VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of CAESAR candidates on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260214 18:06:52]

eBAEAD (ECRYPT Benchmarking of Authenticated Ciphers) is a project to measure the performance of authenticated ciphers. This page presents an excerpt of the full eBAEAD benchmark results. The excerpt contains AES-GCM and the third-round CAESAR candidates (plus older versions of the same ciphers for comparison).

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each cipher and each implementation.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long+0 encrypt 25% 50% 75% aead 7.63 7.69 7.83 T:norx6441v2 7.67 7.72 7.81 T:norx6441v3 9.02 9.14 9.23 T:norx3241v3 9.08 9.15 9.23 T:norx3241v2 9.18 9.31 9.36 T:morus640128v1 9.17 9.33 9.65 T:norx6441v1 9.45 9.50 9.57 T:morus640128v2 10.73 10.90 11.11 T:norx3241v1 11.26 11.31 11.41 T:norx6461v2 11.21 11.36 11.43 T:norx6461v3 12.20 12.44 12.56 T:morus1280128v1 13.34 13.46 13.60 T:norx3261v2 13.36 13.48 13.71 T:norx3261v3 13.44 13.67 14.29 T:morus1280128v2 13.59 13.69 14.10 T:norx6461v1 15.85 15.98 16.12 T:morus1280256v2 15.88 15.98 16.13 T:morus1280256v1 16.04 16.10 16.15 T:norx3261v1 17.97 18.34 19.24 T:norx6444v2 17.94? 18.48? 20.65? T:norx6444v3 19.71 19.80 19.89 T:aegis128l 21.68 21.94 22.69 T:acorn128v2 21.91 22.04 22.22 T:aegis128 21.71 22.17 22.81 T:norx6444v1 18.90? 23.30? 29.71? T:lunarkeyakv2 24.74 24.94 25.75 T:acorn128v3 24.98 25.15 25.41 T:tiaoxinv1 24.98 25.46 26.94 T:tiaoxinv2 26.60 26.76 27.22 T:aegis256 29.29 29.83 30.38 T:riverkeyakv2 31.65 31.78 31.94 ascon128av12 31.84 32.15 32.81 T:ketjeminorv2 31.95 32.60 34.06 T:lakekeyakv2 32.46 32.85 33.56 T:lakekeyakv1 32.26? 33.20? 37.58? T:oceankeyakv2 32.19? 33.74? 37.85? T:seakeyakv2 35.49 35.58 36.02 T:aeadaes128ocbtaglen64v1 35.36 35.65 35.89 T:aeadaes128ocbtaglen128v1 35.49 35.79 37.39 T:aeadaes128ocbtaglen96v1 40.60 40.83 41.52 T:aeadaes192ocbtaglen96v1 40.63 40.98 43.04 T:aeadaes192ocbtaglen64v1 40.73 41.04 42.56 T:aeadaes192ocbtaglen128v1 43.15 43.28 43.49 ascon128v12 42.99 44.31 46.70 T:ketjemajorv2 45.20 45.40 46.93 T:aeadaes256ocbtaglen128v1 44.90 45.43 47.15 T:aeadaes256ocbtaglen96v1 45.12 45.45 46.53 T:aeadaes256ocbtaglen64v1 47.30 47.72 48.17 T:aes128otrpv2 47.56 47.97 48.47 T:aes128otrpv1 48.04 48.26 48.50 T:aes128otrsv3 48.01 48.26 48.45 T:ascon96v1 47.96 48.29 50.30 T:aes128otrsv2 48.12 48.32 48.85 T:aes128otrpv3 48.21 48.38 49.78 T:ascon128av11 48.05 48.46 50.11 T:ascon128v11 48.07 48.52 50.85 T:aes128otrsv1 47.98 48.62 49.39 T:ascon128v1 47.89 48.83 50.43 T:aes128gcmv1 52.38 52.63 52.88 T:aes128otrcv3 55.38 56.54 59.65 T:aes256gcmv1 56.57 57.86 59.85 T:proest256otrv1 59.63 60.06 62.80 aegis128l 61.87 62.34 64.56 T:aes256otrpv1 61.97 62.61 64.98 T:aes256otrpv2 62.31 62.64 63.44 T:aes256otrpv3 62.25 62.76 64.81 T:aes256otrsv1 62.31 62.83 63.56 T:aes256otrsv3 62.31 62.90 65.25 T:aes256otrsv2 63.98 64.41 67.21 T:deoxysi128v141 68.56 68.82 69.77 T:aes256otrcv3 72.37 73.39 73.98 T:deoxysi256v141 77.40 78.03 80.56 T:colm0v1 80.06 80.38 83.02 T:colm127v1 84.26 84.55 86.66 T:aesjambuv1 84.39 85.14 87.92 T:ketjesrv2 85.45 85.94 88.23 T:ketjesrv1 87.07 88.11 90.30 T:aes128n8t8silcv2 87.61 88.64 90.42 T:aes128n12t8silcv3 87.99 88.70 90.85 T:aes128n12t8silcv2 98.44 99.58 101.60 T:aes128n12t8clocv2 99.08 99.70 102.51 T:aes128n12t8clocv3 98.58 99.97 101.96 T:aes128n8t8clocv2 99.15 100.06 101.94 T:aes128n12clocv1 99.85 100.34 102.71 T:aes128n8clocv1 133.29 134.22 136.43 T:proest128otrv1 138.05 139.95 144.95 T:deoxysii128v141 143.93 144.97 151.18 T:ketjejrv1 174.94 177.99 189.41 T:aezv4 185.54 188.69 202.20 T:aezv5 210.16 212.30 222.81 T:deoxysneq128128v1 209.94 215.42 224.48 T:deoxysneq128128v13 256.50 258.26 269.11 T:ketjejrv2 363.16 370.00 376.23 T:deoxysneq256128v13 362.05 372.24 378.43 T:deoxysneq256128v1 413.34 419.71 421.96 T:deoxysii256v141 418.60 428.14 432.83 T:deoxyseq128128v1 425.00 432.88 448.13 T:deoxyseq128128v13 544.10 550.68 556.38 T:aezv3 585.87 597.42 606.22 T:aezv1 626.65 636.68 644.17 T:twine80n6t4clocv3 636.10 637.51 641.19 T:twine80n6t4clocv2 728.36 736.19 748.99 T:deoxyseq256128v13 730.07 737.10 741.23 T:deoxyseq256128v1 2227.53 2253.22 2276.22 T:acorn128 4570.01 4580.82 4624.70 T:led80n6t4silcv2 4567.43 4583.10 4600.62 T:led80n6t4silcv3 4567.43 4615.66 4629.16 T:led80n6silcv1 10610.99 10631.25 10655.76 T:present80n6t4silcv3 10618.02 10634.40 10689.61 T:present80n6silcv1 10619.17 10638.89 10658.76 T:present80n6t4silcv2

Cycles/byte for long+0 decrypt 25% 50% 75% aead 7.33 7.74 7.82 T:norx6441v2 7.64 7.81 7.98 T:norx6441v3 9.08 9.14 9.24 T:norx3241v2 8.94? 9.18? 10.02? T:norx3241v3 9.11 9.20 9.40 T:norx6441v1 9.20 9.27 9.34 T:morus640128v2 9.23 9.30 9.62 T:morus640128v1 10.92 10.99 11.11 T:norx3241v1 11.23 11.36 11.53 T:norx6461v2 11.30 11.40 11.49 T:norx6461v3 11.48 11.56 11.70 T:morus1280128v1 13.14 13.40 13.69 T:norx3261v2 13.36 13.43 13.49 T:norx3261v3 13.41 13.45 13.56 T:norx6461v1 13.24 13.52 13.66 T:morus1280128v2 15.90 16.00 16.25 T:morus1280256v2 15.92 16.01 16.38 T:morus1280256v1 16.14 16.25 16.53 T:norx3261v1 18.05 18.33 18.70 T:norx6444v3 18.01? 18.51? 20.35? T:norx6444v2 19.83 20.17 21.02 T:aegis128l 20.95 21.02 21.16 T:acorn128v2 21.90 22.31 24.19 T:norx6444v1 22.18 22.43 22.93 T:aegis128 18.87? 22.65? 