 105.38 107.15 112.61 T:deoxysii128v141 138.50 140.41 145.90 T:ketjejrv1 140.62 141.87 147.02 T:proest128otrv1 143.62 144.86 151.95 T:aezv4 143.63 145.36 150.92 T:aezv5 249.37 254.90 256.00 T:ketjejrv2 263.63 266.46 274.16 T:deoxysneq128128v1 265.27 268.23 271.45 T:deoxysneq128128v13 311.52 315.19 317.69 T:deoxysii256v141 321.63 327.00 329.36 T:deoxyseq128128v13 384.05 386.82 389.59 T:aezv1 409.77 412.82 415.63 T:aezv3 418.13 423.47 430.09 T:deoxyseq128128v1 427.00 429.46 434.09 T:deoxysneq256128v1 424.19 429.76 435.12 T:deoxysneq256128v13 477.34 482.88 486.69 T:twine80n6t4clocv3 477.93 483.93 485.47 T:twine80n6t4clocv2 558.50 560.19 562.02 T:deoxyseq256128v13 664.83 667.15 671.62 T:deoxyseq256128v1 2556.97 2570.16 2584.05 T:acorn128 3441.04 3453.62 3461.79 T:led80n6t4silcv2 3448.06 3453.83 3459.25 T:led80n6t4silcv3 3484.53 3489.84 3498.45 T:led80n6silcv1 8012.27 8016.43 8096.47 T:present80n6silcv1 8009.87 8024.26 8074.76 T:present80n6t4silcv2 8018.39 8057.20 8078.17 T:present80n6t4silcv3

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 9.70 9.73 9.89 T:norx6441v2 9.76 9.78 9.81 T:norx6441v3 10.63 10.64 10.76 T:norx3241v3 10.63 10.67 10.99 T:norx3241v2 10.71 10.73 10.75 T:morus640128v1 10.79 10.82 10.99 T:morus640128v2 11.09 11.11 11.14 T:norx6441v1 12.36 12.37 12.41 T:norx3241v1 13.86 13.88 13.91 T:norx6461v2 13.95 13.99 14.13 T:norx6461v3 15.27 15.29 15.33 T:norx3261v2 15.28 15.33 15.56 T:norx3261v3 15.78 15.80 16.19 T:morus1280128v1 15.92 15.97 16.39 T:norx6461v1 17.30 17.35 17.43 T:morus1280128v2 17.83 17.84 17.96 T:norx3261v1 20.54 20.58 20.76 T:morus1280256v1 20.83 20.87 21.06 T:morus1280256v2 23.79 23.84 24.18 T:aegis128l 24.03 24.10 24.49 T:aegis128 24.37 24.61 24.70 T:riverkeyakv2 26.15 26.31 27.47 T:norx6444v3 26.40 26.49 27.04 T:norx6444v2 27.74 27.77 28.09 T:acorn128v2 29.10 29.15 29.34 T:aegis256 29.13 29.56 29.71 T:acorn128v3 31.04 31.16 32.56 T:ketjeminorv2 31.01 31.16 31.65 ascon128av12 31.45 31.51 31.93 T:norx6444v1 33.10 33.21 33.61 T:lakekeyakv2 33.28 33.42 34.93 T:tiaoxinv2 33.32 33.45 34.83 T:tiaoxinv1 36.98 37.02 37.19 T:aeadaes128ocbtaglen96v1 36.83 37.02 37.58 T:aeadaes128ocbtaglen128v1 37.01 37.11 37.68 T:aeadaes128ocbtaglen64v1 37.82 37.94 38.31 T:lakekeyakv1 41.08 41.36 42.43 T:seakeyakv2 41.80 42.01 42.08 ascon128v12 42.01 42.11 42.67 T:aeadaes192ocbtaglen64v1 42.02 42.13 42.49 T:aeadaes192ocbtaglen128v1 42.06 42.23 43.67 T:aeadaes192ocbtaglen96v1 44.25 44.80 