28.09? T:lunarkeyakv2 24.92 25.12 25.38 T:tiaoxinv2 24.86 25.17 27.50 T:tiaoxinv1 25.09 25.24 25.46 T:acorn128v3 26.25 26.53 27.27 T:aegis256 30.54 30.61 30.85 T:ketjeminorv2 30.13 30.66 31.76 T:riverkeyakv2 31.68 31.77 32.85 ascon128av12 31.50 32.32 33.03 T:lakekeyakv2 31.80 32.88 33.60 T:oceankeyakv2 32.72 33.14 34.30 T:seakeyakv2 32.76 33.26 34.10 T:lakekeyakv1 35.27 35.83 36.06 T:aeadaes128ocbtaglen64v1 35.67 35.96 36.50 T:aeadaes128ocbtaglen128v1 35.77 36.02 36.61 T:aeadaes128ocbtaglen96v1 40.32 40.82 43.06 T:aeadaes192ocbtaglen128v1 40.37 40.85 43.07 T:aeadaes192ocbtaglen64v1 40.57 40.86 41.76 T:aeadaes192ocbtaglen96v1 42.42 42.57 43.07 ascon128v12 43.13 43.66 43.88 T:ketjemajorv2 45.17 45.36 45.52 T:aeadaes256ocbtaglen64v1 44.98 45.54 47.99 T:aeadaes256ocbtaglen96v1 45.16 45.71 48.06 T:aeadaes256ocbtaglen128v1 46.92 47.31 47.61 T:aes128otrpv2 47.19 47.34 47.83 T:aes128otrpv1 47.55 47.83 48.68 T:aes128otrsv2 47.53 47.95 50.72 T:aes128otrsv1 48.02 48.18 48.92 T:aes128otrpv3 48.04 48.27 48.96 T:aes128otrsv3 47.98 48.83 51.72 T:aes128gcmv1 48.74 48.96 49.48 T:ascon128v1 48.87 49.32 51.10 T:ascon128v11 51.38 51.67 52.44 T:aes128otrcv3 53.20 53.31 53.67 T:ascon96v1 53.17 53.41 53.73 T:ascon128av11 55.78 57.02 59.50 T:aes256gcmv1 56.54 57.08 59.05 T:proest256otrv1 59.63 59.74 60.36 aegis128l 61.37 61.81 62.33 T:aes256otrpv1 61.33 61.83 62.66 T:aes256otrpv2 61.84 62.00 62.65 T:aes256otrsv2 62.15 62.43 63.33 T:aes256otrpv3 62.01 62.55 63.15 T:aes256otrsv3 62.25 62.63 63.57 T:aes256otrsv1 67.07 67.23 67.75 T:aes256otrcv3 77.02 77.37 79.51 T:colm0v1 79.27 79.83 84.50 T:colm127v1 79.46 80.56 84.53 T:deoxysi128v141 82.71 82.86 83.73 T:aesjambuv1 84.13 85.12 90.21 T:ketjesrv1 84.77 85.95 87.86 T:deoxysi256v141 85.30 86.13 87.79 T:ketjesrv2 86.66 87.48 90.35 T:aes128n8t8silcv2 86.87 88.42 93.29 T:aes128n12t8silcv3 87.13 88.42 90.23 T:aes128n12t8silcv2 104.30 104.55 107.21 T:aes128n8t8clocv2 103.96 104.78 107.60 T:aes128n12t8clocv2 104.14 104.96 107.44 T:aes128n12clocv1 105.59 106.10 109.21 T:aes128n8clocv1 105.07? 107.68? 119.84? T:aes128n12t8clocv3 133.23 133.73 137.47 T:proest128otrv1 138.05 138.66 144.05 T:deoxysii128v141 146.54 147.20 160.70 T:ketjejrv1 175.90 177.97 181.00 T:aezv4 184.87 187.65 198.15 T:aezv5 251.03 253.09 263.70 T:ketjejrv2 307.62 309.93 321.68 T:deoxysneq128128v1 308.54 312.22 326.06 T:deoxysneq128128v13 410.21 418.99 423.41 T:deoxysii256v141 431.87 434.94 438.84 T:deoxyseq128128v13 470.18 476.95 483.90 T:deoxysneq256128v13 472.04 482.28 486.50 T:deoxysneq256128v1 539.10 546.77 557.45 T:aezv3 597.85 606.19 611.18 T:aezv1 614.51 629.38 640.90 T:deoxyseq128128v1 633.63 635.36 645.80 T:twine80n6t4clocv3 632.31 638.62 642.64 T:twine80n6t4clocv2 735.02 737.38 746.67 T:deoxyseq256128v13 945.35 953.10 965.26 T:deoxyseq256128v1 2275.15 2287.63 2308.46 T:acorn128 4558.92 4581.54 4590.93 T:led80n6t4silcv3 4545.69 4582.80 4624.35 T:led80n6t4silcv2 4604.94 4621.40 4648.28 T:led80n6silcv1 10590.77 10625.67 10650.54 T:present80n6t4silcv3 10602.81 10634.15 10658.89 T:present80n6t4silcv2 10620.35 10647.42 10685.78 T:present80n6silcv1

Cycles/byte for long+0 forgery 25% 50% 75% aead 7.66 7.72 7.84 T:norx6441v2 7.73 7.78 7.90 T:norx6441v3 9.08 9.14 9.20 T:norx3241v2 9.10 9.14 9.29 T:norx3241v3 9.11 9.17 9.20 T:norx6441v1 9.22 9.25 9.35 T:morus640128v1 9.20 9.26 9.35 T:morus640128v2 10.94 11.00 11.11 T:norx3241v1 11.29 11.35 11.42 T:norx6461v2 11.32 11.39 11.45 T:norx6461v3 11.49 11.58 11.67 T:morus1280128v1 13.35 13.42 13.49 T:norx3261v3 13.38 13.44 13.55 T:norx3261v2 13.39 13.49 13.66 T:norx6461v1 13.19 13.54 13.68 T:morus1280128v2 15.86 15.96 16.01 T:morus1280256v1 15.93 15.98 16.20 T:morus1280256v2 16.16 16.18 16.29 T:norx3261v1 18.18 18.45 18.79 T:norx6444v3 18.23 18.48 18.87 T:norx6444v2 19.80 19.89 19.95 T:aegis128l 20.99 21.04 21.28 T:acorn128v2 21.78 22.10 22.33 T:norx6444v1 22.15 22.22 22.50 T:aegis128 19.45? 23.79? 28.79? T:lunarkeyakv2 24.75 25.02 25.38 T:tiaoxinv2 25.02 25.39 26.33 T:acorn128v3 24.84? 25.45? 27.74? T:tiaoxinv1 26.38 26.48 27.00 T:aegis256 30.65 30.97 31.74 T:riverkeyakv2 30.75 31.08 32.08 T:ketjeminorv2 31.62 31.69 31.76 ascon128av12 32.20 32.52 33.47 T:lakekeyakv2 32.27 33.31 35.04 T:seakeyakv2 31.92? 33.38? 37.35? T:oceankeyakv2 33.31? 33.84? 37.24? T:lakekeyakv1 35.72 35.93 36.26 T:aeadaes128ocbtaglen96v1 35.80 36.02 38.16 T:aeadaes128ocbtaglen64v1 35.78 36.08 38.30 T:aeadaes128ocbtaglen128v1 40.49 40.72 42.95 T:aeadaes192ocbtaglen128v1 40.64 40.88 41.66 T:aeadaes192ocbtaglen64v1 40.71 41.03 43.06 T:aeadaes192ocbtaglen96v1 42.30 42.77 43.13 ascon128v12 43.22 43.64 45.27 T:ketjemajorv2 44.69 45.22 45.57 T:aeadaes256ocbtaglen128v1 45.26 45.50 47.35 T:aeadaes256ocbtaglen64v1 45.25 45.88 47.85 T:aeadaes256ocbtaglen96v1 47.50 47.62 48.55 T:aes128otrpv2 47.32 47.66 48.30 T:aes128otrpv1 47.70 47.81 48.00 T:ascon96v1 47.73 47.94 48.35 T:ascon128av11 47.83 48.17 48.91 T:aes128otrsv2 48.18 48.34 48.99 T:aes128otrsv3 48.21 48.43 48.88 T:aes128otrpv3 47.82 48.66 50.98 T:aes128otrsv1 47.03 48.67 49.97 T:aes128gcmv1 48.85 49.10 49.71 T:ascon128v1 48.93 49.19 51.19 T:ascon128v11 51.26 51.88 53.60 T:aes128otrcv3 56.56 57.10 57.63 T:proest256otrv1 55.67 57.27 60.62 T:aes256gcmv1 59.88 60.05 61.03 aegis128l 61.71 62.03 63.06 T:aes256otrpv2 62.18 62.33 63.27 T:aes256otrpv1 62.25 62.69 63.60 T:aes256otrsv1 62.48 62.79 64.37 T:aes256otrpv3 62.23 62.82 64.97 T:aes256otrsv2 62.26 62.83 63.57 T:aes256otrsv3 67.06 67.31 70.38 T:aes256otrcv3 77.06 77.63 78.73 T:colm0v1 77.35 78.10 81.03 T:colm127v1 79.65 80.37 83.02 T:deoxysi128v141 82.47 82.92 85.54 T:aesjambuv1 84.53 85.08 86.84 T:ketjesrv1 85.31 85.89 87.80 T:ketjesrv2 85.43 86.92 91.27 T:deoxysi256v141 86.40 87.06 88.86 T:aes128n12t8silcv2 86.90 87.27 90.00 T:aes128n8t8silcv2 86.87 87.34 88.94 T:aes128n12t8silcv3 103.88 104.60 107.60 T:aes128n8t8clocv2 104.28 104.68 107.56 T:aes128n12clocv1 104.03 104.76 113.37 T:aes128n12t8clocv2 104.28 104.98 107.36 T:aes128n12t8clocv3 106.05 106.73 109.83 T:aes128n8clocv1 133.49 135.01 144.73 T:proest128otrv1 137.97 140.26 141.88 T:deoxysii128v141 146.36 148.25 151.71 T:ketjejrv1 175.81 177.56 187.93 T:aezv4 185.25 186.83 189.66 T:aezv5 251.69 253.31 262.78 T:ketjejrv2 308.23 310.78 324.57 T:deoxysneq128128v1 308.76 313.62 328.17 T:deoxysneq128128v13 410.01 418.91 427.47 T:deoxysii256v141 424.18 432.25 436.93 T:deoxyseq128128v13 471.09 472.75 485.89 T:deoxysneq256128v1 468.05 480.15 491.54 T:deoxysneq256128v13 541.55 552.97 562.45 T:aezv3 587.99 601.87 608.66 T:aezv1 620.81 627.17 639.08 T:deoxyseq128128v1 624.65 635.67 641.85 T:twine80n6t4clocv2 624.86 638.26 643.23 T:twine80n6t4clocv3 737.58 747.94 755.86 T:deoxyseq256128v13 947.12 956.97 965.24 T:deoxyseq256128v1 2275.37 2309.67 2337.27 T:acorn128 4549.13 4577.05 4599.18 T:led80n6t4silcv3 4548.91 4583.01 4614.24 T:led80n6t4silcv2 4605.79 4615.10 4629.77 T:led80n6silcv1 10599.39 10621.83 10651.71 T:present80n6silcv1 10580.04 10652.65 10697.82 T:present80n6t4silcv3 10611.42 10655.00 10693.00 T:present80n6t4silcv2

Cycles/byte for long+long encrypt 25% 50% 75% aead 7.53 7.58 7.75 T:norx6441v3 7.53 7.59 7.75 T:norx6441v2 8.92 8.98 9.10 T:norx3241v3 8.94 8.99 9.10 T:norx3241v2 8.96 9.06 9.27 T:morus640128v1 9.09 9.20 10.03 T:norx6441v1 9.37 9.42 9.50 T:morus640128v2 10.74 10.81 10.93 T:norx3241v1 11.10 11.16 11.31 T:norx6461v2 11.15 11.21 12.17 T:norx6461v3 11.37 11.42 11.69 T:morus1280128v1 13.20 13.26 13.57 T:norx3261v2 13.23 13.30 13.64 T:norx3261v3 13.50 13.56 14.45 T:norx6461v1 13.70 13.77 13.85 T:morus1280128v2 15.91 15.94 16.05 T:norx3261v1 15.91 15.94 16.07 T:morus1280256v2 15.88 15.98 16.38 T:morus1280256v1 17.13 17.46 17.86 T:norx6444v3 17.41 17.59 18.19 T:norx6444v2 19.78 19.89 20.58 T:aegis128l 20.78 20.92 21.40 T:norx6444v1 21.43 21.88 22.77 T:riverkeyakv2 21.77 22.05 23.32 T:aegis128 22.86 23.27 24.11 T:acorn128v2 23.70 23.78 24.29 T:tiaoxinv1 23.59 23.80 24.18 T:tiaoxinv2 23.65 24.00 24.49 T:acorn128v3 26.11 26.30 27.46 T:aegis256 27.84 28.04 29.07 T:ketjeminorv2 26.69? 28.34? 30.55? T:oceankeyakv2 27.41? 28.34? 30.71? T:seakeyakv2 28.41 28.99 31.07 T:lakekeyakv2 29.71 29.84 31.00 ascon128av12 31.49 32.08 33.80 T:lakekeyakv1 30.65? 33.40? 40.44? T:lunarkeyakv2 34.50 34.63 35.88 T:aeadaes128ocbtaglen128v1 34.49 34.64 34.93 T:aeadaes128ocbtaglen64v1 34.49 34.70 35.87 T:aeadaes128ocbtaglen96v1 37.23 37.78 40.28 T:aes128gcmv1 38.66 38.90 39.83 T:ketjemajorv2 39.58 39.75 40.96 T:aeadaes192ocbtaglen96v1 39.39 39.77 40.90 T:aeadaes192ocbtaglen128v1 39.52 39.93 40.96 T:aeadaes192ocbtaglen64v1 40.42 40.74 41.24 ascon128v12 41.04 41.99 44.00 T:aes256gcmv1 43.86 44.17 45.28 T:aeadaes256ocbtaglen128v1 43.98 44.41 45.36 T:aeadaes256ocbtaglen96v1 44.01 44.43 45.94 T:aeadaes256ocbtaglen64v1 44.41 44.71 46.00 T:aes128otrsv3 44.46 44.76 46.05 T:aes128otrsv1 44.53 44.83 46.11 T:aes128otrsv2 47.25 47.42 50.41 T:aes128otrpv2 47.32 47.61 48.90 T:aes128otrpv3 47.21 47.97 49.15 T:aes128otrpv1 47.91 48.14 49.12 T:ascon128av11 47.87 48.15 49.18 aegis128l 48.11 48.28 49.16 T:ascon96v1 48.39 49.16 50.25 T:ascon128v11 48.76 49.81 50.54 T:ascon128v1 52.37 52.58 55.11 T:aes128otrcv3 55.82 56.07 57.84 T:colm0v1 57.20 57.56 58.98 T:colm127v1 56.59 58.01 58.81 T:proest256otrv1 58.66 58.93 60.82 T:aes256otrsv1 58.60 58.95 61.95 T:aes256otrsv3 58.45 59.04 60.22 T:aes256otrsv2 61.36 61.59 62.86 T:aes256otrpv2 61.69 61.98 63.37 T:aes256otrpv3 61.44 62.08 63.06 T:aes256otrpv1 63.84 64.50 65.85 T:deoxysi128v141 65.72 66.12 69.15 T:aes128n8t8silcv2 65.64 66.39 72.93 T:aes128n12t8silcv2 65.95 66.43 67.79 T:aes128n12t8silcv3 67.73 68.32 69.96 T:aes256otrcv3 72.70 73.07 79.36 T:deoxysi256v141 73.30 74.27 80.40 T:aes128n8t8clocv2 73.85 74.40 75.80 T:aes128n12t8clocv3 74.00 74.91 80.91 T:aes128n12t8clocv2 74.36 75.03 76.68 T:aes128n8clocv1 74.30 75.62 81.71 T:aes128n12clocv1 78.16 79.30 81.74 T:ketjesrv1 80.21 80.59 86.12 T:ketjesrv2 84.76 85.20 87.32 T:aesjambuv1 102.21 103.17 109.16 T:deoxysii128v141 133.77 134.88 141.66 T:proest128otrv1 134.74 135.63 140.97 T:ketjejrv1 146.58 151.21 152.79 T:aezv5 148.76 153.12 157.06 T:aezv4 210.13 216.05 218.43 T:deoxysneq128128v1 210.41 216.17 218.92 T:deoxysneq128128v13 250.33 251.75 253.92 T:ketjejrv2 307.75 311.66 313.72 T:deoxysii256v141 318.81 321.40 325.06 T:deoxyseq128128v1 317.96 326.15 329.28 T:deoxyseq128128v13 361.07 366.87 369.52 T:deoxysneq256128v1 364.99 366.98 368.51 T:deoxysneq256128v13 389.76 395.41 397.81 T:aezv1 406.64 410.12 413.78 T:aezv3 478.15 481.91 483.48 T:twine80n6t4clocv3 481.00 484.08 487.21 T:twine80n6t4clocv2 549.56 551.67 553.91 T:deoxyseq256128v1 550.36 555.31 558.74 T:deoxyseq256128v13 2233.79 2245.20 2271.64 T:acorn128 3418.85 3427.31 3439.14 T:led80n6t4silcv3 3422.84 3430.15 3439.54 T:led80n6t4silcv2 3454.95 3462.37 3475.14 T:led80n6silcv1 7958.28 7968.85 8014.98 T:present80n6silcv1 7958.56 7974.87 8033.60 T:present80n6t4silcv3 7958.62 7984.60 8009.41 T:present80n6t4silcv2

Cycles/byte for long+long decrypt 25% 50% 75% aead 7.49 7.56 7.63 T:norx6441v2 7.52 7.62 7.72 T:norx6441v3 8.90 8.95 9.03 T:morus640128v1 8.91 8.96 9.10 T:morus640128v2 8.92 8.97 9.09 T:norx3241v3 8.88 8.98 9.08 T:norx6441v1 8.93 8.99 9.13 T:norx3241v2 10.72 10.80 10.95 T:norx3241v1 10.96 11.06 11.72 T:morus1280128v1 11.11 11.17 11.36 T:norx6461v2 11.14 11.24 11.40 T:norx6461v3 13.10 13.30 13.45 T:norx3261v2 13.24 13.32 13.42 T:norx3261v3 13.20 13.34 13.65 T:norx6461v1 13.13 13.90 14.52 T:morus1280128v2 15.90 15.99 16.11 T:norx3261v1 15.64 16.01 17.17 T:morus1280256v1 15.92 16.06 17.20 T:morus1280256v2 17.18 17.44 19.05 T:norx6444v3 16.87? 17.75? 19.46? T:norx6444v2 19.64 19.93 20.48 T:aegis128l 21.07 21.26 21.79 T:norx6444v1 21.26 21.58 22.74 T:aegis128 21.94 22.27 23.54 T:riverkeyakv2 22.80 23.27 24.01 T:acorn128v2 23.40 23.74 25.28 T:tiaoxinv2 23.61 23.75 23.84 T:tiaoxinv1 24.30 24.88 25.02 T:acorn128v3 25.14 25.78 27.46 T:aegis256 27.22 27.43 28.08 T:ketjeminorv2 27.60 28.02 28.72 T:seakeyakv2 27.65 28.27 30.29 T:oceankeyakv2 28.10 28.69 29.56 T:lakekeyakv2 29.65 29.76 30.89 ascon128av12 31.77 31.96 32.37 T:lakekeyakv1 31.54? 34.04? 39.42? T:lunarkeyakv2 34.33 34.78 36.34 T:aeadaes128ocbtaglen128v1 34.68 34.94 35.43 T:aeadaes128ocbtaglen64v1 34.69 35.15 36.52 T:aeadaes128ocbtaglen96v1 37.10 38.02 40.81 T:aes128gcmv1 38.41 38.66 39.57 T:ketjemajorv2 39.52 39.71 40.45 T:aeadaes192ocbtaglen128v1 39.43 39.75 41.22 T:aeadaes192ocbtaglen96v1 39.32 40.12 41.19 T:aeadaes192ocbtaglen64v1 40.12 40.54 40.85 ascon128v12 41.04 42.28 44.84 T:aes256gcmv1 43.78 44.10 45.37 T:aeadaes256ocbtaglen96v1 43.57 44.21 45.54 T:aeadaes256ocbtaglen128v1 43.98 44.37 45.55 T:aeadaes256ocbtaglen64v1 44.31 44.59 45.86 T:aes128otrsv3 44.36 44.68 45.71 T:aes128otrsv1 44.20 44.69 45.69 T:aes128otrsv2 46.59 47.08 48.37 T:aes128otrpv2 46.86 47.20 48.61 T:aes128otrpv1 46.82 47.47 48.56 T:aes128otrpv3 47.68 48.64 49.56 aegis128l 48.88 49.33 50.58 T:ascon128v11 48.95 49.44 51.00 T:ascon128v1 50.53 50.72 51.71 T:ascon96v1 50.69 51.06 51.99 T:ascon128av11 51.58 52.39 53.43 T:aes128otrcv3 55.38 55.77 61.29 T:colm0v1 56.87 57.29 58.91 T:colm127v1 56.89 57.57 58.61 T:proest256otrv1 58.59 59.05 62.34 T:aes256otrsv3 58.49 59.08 60.15 T:aes256otrsv2 58.31 60.09 63.98 T:aes256otrsv1 61.25 61.54 62.83 T:aes256otrpv2 61.55 61.87 63.17 T:aes256otrpv3 61.29? 