47.27 T:aes128gcmv1 46.09 46.22 46.67 T:ketjemajorv2 46.50 46.72 47.05 T:aeadaes256ocbtaglen128v1 46.56 46.76 47.60 T:aeadaes256ocbtaglen96v1 46.73 46.92 48.51 T:aeadaes256ocbtaglen64v1 46.84 46.99 47.47 T:aes128otrsv2 46.90 47.10 47.56 T:aes128otrsv3 46.92 47.32 48.71 T:aes128otrsv1 48.42 48.82 50.15 T:aes256gcmv1 49.40 49.57 50.16 T:aes128otrpv2 49.52 49.89 51.54 T:aes128otrpv1 49.79 49.90 50.98 T:ascon96v1 49.82 49.95 50.29 T:ascon128av11 49.84 50.37 51.88 T:aes128otrpv3 50.63 50.88 51.79 T:ascon128v11 50.75 51.24 52.57 T:ascon128v1 50.99 51.41 53.40 T:oceankeyakv2 54.81 54.94 55.53 aegis128l 54.76 55.47 57.16 T:aes128otrcv3 57.81 58.06 58.51 T:colm0v1 59.23 59.39 61.17 T:colm127v1 61.57 61.80 62.27 T:aes256otrsv1 61.68 61.88 63.37 T:aes256otrsv2 61.73 61.89 62.60 T:aes256otrsv3 63.22 63.63 65.22 T:proest256otrv1 64.16 64.51 66.41 T:aes256otrpv2 64.24 64.73 66.32 T:aes256otrpv1 64.69 65.04 66.42 T:aes256otrpv3 67.25 67.45 68.64 T:aes128n12t8silcv3 67.29 67.59 69.60 T:aes128n12t8silcv2 67.05 67.76 68.47 T:aes128n8t8silcv2 71.17 71.71 73.54 T:aes256otrcv3 75.91 76.90 83.69 T:deoxysi128v141 77.83 78.43 80.21 T:aes128n12clocv1 78.01 78.82 80.09 T:aes128n8t8clocv2 78.41 78.93 81.48 T:aes128n12t8clocv3 78.21 79.01 80.33 T:aes128n12t8clocv2 78.85 79.48 80.31 T:aes128n8clocv1 80.80 81.18 81.88 T:ketjesrv1 84.14 84.33 85.14 T:ketjesrv2 84.60 85.37 93.72 T:lunarkeyakv2 84.83 85.55 88.70 T:deoxysi256v141 85.94 86.25 87.84 T:aesjambuv1 105.68 106.47 112.77 T:deoxysii128v141 138.75 139.95 147.84 T:ketjejrv1 140.47 141.59 147.56 T:proest128otrv1 143.22 144.49 150.83 T:aezv5 143.83 145.07 151.62 T:aezv4 248.84 252.84 256.73 T:ketjejrv2 263.57 264.87 270.76 T:deoxysneq128128v13 264.18 269.75 271.85 T:deoxysneq128128v1 309.33 311.55 317.49 T:deoxysii256v141 326.85 329.75 331.02 T:deoxyseq128128v13 383.97 386.08 390.53 T:aezv1 407.21 410.33 417.58 T:aezv3 417.31 423.87 427.76 T:deoxyseq128128v1 426.29 426.91 429.22 T:deoxysneq256128v13 427.07 430.42 430.88 T:deoxysneq256128v1 482.63 485.98 488.24 T:twine80n6t4clocv2 485.72 488.57 492.47 T:twine80n6t4clocv3 557.06 564.46 568.07 T:deoxyseq256128v13 664.00 665.83 669.42 T:deoxyseq256128v1 2565.90 2581.83 2586.33 T:acorn128 3439.17 3451.05 3463.99 T:led80n6t4silcv3 3448.51 3453.79 3455.76 T:led80n6t4silcv2 3472.64 3484.90 3490.57 T:led80n6silcv1 8009.34 8017.08 8030.43 T:present80n6silcv1 8017.64 8026.90 8069.00 T:present80n6t4silcv2 8006.12 8029.78 8053.87 T:present80n6t4silcv3