61.99? 68.99? T:aes256otrpv1 65.06 65.40 67.26 T:aes128n12t8silcv2 65.32 65.74 66.99 T:aes128n8t8silcv2 65.10 66.21 67.72 T:aes128n12t8silcv3 67.28 67.53 71.95 T:aes256otrcv3 72.38 73.18 75.46 T:deoxysi128v141 76.37 76.98 78.41 T:aes128n12clocv1 76.65 77.06 82.37 T:aes128n8t8clocv2 76.60 77.14 78.42 T:aes128n12t8clocv2 76.80 77.26 84.14 T:aes128n12t8clocv3 77.04 77.62 79.31 T:aes128n8clocv1 77.70 78.71 84.91 T:ketjesrv1 79.02 80.97 83.16 T:deoxysi256v141 80.63 81.67 88.55 T:ketjesrv2 83.84 84.29 87.47 T:aesjambuv1 102.48 103.41 104.54 T:deoxysii128v141 134.02 134.88 138.80 T:proest128otrv1 135.44 137.26 142.76 T:ketjejrv1 146.29 151.23 153.76 T:aezv5 148.00 153.40 155.14 T:aezv4 243.57 249.69 250.64 T:ketjejrv2 264.85 267.45 269.84 T:deoxysneq128128v1 261.79 267.57 271.11 T:deoxysneq128128v13 310.12 311.63 313.80 T:deoxysii256v141 318.64 321.99 324.99 T:deoxyseq128128v13 392.61 396.04 397.88 T:aezv1 404.32 409.63 411.75 T:aezv3 420.13 422.02 427.62 T:deoxyseq128128v1 418.96 426.30 429.09 T:deoxysneq256128v13 422.12 427.27 430.16 T:deoxysneq256128v1 481.43 483.63 485.03 T:twine80n6t4clocv2 474.05 483.73 486.46 T:twine80n6t4clocv3 551.96 555.30 559.68 T:deoxyseq256128v13 658.52 664.12 670.19 T:deoxyseq256128v1 2282.83 2292.59 2311.82 T:acorn128 3418.27 3431.19 3443.41 T:led80n6t4silcv3 3424.11 3439.38 3454.74 T:led80n6t4silcv2 3449.03 3459.85 3472.35 T:led80n6silcv1 7964.81 7972.40 7983.96 T:present80n6silcv1 7962.08 7986.70 8011.65 T:present80n6t4silcv3 7971.70 7991.60 8022.08 T:present80n6t4silcv2

Cycles/byte for long+long forgery 25% 50% 75% aead 7.53 7.56 7.71 T:norx6441v2 7.57 7.61 7.69 T:norx6441v3 8.91 8.96 9.09 T:morus640128v1 8.94 8.97 9.13 T:morus640128v2 8.95 8.98 9.04 T:norx3241v2 8.94 8.99 9.16 T:norx3241v3 9.00 9.18 9.93 T:norx6441v1 10.75 10.81 10.96 T:norx3241v1 10.98 11.01 11.08 T:morus1280128v1 11.13 11.21 11.47 T:norx6461v2 11.20 11.23 11.29 T:norx6461v3 13.22 13.30 14.16 T:norx3261v3 13.25 13.31 13.44 T:norx3261v2 13.28 13.34 13.41 T:norx6461v1 13.78 13.87 13.97 T:morus1280128v2 15.90 15.95 16.12 T:morus1280256v1 15.94 15.98 16.19 T:norx3261v1 15.88 16.14 17.23 T:morus1280256v2 17.03 17.48 17.83 T:norx6444v3 17.73 18.01 18.81 T:norx6444v2 19.80 20.10 21.62 T:aegis128l 21.08 21.29 21.64 T:norx6444v1 21.25 21.39 22.61 T:aegis128 21.99 22.10 22.64 T:riverkeyakv2 22.97 23.10 23.60 T:acorn128v2 23.57 23.72 23.94 T:tiaoxinv2 23.59 23.73 23.92 T:tiaoxinv1 24.35 24.87 25.20 T:acorn128v3 25.34 25.63 26.91 T:aegis256 27.34 27.72 29.10 T:ketjeminorv2 26.78? 27.95? 31.05? T:oceankeyakv2 26.31? 28.70? 30.24? T:seakeyakv2 28.75 28.96 29.30 T:lakekeyakv2 29.60 29.70 30.71 ascon128av12 31.85 32.15 33.14 T:lakekeyakv1 31.74? 33.80? 36.33? T:lunarkeyakv2 34.56 34.84 35.49 T:aeadaes128ocbtaglen64v1 34.68 34.87 36.34 T:aeadaes128ocbtaglen96v1 34.77 35.03 36.45 T:aeadaes128ocbtaglen128v1 37.14 38.12 39.31 T:aes128gcmv1 38.48 39.17 40.39 T:ketjemajorv2 39.55 39.75 41.28 T:aeadaes192ocbtaglen128v1 39.63 39.99 41.23 T:aeadaes192ocbtaglen96v1 39.63 40.07 41.36 T:aeadaes192ocbtaglen64v1 40.22 40.52 40.82 ascon128v12 41.51 42.55 43.74 T:aes256gcmv1 43.98 44.20 45.42 T:aeadaes256ocbtaglen64v1 43.82 44.21 45.46 T:aeadaes256ocbtaglen96v1 43.86 44.29 45.65 T:aeadaes256ocbtaglen128v1 44.36 44.52 45.66 T:aes128otrsv1 44.28 44.67 45.55 T:aes128otrsv2 44.56 45.59 47.77 T:aes128otrsv3 46.81 47.10 48.27 T:aes128otrpv1 46.99 47.28 48.74 T:aes128otrpv2 47.24 47.61 48.96 T:aes128otrpv3 47.78 48.16 49.04 T:ascon96v1 47.98 48.31 49.67 T:ascon128av11 48.00 48.42 49.53 aegis128l 49.02 49.33 50.35 T:ascon128v1 49.13 49.76 50.53 T:ascon128v11 51.30 52.32 53.14 T:aes128otrcv3 55.38 55.91 56.86 T:colm0v1 56.12? 56.60? 62.94? T:colm127v1 56.83 57.47 62.88 T:proest256otrv1 58.59 59.02 64.56 T:aes256otrsv1 58.69 59.05 60.16 T:aes256otrsv3 58.44? 59.59? 65.23? T:aes256otrsv2 61.31 61.68 62.79 T:aes256otrpv1 61.37 61.71 62.94 T:aes256otrpv2 61.49 62.16 63.33 T:aes256otrpv3 65.24 65.82 67.06 T:aes128n8t8silcv2 65.25 65.96 67.25 T:aes128n12t8silcv2 65.33 67.01 71.18 T:aes128n12t8silcv3 67.20 68.18 69.68 T:aes256otrcv3 72.51 74.00 76.02 T:deoxysi128v141 76.38 76.62 77.83 T:aes128n8t8clocv2 76.50 76.94 82.66 T:aes128n12clocv1 76.47 77.38 78.51 T:aes128n12t8clocv3 76.62 77.46 78.66 T:aes128n12t8clocv2 77.79 78.30 80.59 T:ketjesrv1 77.38 78.65 84.19 T:aes128n8clocv1 78.98 80.07 85.79 T:deoxysi256v141 80.77 81.38 82.20 T:ketjesrv2 83.81 84.28 89.69 T:aesjambuv1 102.64 103.57 108.02 T:deoxysii128v141 134.50 135.66 140.87 T:proest128otrv1 135.67 138.28 142.38 T:ketjejrv1 146.14 147.02 152.69 T:aezv5 147.64 149.82 153.35 T:aezv4 243.85 248.74 253.07 T:ketjejrv2 260.73 267.04 269.32 T:deoxysneq128128v13 265.58 268.07 271.04 T:deoxysneq128128v1 308.08 313.37 317.24 T:deoxysii256v141 316.86 322.25 324.72 T:deoxyseq128128v13 388.30 396.67 398.25 T:aezv1 405.95 409.80 412.10 T:aezv3 415.87 421.64 425.16 T:deoxyseq128128v1 421.16 425.56 429.19 T:deoxysneq256128v13 423.46 428.71 429.95 T:deoxysneq256128v1 479.06 481.60 482.38 T:twine80n6t4clocv3 478.90 482.27 485.97 T:twine80n6t4clocv2 550.48 554.27 560.39 T:deoxyseq256128v13 656.76 661.95 672.26 T:deoxyseq256128v1 2279.57 2306.10 2321.02 T:acorn128 3423.00 3430.72 3436.86 T:led80n6t4silcv2 3421.82 3439.07 3476.52 T:led80n6t4silcv3 3453.75 3463.74 3477.41 T:led80n6silcv1 7958.82 7973.16 8009.73 T:present80n6silcv1 7959.03 7982.66 8033.47 T:present80n6t4silcv2 7968.91 7985.13 8020.26 T:present80n6t4silcv3

Cycles/byte for 0+long encrypt 25% 50% 75% aead 7.29 7.40 7.54 T:norx6441v2 7.35 7.41 7.64 T:norx6441v3 8.66 8.77 8.85 T:norx3241v3 8.71 8.82 8.88 T:norx3241v2 8.73 8.83 8.90 T:morus640128v1 8.89 9.03 9.22 T:norx6441v1 9.22 9.33 9.53 T:morus640128v2 10.27 10.36 10.52 T:morus1280128v1 10.50 10.58 10.67 T:norx3241v1 10.94 11.05 11.41 T:norx6461v3 10.94 11.06 11.48 T:norx6461v2 13.03 13.10 13.17 T:norx3261v3 13.00 13.10 13.19 T:norx3261v2 13.28 13.37 13.54 T:norx6461v1 13.79 13.95 14.11 T:morus1280128v2 15.68 15.75 15.83 T:norx3261v1 15.64 15.85 15.96 T:morus1280256v1 15.53 15.90 16.61 T:morus1280256v2 15.78 16.60 17.24 T:norx6444v2 16.39? 16.95? 18.90? T:norx6444v3 19.36 19.78 20.51 T:norx6444v1 19.42 19.85 20.13 T:aegis128l 19.90 20.06 20.27 T:riverkeyakv2 19.78? 21.05? 22.75? T:oceankeyakv2 21.34 21.46 21.54 T:aegis128 21.93 22.30 22.92 T:tiaoxinv2 18.50? 22.33? 25.69? T:lunarkeyakv2 22.20 22.56 24.57 T:tiaoxinv1 22.80 23.04 23.77 T:acorn128v3 23.68 23.74 24.18 T:acorn128v2 23.98 24.59 24.78 T:ketjeminorv2 25.38 25.56 25.66 T:aegis256 25.46 25.88 26.69 T:lakekeyakv2 25.76 26.37 27.46 T:seakeyakv2 26.50 27.10 28.47 T:aes128gcmv1 26.08? 27.46? 30.05? T:aes256gcmv1 27.48 27.60 27.84 ascon128av12 29.43 30.36 31.27 T:lakekeyakv1 33.35 33.50 33.71 T:aeadaes128ocbtaglen128v1 33.39 33.66 34.41 T:aeadaes128ocbtaglen96v1 33.60 33.84 34.46 T:aeadaes128ocbtaglen64v1 33.39 33.98 36.34 T:ketjemajorv2 34.11 34.22 35.14 T:colm0v1 34.12 34.57 35.23 T:colm127v1 36.16 36.39 37.88 aegis128l 37.95 38.06 38.27 ascon128v12 38.39 38.57 39.03 T:aeadaes192ocbtaglen64v1 38.39 38.66 39.38 T:aeadaes192ocbtaglen96v1 38.46 39.06 41.92 T:aeadaes192ocbtaglen128v1 40.45 40.65 41.40 T:aes128otrsv3 40.41 40.76 41.47 T:aes128otrsv2 40.53 40.97 42.76 T:aes128otrsv1 42.72 42.91 44.18 T:aeadaes256ocbtaglen96v1 42.71 42.94 43.68 T:aeadaes256ocbtaglen64v1 42.77 43.00 44.80 T:aeadaes256ocbtaglen128v1 42.96 43.54 44.87 T:aes128n8t8silcv2 43.42 44.08 46.62 T:aes128n12t8silcv3 43.61 44.09 46.38 T:aes128n12t8silcv2 46.22 46.40 46.92 T:aes128otrpv3 46.39 46.68 48.83 T:aes128otrpv1 46.27 46.88 47.07 T:aes128otrpv2 47.69 47.98 48.45 T:ascon96v1 47.74 48.05 49.21 T:ascon128av11 47.98 48.52 49.28 T:aes128n12t8clocv2 48.04 48.69 49.62 T:aes128n12clocv1 48.70 48.94 49.39 T:aes128n8t8clocv2 48.22 48.94 50.29 T:aes128n8clocv1 48.48 48.99 49.52 T:ascon128v1 48.98 49.14 49.42 T:aes128n12t8clocv3 48.62 49.27 50.34 T:ascon128v11 51.87 52.29 54.84 T:aes128otrcv3 54.61 54.89 55.35 T:aes256otrsv2 54.84 55.00 55.96 T:aes256otrsv3 54.65 55.30 57.02 T:aes256otrsv1 57.01 58.29 60.23 T:proest256otrv1 60.43 60.71 61.53 T:aes256otrpv3 60.52 61.06 62.91 T:aes256otrpv2 60.45 61.08 62.97 T:aes256otrpv1 63.91 64.47 66.54 T:deoxysi128v141 66.46 66.62 67.37 T:deoxysii128v141 66.81 67.62 70.71 T:aes256otrcv3 70.55 70.81 72.48 T:ketjesrv1 71.57 72.16 72.88 T:deoxysi256v141 75.61 76.17 77.80 T:ketjesrv2 85.01 85.43 87.12 T:aesjambuv1 105.23 105.67 108.39 T:aezv5 118.73 120.91 122.19 T:aezv4 123.81? 124.67? 138.41? T:ketjejrv1 133.31 134.76 144.90 T:proest128otrv1 188.24 190.97 197.34 T:aezv1 202.54 204.38 215.73 T:deoxysii256v141 209.06 209.75 223.38 T:deoxyseq128128v1 209.67 212.39 222.89 T:deoxyseq128128v13 209.45 212.49 221.98 T:deoxysneq128128v1 209.64 212.58 222.79 T:deoxysneq128128v13 235.41 243.76 248.73 T:ketjejrv2 264.66 275.34 278.94 T:aezv3 324.07 332.52 336.57 T:twine80n6t4clocv2 324.23 333.50 337.53 T:twine80n6t4clocv3 362.68 368.69 378.06 T:deoxyseq256128v1 362.65 370.37 374.24 T:deoxysneq256128v13 362.74 371.69 378.91 T:deoxyseq256128v13 362.16 372.04 377.03 T:deoxysneq256128v1 2223.29 2245.42 2262.60 T:acorn128 2273.81 2292.28 2304.29 T:led80n6t4silcv3 2284.75 2298.75 2311.86 T:led80n6t4silcv2 2302.83 2319.61 2330.63 T:led80n6silcv1 5292.95 5312.27 5337.25 T:present80n6silcv1 5296.28 5320.08 5361.43 T:present80n6t4silcv3 5302.23 5320.78 5342.97 T:present80n6t4silcv2

Cycles/byte for 0+long decrypt 25% 50% 75% aead 7.33 7.40 7.45 T:norx6441v2 7.37 7.46 7.57 T:norx6441v3 8.57 8.62 8.80 T:morus640128v1 8.55 8.64 8.71 T:morus640128v2 8.68 8.80 9.09 T:norx6441v1 8.72 8.81 8.92 T:norx3241v3 8.73 8.82 8.87 T:norx3241v2 10.39 10.53 10.91 T:morus1280128v1 10.53 10.60 10.67 T:norx3241v1 10.94 11.00 11.08 T:norx6461v2 10.97 11.10 11.43 T:norx6461v3 13.03 13.12 13.21 T:norx3261v3 13.05 13.13 13.16 T:norx3261v2 13.04 13.14 13.25 T:norx6461v1 13.95 14.14 14.51 T:morus1280128v2 15.76 15.86 16.09 T:norx3261v1 15.79 15.91 15.98 T:morus1280256v2 15.84 15.94 16.05 T:morus1280256v1 16.16 16.53 17.19 T:norx6444v3 16.89 17.16 17.46 T:norx6444v2 19.76 19.90 20.11 T:aegis128l 20.21 20.33 20.60 T:norx6444v1 20.18? 20.40? 22.70? T:aegis128 20.02 20.52 21.03 T:riverkeyakv2 18.71? 20.93? 22.16? T:oceankeyakv2 17.19? 21.28? 24.80? T:lunarkeyakv2 21.69 22.25 23.39 T:tiaoxinv2 22.14 22.58 24.36 T:tiaoxinv1 23.68 23.93 24.11 T:ketjeminorv2 24.06 24.18 24.68 T:aegis256 24.35 24.50 24.69 T:acorn128v3 24.97 25.13 25.99 T:acorn128v2 25.73 26.05 27.24 T:lakekeyakv2 25.71 26.31 27.92 T:seakeyakv2 26.33 26.82 27.85 T:aes128gcmv1 26.51 27.13 27.93 T:aes256gcmv1 27.34 27.73 28.27 ascon128av12 29.71 30.23 30.93 T:lakekeyakv1 33.40 33.56 34.01 T:aeadaes128ocbtaglen128v1 33.50 33.64 34.11 T:aeadaes128ocbtaglen96v1 33.52 33.67 34.45 T:aeadaes128ocbtaglen64v1 33.61 34.00 36.32 T:ketjemajorv2 34.05 34.37 36.11 T:colm0v1 34.32 34.59 36.58 T:colm127v1 36.06 36.17 36.39 aegis128l 38.04 38.16 38.70 ascon128v12 38.50 38.64 39.12 T:aeadaes192ocbtaglen64v1 38.50 38.76 39.77 T:aeadaes192ocbtaglen128v1 38.54 38.90 40.97 T:aeadaes192ocbtaglen96v1 40.33 40.55 41.51 T:aes128otrsv3 40.08 40.69 41.52 T:aes128otrsv2 40.32 40.69 41.96 T:aes128otrsv1 42.69 42.85 43.09 T:aeadaes256ocbtaglen96v1 42.64 43.03 45.08 T:aeadaes256ocbtaglen128v1 42.49 43.10 45.09 T:aeadaes256ocbtaglen64v1 43.02 43.47 44.10 T:aes128n12t8silcv3 43.04 43.69 46.07 T:aes128n12t8silcv2 43.42 43.99 46.42 T:aes128n8t8silcv2 46.08 46.39 47.45 T:aes128otrpv3 46.09 46.40 46.88 T:aes128otrpv2 46.23 46.63 49.44 T:aes128otrpv1 47.76 47.84 48.05 T:ascon96v1 47.96 48.16 48.73 T:ascon128av11 48.09 48.62 50.06 T:aes128n8t8clocv2 48.49 48.82 49.26 T:aes128n12t8clocv2 48.43 49.06 51.91 T:aes128n8clocv1 48.23 49.15 49.41 T:aes128n12clocv1 48.85 49.24 50.02 T:aes128n12t8clocv3 48.96 49.25 49.52 T:ascon128v1 48.86 49.53 51.38 T:ascon128v11 51.55 52.28 54.16 T:aes128otrcv3 54.83 55.07 55.78 T:aes256otrsv3 54.30 55.20 55.69 T:aes256otrsv2 54.87 55.42 57.40 T:aes256otrsv1 57.21 57.87 60.32 T:proest256otrv1 60.51 60.75 61.46 T:aes256otrpv3 60.38 60.93 62.37 T:aes256otrpv1 60.58 61.00 62.25 T:aes256otrpv2 63.98 64.88 65.20 T:deoxysi128v141 66.55 67.18 70.35 T:deoxysii128v141 67.14 67.49 70.65 T:aes256otrcv3 70.11 71.14 72.63 T:ketjesrv1 72.01 72.32 73.61 T:deoxysi256v141 75.18 75.73 77.37 T:ketjesrv2 84.95 85.11 86.85 T:aesjambuv1 105.17 105.86 108.15 T:aezv5 118.62 119.25 122.56 T:aezv4 124.24 126.10 132.04 T:ketjejrv1 133.60 134.29 145.13 T:proest128otrv1 188.02 191.05 198.24 T:aezv1 202.44 204.64 214.92 T:deoxysii256v141 208.72 210.80 222.16 T:deoxyseq128128v13 209.21 211.05 225.74 T:deoxysneq128128v13 210.35 214.29 223.55 T:deoxyseq128128v1 213.88 216.92 224.85 T:deoxysneq128128v1 235.20 237.04 247.14 T:ketjejrv2 264.42 272.61 277.46 T:aezv3 321.88 325.24 336.74 T:twine80n6t4clocv3 323.62 327.03 334.12 T:twine80n6t4clocv2 366.36 368.93 377.20 T:deoxysneq256128v1 362.40 369.88 376.23 T:deoxyseq256128v13 362.28 372.10 377.02 T:deoxyseq256128v1 362.73 372.82 377.77 T:deoxysneq256128v13 2279.55 2295.12 2302.35 T:led80n6t4silcv2 2271.66 2296.24 2317.52 T:acorn128 2276.16 2299.00 2353.81 T:led80n6t4silcv3 2306.29 2319.71 2329.24 T:led80n6silcv1 5303.28 5314.78 5332.77 T:present80n6t4silcv2 5306.94 5326.50 5343.83 T:present80n6t4silcv3 5310.03 5334.21 5355.98 T:present80n6silcv1