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 47.09 47.45 48.38 T:norx3241v2 47.60 47.77 49.20 T:norx3241v1 47.57 47.81 48.20 T:norx3241v3 51.52 51.89 52.77 T:morus640128v1 52.22 52.30 53.89 T:norx6441v1 52.62 53.41 53.84 T:norx6441v2 53.16 53.43 54.59 T:morus640128v2 53.67 53.84 55.47 T:norx6441v3 58.37 58.83 59.39 T:norx3261v3 58.40 58.88 59.34 T:norx3261v1 58.65 58.88 59.43 T:norx3261v2 64.62 65.12 66.35 ascon128av12 65.64 65.88 67.88 T:norx6461v1 66.53 66.66 68.12 T:norx6461v2 66.51 66.90 68.07 T:norx6461v3 73.81 74.44 75.46 ascon128v12 76.16 76.34 78.50 T:aeadaes128ocbtaglen64v1 75.99 76.52 78.34 T:aeadaes128ocbtaglen128v1 76.38 76.65 77.98 T:aeadaes128ocbtaglen96v1 79.54 80.26 83.05 T:riverkeyakv2 83.24 83.62 86.09 T:aeadaes192ocbtaglen96v1 83.57 83.84 86.24 T:aeadaes192ocbtaglen64v1 83.44 84.17 86.02 T:aeadaes192ocbtaglen128v1 86.21 86.81 91.61 T:ascon128v11 86.59 87.34 92.03 T:ascon128v1 88.72 89.09 90.38 T:aegis128 91.32 91.66 92.85 T:aeadaes256ocbtaglen64v1 91.48 92.22 99.89 T:aeadaes256ocbtaglen128v1 91.79 92.45 94.75 T:aeadaes256ocbtaglen96v1 95.06 95.57 96.52 T:ascon128av11 95.57 95.94 97.40 T:ascon96v1 98.34 98.91 100.84 T:morus1280128v2 103.41 104.09 105.33 T:aes128otrsv2 105.15 105.50 106.74 T:aes128otrpv2 104.61 105.58 106.82 T:aes128otrsv1 105.20 105.84 106.80 T:aes128otrsv3 105.58 106.22 108.20 T:aes128otrpv1 106.72 107.35 109.65 T:aes128otrpv3 110.52 110.82 111.73 T:aes128n12t8clocv2 111.55 112.14 118.54 T:aes128n8t8clocv2 111.82 112.77 114.49 T:aes128n12t8clocv3 112.28 112.97 114.88 T:aes128n12t8silcv3 112.84 113.02 114.18 T:aegis128l 112.55 113.17 115.47 T:aes128n8clocv1 112.70 113.23 114.37 T:aes128n8t8silcv2 112.74 113.70 115.11 T:aes128n12clocv1 112.98 113.95 114.39 T:aes128n12t8silcv2 114.63 115.10 116.24 T:colm0v1 115.81 117.02 120.39 T:colm127v1 116.14 117.34 118.59 T:ketjeminorv2 118.59 118.80 119.55 T:aegis256 124.50 125.74 132.20 T:aes128otrcv3 125.54 125.98 127.90 T:morus1280128v1 125.66 126.00 127.87 T:morus1280256v1 125.98 126.30 129.08 T:deoxysi128v141 127.94 128.72 131.13 T:aes256otrsv2 128.88 129.66 132.16 T:aes256otrpv2 129.48 130.62 138.39 T:aes256otrpv1 130.45 131.10 132.11 T:aes256otrsv3 128.67? 131.67? 