Cycles/byte for 0+long forgery 25% 50% 75% aead 7.34 7.40 7.51 T:norx6441v2 7.36 7.44 7.47 T:norx6441v3 8.59 8.64 8.72 T:morus640128v2 8.57 8.69 8.79 T:morus640128v1 8.74 8.79 8.84 T:norx6441v1 8.73 8.80 8.84 T:norx3241v2 8.77 8.81 8.88 T:norx3241v3 10.43 10.49 10.60 T:morus1280128v1 10.50 10.61 10.74 T:norx3241v1 10.95 10.99 11.05 T:norx6461v2 11.01 11.06 11.19 T:norx6461v3 12.98 13.14 13.20 T:norx6461v1 13.13 13.17 13.28 T:norx3261v3 13.09 13.31 14.50 T:norx3261v2 14.02 14.17 14.49 T:morus1280128v2 15.68 15.76 15.86 T:norx3261v1 15.82 15.90 15.98 T:morus1280256v2 15.82 15.99 16.55 T:morus1280256v1 16.29 16.44 16.67 T:norx6444v3 17.06 17.36 17.68 T:norx6444v2 19.99 20.18 20.32 T:riverkeyakv2 19.96 20.23 21.18 T:aegis128l 20.19 20.25 20.92 T:aegis128 20.23 20.36 20.58 T:norx6444v1 20.30? 21.10? 22.86? T:oceankeyakv2 22.11 22.37 22.84 T:tiaoxinv1 22.02 22.45 23.51 T:tiaoxinv2 18.47? 22.89? 25.84? T:lunarkeyakv2 23.75 23.90 24.54 T:ketjeminorv2 23.96 24.18 24.49 T:aegis256 24.47 24.53 24.79 T:acorn128v3 24.91 25.05 25.20 T:acorn128v2 23.74? 26.00? 27.69? T:seakeyakv2 25.80? 26.18? 29.68? T:lakekeyakv2 25.98 26.98 28.01 T:aes256gcmv1 27.31 27.45 27.63 ascon128av12 26.08? 27.58? 30.26? T:aes128gcmv1 29.79? 30.35? 33.65? T:lakekeyakv1 33.48 33.57 34.02 T:aeadaes128ocbtaglen128v1 33.56 33.83 34.83 T:aeadaes128ocbtaglen96v1 33.22 33.86 34.77 T:ketjemajorv2 33.78 34.04 34.45 T:colm0v1 33.62 34.10 35.57 T:aeadaes128ocbtaglen64v1 34.34 34.44 34.58 T:colm127v1 36.06 36.25 36.50 aegis128l 38.07 38.22 38.72 ascon128v12 38.39 38.54 38.81 T:aeadaes192ocbtaglen96v1 38.48 38.63 39.47 T:aeadaes192ocbtaglen64v1 38.65 39.08 41.95 T:aeadaes192ocbtaglen128v1 40.42 40.62 42.56 T:aes128otrsv1 40.31 40.67 41.70 T:aes128otrsv2 40.28 40.70 41.53 T:aes128otrsv3 42.75 42.92 43.68 T:aeadaes256ocbtaglen64v1 42.83 43.02 43.47 T:aeadaes256ocbtaglen96v1 42.65 43.04 44.80 T:aeadaes256ocbtaglen128v1 42.99 43.48 44.07 T:aes128n12t8silcv3 43.18 43.74 43.84 T:aes128n8t8silcv2 43.23 43.88 46.24 T:aes128n12t8silcv2 46.14 46.39 47.03 T:aes128otrpv3 46.33 46.48 47.02 T:aes128otrpv2 46.29 46.64 49.17 T:aes128otrpv1 47.71 47.80 48.07 T:ascon96v1 47.94 48.19 48.74 T:ascon128av11 48.09 48.89 49.43 T:aes128n8t8clocv2 48.39 48.91 51.93 T:aes128n8clocv1 47.99 48.92 49.45 T:aes128n12t8clocv2 48.02 49.00 49.53 T:aes128n12clocv1 48.89 49.08 49.78 T:aes128n12t8clocv3 49.02 49.25 50.48 T:ascon128v1 49.10 49.34 51.32 T:ascon128v11 51.84 53.28 55.84 T:aes128otrcv3 54.75 55.09 55.81 T:aes256otrsv3 54.81 55.43 57.32 T:aes256otrsv1 54.96 55.61 57.87 T:aes256otrsv2 56.92 57.64 58.61 T:proest256otrv1 60.27 60.90 63.20 T:aes256otrpv1 60.61 61.01 63.25 T:aes256otrpv2 60.44 61.05 63.04 T:aes256otrpv3 64.52 65.06 67.74 T:deoxysi128v141 66.50 67.16 70.03 T:deoxysii128v141 67.27 67.98 70.68 T:aes256otrcv3 70.37 70.54 70.93 T:ketjesrv1 72.17 72.49 75.41 T:deoxysi256v141 75.49 76.17 77.32 T:ketjesrv2 85.02 85.16 86.73 T:aesjambuv1 105.07 105.94 109.17 T:aezv5 118.72 119.70 121.58 T:aezv4 124.41 125.44 127.42 T:ketjejrv1 133.45 134.43 136.38 T:proest128otrv1 188.19 190.85 199.42 T:aezv1 202.37 203.19 214.67 T:deoxysii256v141 209.83 211.98 221.22 T:deoxysneq128128v13 209.05 212.41 222.88 T:deoxyseq128128v1 210.46 212.41 219.91 T:deoxyseq128128v13 213.65 215.56 224.52 T:deoxysneq128128v1 234.23 235.70 249.12 T:ketjejrv2 264.05 266.88 275.41 T:aezv3 321.63 324.55 336.80 T:twine80n6t4clocv2 323.28 326.12 335.54 T:twine80n6t4clocv3 361.18 365.79 372.30 T:deoxyseq256128v13 362.67 366.52 376.37 T:deoxysneq256128v13 367.02 371.76 378.51 T:deoxysneq256128v1 363.55 373.61 380.89 T:deoxyseq256128v1 2257.48 2288.05 2313.94 T:led80n6t4silcv3 2272.18 2292.92 2301.59 T:led80n6t4silcv2 2275.63 2297.25 2321.10 T:acorn128 2300.55 2319.14 2330.16 T:led80n6silcv1 5300.57 5318.34 5349.85 T:present80n6t4silcv3 5308.22 5318.90 5347.17 T:present80n6silcv1 5303.13 5330.33 5349.57 T:present80n6t4silcv2

Cycles/byte for 1536+1536 encrypt 25% 50% 75% aead 9.71 9.72 9.93 T:norx6441v2 9.73 9.74 9.81 T:norx6441v3 10.61 10.62 10.68 T:norx3241v2 10.62 10.65 10.72 T:norx3241v3 10.78 10.83 10.93 T:morus640128v1 11.22 11.25 11.41 T:norx6441v1 11.23 11.26 11.31 T:morus640128v2 12.36 12.41 12.58 T:norx3241v1 13.89 13.93 14.10 T:norx6461v2 13.94 14.04 14.51 T:norx6461v3 15.26 15.28 15.38 T:norx3261v2 15.27 15.29 15.36 T:norx3261v3 16.13 16.15 16.24 T:norx6461v1 16.16 16.19 16.50 T:morus1280128v1 17.29 17.38 17.96 T:morus1280128v2 17.80 17.82 17.89 T:norx3261v1 20.50 20.62 20.84 T:morus1280256v1 20.77 20.85 21.10 T:morus1280256v2 23.71 23.77 24.34 T:aegis128l 23.74 23.97 25.31 T:riverkeyakv2 24.56 24.76 26.10 T:aegis128 25.98 25.99 26.32 T:norx6444v2 26.14 26.25 26.86 T:norx6444v3 27.68 27.98 28.88 T:acorn128v2 28.48 28.62 29.26 T:acorn128v3 29.96 30.00 30.35 T:aegis256 30.92 31.01 31.78 T:norx6444v1 31.12 31.19 32.41 ascon128av12 31.61 31.71 31.99 T:ketjeminorv2 32.73 32.78 33.08 T:lakekeyakv2 33.33 33.38 33.75 T:tiaoxinv1 33.34 33.50 34.03 T:tiaoxinv2 36.25 36.26 36.46 T:aeadaes128ocbtaglen96v1 36.25 36.30 36.77 T:aeadaes128ocbtaglen128v1 36.25 36.30 36.52 T:aeadaes128ocbtaglen64v1 37.54 37.68 39.83 T:lakekeyakv1 40.39 40.73 42.97 T:seakeyakv2 41.40 41.44 42.04 T:aeadaes192ocbtaglen128v1 41.39 41.51 42.10 T:aeadaes192ocbtaglen64v1 41.42 41.51 42.73 T:aeadaes192ocbtaglen96v1 