143.55? T:aes256otrsv1 131.16 132.52 138.49 T:lakekeyakv1 132.06 132.62 133.70 T:morus1280256v2 132.23 133.56 134.93 T:aes256otrpv3 135.13 135.77 137.76 T:acorn128v2 135.75 136.13 138.86 T:aesjambuv1 135.89 136.37 141.41 T:acorn128v3 153.64 154.00 155.52 T:ketjesrv1 156.09 158.09 161.03 T:aes256otrcv3 166.43 166.84 168.49 T:ketjesrv2 168.26 169.38 175.25 T:lakekeyakv2 169.98 170.68 172.21 T:deoxysii128v141 184.89 185.49 191.04 T:aes128gcmv1 186.52 187.73 197.41 T:deoxysi256v141 194.45 198.58 213.16 T:aes256gcmv1 203.66 204.42 209.41 T:proest256otrv1 203.98 204.84 209.26 T:norx6444v2 205.81 207.26 207.98 T:ketjejrv1 207.25 210.94 223.08 T:norx6444v3 212.36 212.85 214.52 aegis128l 215.75 216.46 220.86 T:ketjemajorv2 214.95 217.91 221.78 T:aezv4 221.32 222.05 226.88 T:aezv5 245.83 249.23 261.70 T:norx6444v1 253.82 254.10 256.19 T:tiaoxinv2 253.79 254.44 257.76 T:tiaoxinv1 259.55 259.85 263.50 T:deoxysneq128128v13 259.70 260.66 270.98 T:deoxysneq128128v1 296.81 297.50 299.62 T:proest128otrv1 355.55 356.28 359.77 T:ketjejrv2 364.40 366.38 396.73 T:deoxysii256v141 384.35 387.81 397.91 T:seakeyakv2 388.75 388.95 390.34 T:deoxyseq128128v1 418.74 420.66 429.24 T:deoxyseq128128v13 429.32 429.93 433.38 T:deoxysneq256128v13 429.46 430.77 436.26 T:deoxysneq256128v1 437.66 440.55 446.25 T:aezv1 527.46 529.36 536.89 T:twine80n6t4clocv3 527.45 529.71 542.81 T:twine80n6t4clocv2 542.88 546.35 553.63 T:oceankeyakv2 610.49 613.49 618.38 T:aezv3 653.78 654.33 658.44 T:deoxyseq256128v1 701.09 703.41 714.83 T:deoxyseq256128v13 1334.79 1341.80 1360.84 T:lunarkeyakv2 3836.37 3865.06 4025.00 T:led80n6t4silcv2 3837.52 3867.38 4021.17 T:led80n6t4silcv3 3884.34 3989.10 4143.62 T:led80n6silcv1 8796.08 8896.64 9003.81 T:acorn128 8925.52 9083.35 9165.11 T:present80n6t4silcv3 8915.21 9105.70 9145.90 T:present80n6t4silcv2 9037.48 9123.79 9202.09 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 47.00 47.34 47.72 T:norx3241v1 47.77 48.02 48.81 T:norx3241v3 47.83 48.03 49.02 T:norx3241v2 51.19 51.36 52.34 T:morus640128v1 52.88 52.98 53.77 T:norx6441v1 52.64 53.19 54.08 T:norx6441v2 53.09 53.46 53.79 T:morus640128v2 53.24 53.64 54.73 T:norx6441v3 58.62 58.81 59.70 T:norx3261v1 59.09 59.26 60.50 T:norx3261v2 59.21 59.41 60.12 T:norx3261v3 64.73 64.95 66.11 ascon128av12 65.36 65.78 66.83 T:norx6461v1 65.79 66.26 66.95 T:norx6461v2 66.62 66.84 67.76 T:norx6461v3 74.73 74.95 76.30 ascon128v12 81.97 83.02 86.59 T:riverkeyakv2 87.05 87.37 92.26 T:ascon128v1 86.50 87.50 92.09 T:ascon128v11 88.91 89.16 89.74 T:aegis128 88.46 89.22 91.27 T:aeadaes128ocbtaglen64v1 89.02 89.50 90.98 T:aeadaes128ocbtaglen96v1 89.38 90.45 97.43 T:aeadaes128ocbtaglen128v1 