41.88 42.04 42.71 ascon128v12 44.11 44.56 46.07 T:aes128gcmv1 45.96 46.03 46.55 T:aeadaes256ocbtaglen128v1 45.95 46.05 47.48 T:aeadaes256ocbtaglen96v1 46.06 46.27 47.56 T:aeadaes256ocbtaglen64v1 46.06 46.28 47.56 T:ketjemajorv2 47.05 47.14 47.69 T:aes128otrsv1 47.01 47.24 47.89 T:aes128otrsv2 47.07 47.34 48.71 T:aes128otrsv3 48.49 48.81 49.54 T:aes256gcmv1 49.52 49.69 51.24 T:aes128otrpv2 49.61 49.73 51.35 T:aes128otrpv1 49.76 49.99 51.72 T:aes128otrpv3 50.09 50.15 51.29 T:ascon96v1 50.20 50.34 50.77 T:ascon128v11 50.29 50.36 51.49 T:ascon128v1 50.12 50.38 51.40 T:ascon128av11 50.51 50.84 53.57 T:oceankeyakv2 54.64 54.87 56.00 aegis128l 55.26 55.56 56.61 T:aes128otrcv3 58.40 58.65 60.13 T:colm0v1 59.71 60.02 61.36 T:colm127v1 61.52 61.74 63.12 T:aes256otrsv2 61.66 61.97 63.16 T:aes256otrsv1 61.85 62.16 63.41 T:aes256otrsv3 63.51 64.01 65.65 T:proest256otrv1 64.18 64.34 65.96 T:aes256otrpv2 64.27 64.65 65.99 T:aes256otrpv1 64.78 65.05 66.54 T:aes256otrpv3 66.61 66.85 68.65 T:deoxysi128v141 67.68 67.80 69.99 T:aes128n12t8silcv2 67.52 67.98 69.21 T:aes128n12t8silcv3 67.98 68.37 69.94 T:aes128n8t8silcv2 71.80 72.09 73.54 T:aes256otrcv3 75.32 75.59 77.23 T:aes128n12clocv1 75.40 75.66 77.51 T:aes128n12t8clocv2 75.39 75.74 77.43 T:aes128n8t8clocv2 75.60 76.06 77.70 T:aes128n8clocv1 75.61 76.11 77.77 T:aes128n12t8clocv3 77.28 77.74 79.34 T:deoxysi256v141 81.30 81.68 82.85 T:ketjesrv1 83.69 83.97 85.22 T:ketjesrv2 83.95 85.08 87.13 T:lunarkeyakv2 86.84 87.93 88.41 T:aesjambuv1 105.42 106.45 112.26 T:deoxysii128v141 138.09 140.02 144.85 T:ketjejrv1 140.78 142.11 148.80 T:proest128otrv1 143.95 145.28 152.33 T:aezv5 143.84 145.29 152.97 T:aezv4 212.35 213.44 221.27 T:deoxysneq128128v1 211.87 214.06 220.77 T:deoxysneq128128v13 250.69 253.43 258.47 T:ketjejrv2 308.79 314.02 319.27 T:deoxysii256v141 317.90 320.77 327.20 T:deoxyseq128128v1 324.68 328.35 330.30 T:deoxyseq128128v13 369.97 372.39 375.67 T:deoxysneq256128v1 365.23 372.46 377.47 T:deoxysneq256128v13 380.65 385.22 389.62 T:aezv1 410.96 412.94 416.19 T:aezv3 476.54 483.48 488.69 T:twine80n6t4clocv3 477.42 483.78 489.02 T:twine80n6t4clocv2 552.91 555.28 557.19 T:deoxyseq256128v1 558.70 561.05 562.15 T:deoxyseq256128v13 2524.11 2533.03 2542.74 T:acorn128 3449.31 3457.73 3467.27 T:led80n6t4silcv3 3446.77 3458.01 3491.33 T:led80n6t4silcv2 3478.23 3484.19 3492.21 T:led80n6silcv1 7998.82 8013.23 8065.13 T:present80n6t4silcv2 8013.60 8021.66 8034.81 T:present80n6silcv1 8007.58 8030.68 8074.64 T:present80n6t4silcv3

Cycles/byte for 1536+1536 decrypt 25% 50% 75% aead 9.72 9.75 9.86 T:norx6441v2 9.77 9.81 9.90 T:norx6441v3 10.63 10.65 10.72 T:norx3241v2 10.64 10.65 10.70 T:norx3241v3 10.72 10.74 10.78 T:morus640128v1 10.79 10.81 10.93 T:morus640128v2 11.09 11.11 11.18 T:norx6441v1 12.37 12.38 12.42 T:norx3241v1 13.87 13.90 14.20 T:norx6461v2 13.95 14.01 14.23 T:norx6461v3 15.28 15.29 15.34 T:norx3261v2 15.28 15.31 15.43 T:norx3261v3 15.77 15.80 15.95 T:morus1280128v1 15.91 15.93 16.11 T:norx6461v1 17.33 17.35 17.45 T:morus1280128v2 17.84 17.89 18.28 T:norx3261v1 20.54 20.58 20.82 T:morus1280256v1 20.86 20.91 21.30 T:morus1280256v2 23.79 23.83 23.92 T:aegis128l 24.09 24.32 25.71 T:aegis128 24.32 24.40 25.15 T:riverkeyakv2 26.06 26.17 26.79 T:norx6444v3 26.28 26.31 26.58 T:norx6444v2 27.81 27.92 28.74 T:acorn128v2 29.08 29.39 30.42 T:aegis256 29.12 29.60 30.02 T:acorn128v3 30.93 30.97 31.59 T:ketjeminorv2 31.03 31.12 31.28 ascon128av12 31.40 31.62 33.37 T:norx6444v1 33.09 33.15 33.58 T:lakekeyakv2 33.30 33.38 34.72 T:tiaoxinv1 33.36 33.75 35.15 T:tiaoxinv2 36.87 36.97 37.39 T:aeadaes128ocbtaglen96v1 36.87 37.02 37.49 T:aeadaes128ocbtaglen128v1 36.94 37.15 38.05 T:aeadaes128ocbtaglen64v1 37.78 37.96 38.61 T:lakekeyakv1 40.89 40.99 41.52 T:seakeyakv2 41.79 42.02 42.13 ascon128v12 42.02 42.13 42.44 T:aeadaes192ocbtaglen128v1 42.05 42.19 43.68 T:aeadaes192ocbtaglen96v1 42.02 42.35 44.12 T:aeadaes192ocbtaglen64v1 44.18 44.48 46.08 T:aes128gcmv1 46.16 46.41 48.08 T:ketjemajorv2 46.71 46.81 47.61 T:aeadaes256ocbtaglen64v1 46.72 46.85 47.31 T:aes128otrsv2 46.89 46.96 47.48 T:aes128otrsv3 46.68 46.98 48.69 T:aeadaes256ocbtaglen128v1 46.85 47.02 47.26 T:aes128otrsv1 46.83 47.13 48.78 T:aeadaes256ocbtaglen96v1 48.78 49.44 51.43 T:aes256gcmv1 49.39 49.46 50.41 T:aes128otrpv1 49.43 49.74 50.50 T:aes128otrpv2 49.72 49.87 50.62 T:aes128otrpv3 50.62 50.82 51.49 T:ascon128v11 50.73 50.91 52.22 T:ascon128v1 50.78 50.97 51.53 T:oceankeyakv2 52.81 52.94 54.47 T:ascon128av11 52.65 53.05 53.87 T:ascon96v1 54.74 54.87 56.72 aegis128l 54.77 55.41 56.96 T:aes128otrcv3 58.16 58.38 60.71 T:colm0v1 59.21 59.39 61.04 T:colm127v1 61.46 61.62 65.23 T:aes256otrsv1 61.54 61.75 62.46 T:aes256otrsv3 61.48 62.00 63.20 T:aes256otrsv2 63.06 63.46 64.71 T:proest256otrv1 64.19 64.56 65.92 T:aes256otrpv2 64.23 64.68 65.96 T:aes256otrpv1 64.50 64.89 66.47 T:aes256otrpv3 67.30 67.63 69.58 T:aes128n12t8silcv2 67.16 67.76 74.37 T:aes128n12t8silcv3 67.34 67.79 69.29 T:aes128n8t8silcv2 71.32 71.71 78.21 T:aes256otrcv3 75.57 76.13 78.99 T:deoxysi128v141 78.15 78.42 80.24 T:aes128n12t8clocv2 78.16 78.44 80.36 T:aes128n12clocv1 78.42 78.89 80.81 T:aes128n12t8clocv3 78.21 79.35 80.45 T:aes128n8t8clocv2 79.06 80.29 81.25 T:aes128n8clocv1 80.85 81.13 82.53 T:ketjesrv1 84.08 84.53 87.07 T:ketjesrv2 84.96 86.16 93.12 T:deoxysi256v141 86.08 86.36 87.77 T:aesjambuv1 84.67 86.44 92.91 T:lunarkeyakv2 105.38 107.15 112.61 T:deoxysii128v141 138.50 140.41 145.90 T:ketjejrv1 140.62 141.87 147.02 T:proest128otrv1 143.62 144.86 151.95 T:aezv4 143.63 145.36 150.92 T:aezv5 249.37 254.90 256.00 T:ketjejrv2 263.63 266.46 274.16 T:deoxysneq128128v1 265.27 268.23 271.45 T:deoxysneq128128v13 311.52 315.19 317.69 T:deoxysii256v141 321.63 327.00 329.36 T:deoxyseq128128v13 384.05 386.82 389.59 T:aezv1 409.77 412.82 415.63 T:aezv3 418.13 423.47 430.09 T:deoxyseq128128v1 427.00 429.46 434.09 T:deoxysneq256128v1 424.19 429.76 435.12 T:deoxysneq256128v13 477.34 482.88 486.69 T:twine80n6t4clocv3 477.93 483.93 485.47 T:twine80n6t4clocv2 558.50 560.19 562.02 T:deoxyseq256128v13 664.83 667.15 671.62 T:deoxyseq256128v1 2556.97 2570.16 2584.05 T:acorn128 3441.04 3453.62 3461.79 T:led80n6t4silcv2 3448.06 3453.83 3459.25 T:led80n6t4silcv3 3484.53 3489.84 3498.45 T:led80n6silcv1 8012.27 8016.43 8096.47 T:present80n6silcv1 8009.87 8024.26 8074.76 T:present80n6t4silcv2 8018.39 8057.20 8078.17 T:present80n6t4silcv3