97.95 98.39 98.89 T:morus1280128v2 98.30 98.55 101.16 T:aeadaes192ocbtaglen64v1 98.44 98.82 100.36 T:aeadaes192ocbtaglen96v1 98.77 99.08 99.64 T:ascon128av11 98.39 99.36 103.05 T:ascon96v1 98.53 100.09 106.53 T:aeadaes192ocbtaglen128v1 104.33 104.70 106.32 T:aes128otrsv2 105.14 105.54 107.62 T:aes128otrsv3 105.54 106.01 106.90 T:aes128otrpv2 104.84 106.42 111.62 T:aes128otrsv1 106.17 106.66 108.55 T:aes128otrpv1 106.94 107.83 109.24 T:aes128otrpv3 108.78 109.00 110.57 T:aeadaes256ocbtaglen96v1 108.59 109.12 111.13 T:aeadaes256ocbtaglen64v1 108.66 109.49 113.11 T:aeadaes256ocbtaglen128v1 113.49 113.91 115.08 T:aes128n8t8clocv2 113.50 113.98 118.45 T:aes128n12t8clocv2 113.11 114.01 114.74 T:aes128n8t8silcv2 113.80 114.03 114.68 T:aegis128l 113.52 114.34 115.19 T:aes128n12t8silcv2 114.41 114.88 116.08 T:aes128n12t8silcv3 115.27 115.57 117.05 T:colm0v1 115.13 115.62 117.09 T:aes128n8clocv1 115.47 115.80 116.95 T:ketjeminorv2 114.95 115.93 117.79 T:aes128n12t8clocv3 115.67 116.34 118.21 T:aes128n12clocv1 116.77 117.02 118.73 T:colm127v1 117.11 117.40 117.90 T:aegis256 125.30 125.49 127.54 T:morus1280128v1 125.07 125.84 127.15 T:aes128otrcv3 126.60 126.85 127.46 T:morus1280256v1 128.45 128.61 131.21 T:aes256otrsv2 128.71 130.07 130.95 T:aes256otrsv1 129.93 130.49 132.89 T:aes256otrsv3 129.98 130.55 131.82 T:aes256otrpv1 131.31 132.45 134.10 T:aes256otrpv3 133.38 133.79 134.77 T:morus1280256v2 133.92 134.46 135.39 T:aesjambuv1 130.67? 134.77? 166.46? T:aes256otrpv2 133.39 135.66 139.06 T:lakekeyakv1 136.38 136.81 139.31 T:acorn128v2 137.16 137.69 138.62 T:acorn128v3 151.42 153.70 155.79 T:deoxysi128v141 153.96 154.58 155.80 T:ketjesrv1 157.12 158.00 160.45 T:aes256otrcv3 166.69 167.07 169.05 T:ketjesrv2 169.32 169.63 171.45 T:deoxysii128v141 171.34 173.16 178.91 T:lakekeyakv2 184.16 185.70 191.50 T:aes128gcmv1 193.27 194.58 202.22 T:aes256gcmv1 203.95 204.75 206.03 T:proest256otrv1 205.80 206.15 209.34 T:norx6444v2 207.86 209.00 210.34 T:ketjejrv1 208.45 209.62 211.83 T:norx6444v3 212.48 213.09 215.42 aegis128l 213.12 214.22 215.63 T:aezv4 212.54 214.45 224.74 T:deoxysi256v141 219.09 220.41 225.67 T:ketjemajorv2 220.62 221.73 224.68 T:aezv5 248.55 250.05 259.27 T:norx6444v1 253.79 254.06 256.88 T:tiaoxinv1 253.82 254.25 255.33 T:tiaoxinv2 297.95 299.52 306.41 T:proest128otrv1 311.84 313.76 316.94 T:deoxysneq128128v13 312.04 314.22 327.69 T:deoxysneq128128v1 354.88 355.79 358.79 T:ketjejrv2 363.25 363.67 367.73 T:deoxysii256v141 388.99? 397.56? 446.93? T:seakeyakv2 417.54 418.21 422.88 T:deoxyseq128128v13 447.29 450.98 459.95 T:aezv1 485.02 488.57 499.02 T:deoxysneq256128v13 490.77 491.77 497.23 T:deoxyseq128128v1 486.94 495.46 535.25 T:deoxysneq256128v1 526.03 527.11 533.12 T:twine80n6t4clocv3 525.83 527.48 544.47 T:twine80n6t4clocv2 547.95 549.77 559.77 T:oceankeyakv2 608.38 611.87 619.62 T:aezv3 700.52 701.56 704.96 T:deoxyseq256128v13 765.10 768.30 793.56 T:deoxyseq256128v1 1338.09 1348.91 1403.26 T:lunarkeyakv2 3834.50 3848.17 3999.12 T:led80n6t4silcv2 3838.80 3861.52 4049.08 T:led80n6t4silcv3 3879.37 3905.05 4066.64 T:led80n6silcv1 8857.44 8930.16 8985.57 T:acorn128 9027.23 9052.89 9107.87 T:present80n6t4silcv2 9022.34 9052.98 9103.32 T:present80n6t4silcv3 8940.63 9076.88 9120.11 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 46.98 47.23 47.85 T:norx3241v1 47.42 47.74 48.78 T:norx3241v3 47.54 47.84 48.67 T:norx3241v2 51.38 51.57 52.13 T:morus640128v1 52.62 52.95 53.45 T:norx6441v2 52.38 53.02 53.52 T:norx6441v1 53.00 53.13 53.38 T:morus640128v2 53.04 53.35 53.81 T:norx6441v3 58.30 58.75 59.66 T:norx3261v1 58.81 59.16 59.62 T:norx3261v2 59.01 59.33 59.98 T:norx3261v3 64.70 65.01 65.59 ascon128av12 65.25 65.66 66.11 T:norx6461v1 66.03 66.21 66.98 T:norx6461v2 66.38 66.84 67.31 T:norx6461v3 74.28 74.55 75.41 ascon128v12 82.57? 85.50? 95.06? T:riverkeyakv2 86.78 87.16 89.45 T:ascon128v1 86.82 87.37 89.87 T:ascon128v11 88.76 89.09 89.92 T:aegis128 88.74 89.12 90.62 T:aeadaes128ocbtaglen128v1 88.77 89.42 89.89 T:aeadaes128ocbtaglen64v1 88.18 89.67 92.55 T:aeadaes128ocbtaglen96v1 94.30 94.48 95.60 T:ascon128av11 94.55 94.98 96.09 T:ascon96v1 97.26 97.62 98.60 T:morus1280128v2 96.97 97.76 98.45 T:aeadaes192ocbtaglen96v1 98.20 98.44 99.19 T:aeadaes192ocbtaglen64v1 97.99 98.50 99.61 T:aeadaes192ocbtaglen128v1 104.27 104.48 105.24 T:aes128otrsv2 104.35 104.78 106.09 T:aes128otrsv1 104.99 105.47 106.30 T:aes128otrpv2 105.20 105.80 107.10 T:aes128otrsv3 105.92 106.59 107.93 T:aes128otrpv1 107.12 107.52 108.52 T:aes128otrpv3 108.16 108.72 109.68 T:aeadaes256ocbtaglen128v1 108.63 108.89 109.54 T:aeadaes256ocbtaglen64v1 108.10 108.95 112.95 T:aeadaes256ocbtaglen96v1 112.84 113.34 114.62 T:aes128n12t8clocv2 113.17 113.59 114.93 T:aes128n8t8silcv2 113.27 113.77 116.20 T:aes128n8t8clocv2 114.09 114.27 115.07 T:aegis128l 113.85 114.45 115.52 T:aes128n12t8silcv3 113.54 114.66 117.40 T:aes128n12t8silcv2 114.56 115.01 115.63 T:colm0v1 115.03 115.70 118.55 T:aes128n8clocv1 114.94 115.85 118.96 T:aes128n12clocv1 115.83 116.15 117.02 T:colm127v1 113.80 116.45 125.93 T:aes128n12t8clocv3 115.59 116.59 121.62 T:ketjeminorv2 117.41 117.61 117.77 T:aegis256 124.33 124.80 126.06 T:aes128otrcv3 125.45 125.76 128.34 T:morus1280128v1 126.50 126.81 127.36 T:morus1280256v1 127.75 128.62 130.08 T:aes256otrsv1 128.31 128.92 132.60 T:aes256otrsv2 130.10 130.45 132.41 T:aes256otrsv3 129.70 130.52 138.18 T:aes256otrpv2 131.27 131.80 134.03 T:aes256otrpv3 130.17 131.88 136.88 T:aes256otrpv1 133.29 133.59 133.85 T:morus1280256v2 133.52 133.87 134.42 T:aesjambuv1 132.75 134.67 137.20 T:lakekeyakv1 136.98 137.16 138.44 T:acorn128v3 136.58 137.74 143.98 T:acorn128v2 153.68 154.13 154.97 T:ketjesrv1 151.82 154.43 158.77 T:deoxysi128v141 156.03 157.12 159.44 T:aes256otrcv3 166.29 166.98 168.08 T:ketjesrv2 170.26 171.39 175.98 T:lakekeyakv2 170.69 172.73 177.39 T:deoxysii128v141 184.05 185.66 197.73 T:aes128gcmv1 194.12 197.15 206.47 T:aes256gcmv1 198.85 199.08 200.94 T:proest256otrv1 206.71 207.12 209.83 T:ketjejrv1 206.09 207.14 208.23 T:norx6444v2 208.32 208.73 210.94 T:norx6444v3 212.38 212.53 213.69 aegis128l 212.32 213.66 214.84 T:aezv4 213.24 214.27 223.80 T:deoxysi256v141 217.78 219.38 221.45 T:ketjemajorv2 219.03 220.33 223.95 T:aezv5 248.65 249.60 251.58 T:norx6444v1 253.80 254.20 256.22 T:tiaoxinv1 254.30 255.43 260.01 T:tiaoxinv2 297.60 298.86 302.19 T:proest128otrv1 312.04 313.17 323.46 T:deoxysneq128128v1 311.20 313.23 314.68 T:deoxysneq128128v13 354.37 355.59 359.56 T:ketjejrv2 363.62 363.92 369.35 T:deoxysii256v141 386.95 388.79 394.70 T:seakeyakv2 418.28 419.20 423.14 T:deoxyseq128128v13 448.28 451.36 461.94 T:aezv1 485.20 485.74 488.55 T:deoxysneq256128v1 485.34 486.85 491.85 T:deoxysneq256128v13 489.38 493.18 504.96 T:deoxyseq128128v1 525.84 526.57 528.88 T:twine80n6t4clocv2 525.68 527.14 527.98 T:twine80n6t4clocv3 547.95 553.08 607.65 T:oceankeyakv2 609.41 610.91 618.27 T:aezv3 701.60 702.59 706.13 T:deoxyseq256128v13 763.02 765.25 776.21 T:deoxyseq256128v1 1337.05 1344.44 1397.54 T:lunarkeyakv2 3837.08 3851.18 4021.34 T:led80n6t4silcv3 3833.30 3880.57 3992.01 T:led80n6t4silcv2 3879.09 3910.25 4088.63 T:led80n6silcv1 8907.92 8975.54 9055.20 T:acorn128 9026.62 9063.37 9093.57 T:present80n6t4silcv2 9033.24 9086.50 9199.48 T:present80n6silcv1 8930.38 9092.02 9150.48 T:present80n6t4silcv3