Cycles/byte for 1536+1536 forgery 25% 50% 75% aead 9.70 9.73 9.89 T:norx6441v2 9.76 9.78 9.81 T:norx6441v3 10.63 10.64 10.76 T:norx3241v3 10.63 10.67 10.99 T:norx3241v2 10.71 10.73 10.75 T:morus640128v1 10.79 10.82 10.99 T:morus640128v2 11.09 11.11 11.14 T:norx6441v1 12.36 12.37 12.41 T:norx3241v1 13.86 13.88 13.91 T:norx6461v2 13.95 13.99 14.13 T:norx6461v3 15.27 15.29 15.33 T:norx3261v2 15.28 15.33 15.56 T:norx3261v3 15.78 15.80 16.19 T:morus1280128v1 15.92 15.97 16.39 T:norx6461v1 17.30 17.35 17.43 T:morus1280128v2 17.83 17.84 17.96 T:norx3261v1 20.54 20.58 20.76 T:morus1280256v1 20.83 20.87 21.06 T:morus1280256v2 23.79 23.84 24.18 T:aegis128l 24.03 24.10 24.49 T:aegis128 24.37 24.61 24.70 T:riverkeyakv2 26.15 26.31 27.47 T:norx6444v3 26.40 26.49 27.04 T:norx6444v2 27.74 27.77 28.09 T:acorn128v2 29.10 29.15 29.34 T:aegis256 29.13 29.56 29.71 T:acorn128v3 31.04 31.16 32.56 T:ketjeminorv2 31.01 31.16 31.65 ascon128av12 31.45 31.51 31.93 T:norx6444v1 33.10 33.21 33.61 T:lakekeyakv2 33.28 33.42 34.93 T:tiaoxinv2 33.32 33.45 34.83 T:tiaoxinv1 36.98 37.02 37.19 T:aeadaes128ocbtaglen96v1 36.83 37.02 37.58 T:aeadaes128ocbtaglen128v1 37.01 37.11 37.68 T:aeadaes128ocbtaglen64v1 37.82 37.94 38.31 T:lakekeyakv1 41.08 41.36 42.43 T:seakeyakv2 41.80 42.01 42.08 ascon128v12 42.01 42.11 42.67 T:aeadaes192ocbtaglen64v1 42.02 42.13 42.49 T:aeadaes192ocbtaglen128v1 42.06 42.23 43.67 T:aeadaes192ocbtaglen96v1 44.25 44.80 47.27 T:aes128gcmv1 46.09 46.22 46.67 T:ketjemajorv2 46.50 46.72 47.05 T:aeadaes256ocbtaglen128v1 46.56 46.76 47.60 T:aeadaes256ocbtaglen96v1 46.73 46.92 48.51 T:aeadaes256ocbtaglen64v1 46.84 46.99 47.47 T:aes128otrsv2 46.90 47.10 47.56 T:aes128otrsv3 46.92 47.32 48.71 T:aes128otrsv1 48.42 48.82 50.15 T:aes256gcmv1 49.40 49.57 50.16 T:aes128otrpv2 49.52 49.89 51.54 T:aes128otrpv1 49.79 49.90 50.98 T:ascon96v1 49.82 49.95 50.29 T:ascon128av11 49.84 50.37 51.88 T:aes128otrpv3 50.63 50.88 51.79 T:ascon128v11 50.75 51.24 52.57 T:ascon128v1 50.99 51.41 53.40 T:oceankeyakv2 54.81 54.94 55.53 aegis128l 54.76 55.47 57.16 T:aes128otrcv3 57.81 58.06 58.51 T:colm0v1 59.23 59.39 61.17 T:colm127v1 61.57 61.80 62.27 T:aes256otrsv1 61.68 61.88 63.37 T:aes256otrsv2 61.73 61.89 62.60 T:aes256otrsv3 63.22 63.63 65.22 T:proest256otrv1 64.16 64.51 66.41 T:aes256otrpv2 64.24 64.73 66.32 T:aes256otrpv1 64.69 65.04 66.42 T:aes256otrpv3 67.25 67.45 68.64 T:aes128n12t8silcv3 67.29 67.59 69.60 T:aes128n12t8silcv2 67.05 67.76 68.47 T:aes128n8t8silcv2 71.17 71.71 73.54 T:aes256otrcv3 75.91 76.90 83.69 T:deoxysi128v141 77.83 78.43 80.21 T:aes128n12clocv1 78.01 78.82 80.09 T:aes128n8t8clocv2 78.41 78.93 81.48 T:aes128n12t8clocv3 78.21 79.01 80.33 T:aes128n12t8clocv2 78.85 79.48 80.31 T:aes128n8clocv1 80.80 81.18 81.88 T:ketjesrv1 84.14 84.33 85.14 T:ketjesrv2 84.60 85.37 93.72 T:lunarkeyakv2 84.83 85.55 88.70 T:deoxysi256v141 85.94 86.25 87.84 T:aesjambuv1 105.68 106.47 112.77 T:deoxysii128v141 138.75 139.95 147.84 T:ketjejrv1 140.47 141.59 147.56 T:proest128otrv1 143.22 144.49 150.83 T:aezv5 143.83 145.07 151.62 T:aezv4 248.84 252.84 256.73 T:ketjejrv2 263.57 264.87 270.76 T:deoxysneq128128v13 264.18 269.75 271.85 T:deoxysneq128128v1 309.33 311.55 317.49 T:deoxysii256v141 326.85 329.75 331.02 T:deoxyseq128128v13 383.97 386.08 390.53 T:aezv1 407.21 410.33 417.58 T:aezv3 417.31 423.87 427.76 T:deoxyseq128128v1 426.29 426.91 429.22 T:deoxysneq256128v13 427.07 430.42 430.88 T:deoxysneq256128v1 482.63 485.98 488.24 T:twine80n6t4clocv2 485.72 488.57 492.47 T:twine80n6t4clocv3 557.06 564.46 568.07 T:deoxyseq256128v13 664.00 665.83 669.42 T:deoxyseq256128v1 2565.90 2581.83 2586.33 T:acorn128 3439.17 3451.05 3463.99 T:led80n6t4silcv3 3448.51 3453.79 3455.76 T:led80n6t4silcv2 3472.64 3484.90 3490.57 T:led80n6silcv1 8009.34 8017.08 8030.43 T:present80n6silcv1 8017.64 8026.90 8069.00 T:present80n6t4silcv2 8006.12 8029.78 8053.87 T:present80n6t4silcv3

Cycles/byte for 64+64 encrypt 25% 50% 75% aead 47.09 47.45 48.38 T:norx3241v2 47.60 47.77 49.20 T:norx3241v1 47.57 47.81 48.20 T:norx3241v3 51.52 51.89 52.77 T:morus640128v1 52.22 52.30 53.89 T:norx6441v1 52.62 53.41 53.84 T:norx6441v2 53.16 53.43 54.59 T:morus640128v2 53.67 53.84 55.47 T:norx6441v3 58.37 58.83 59.39 T:norx3261v3 58.40 58.88 59.34 T:norx3261v1 58.65 58.88 59.43 T:norx3261v2 64.62 65.12 66.35 ascon128av12 65.64 65.88 67.88 T:norx6461v1 66.53 66.66 68.12 T:norx6461v2 66.51 66.90 68.07 T:norx6461v3 73.81 74.44 75.46 ascon128v12 76.16 76.34 78.50 T:aeadaes128ocbtaglen64v1 75.99 76.52 78.34 T:aeadaes128ocbtaglen128v1 76.38 76.65 77.98 T:aeadaes128ocbtaglen96v1 79.54 80.26 83.05 T:riverkeyakv2 83.24 83.62 86.09 T:aeadaes192ocbtaglen96v1 83.57 83.84 86.24 T:aeadaes192ocbtaglen64v1 83.44 84.17 86.02 T:aeadaes192ocbtaglen128v1 86.21 86.81 91.61 T:ascon128v11 86.59 87.34 92.03 T:ascon128v1 88.72 89.09 90.38 T:aegis128 91.32 91.66 92.85 T:aeadaes256ocbtaglen64v1 91.48 92.22 99.89 T:aeadaes256ocbtaglen128v1 91.79 92.45 94.75 T:aeadaes256ocbtaglen96v1 95.06 95.57 96.52 T:ascon128av11 95.57 95.94 97.40 T:ascon96v1 98.34 98.91 100.84 T:morus1280128v2 103.41 104.09 105.33 T:aes128otrsv2 105.15 105.50 106.74 T:aes128otrpv2 104.61 105.58 106.82 T:aes128otrsv1 105.20 105.84 106.80 T:aes128otrsv3 105.58 106.22 108.20 T:aes128otrpv1 106.72 107.35 109.65 T:aes128otrpv3 110.52 110.82 111.73 T:aes128n12t8clocv2 111.55 112.14 118.54 T:aes128n8t8clocv2 111.82 112.77 114.49 T:aes128n12t8clocv3 112.28 112.97 114.88 T:aes128n12t8silcv3 112.84 113.02 114.18 T:aegis128l 112.55 113.17 115.47 T:aes128n8clocv1 112.70 113.23 114.37 T:aes128n8t8silcv2 112.74 113.70 115.11 T:aes128n12clocv1 112.98 113.95 114.39 T:aes128n12t8silcv2 114.63 115.10 116.24 T:colm0v1 115.81 117.02 120.39 T:colm127v1 116.14 117.34 118.59 T:ketjeminorv2 118.59 118.80 119.55 T:aegis256 124.50 125.74 132.20 T:aes128otrcv3 125.54 125.98 127.90 T:morus1280128v1 125.66 126.00 127.87 T:morus1280256v1 125.98 126.30 129.08 T:deoxysi128v141 127.94 128.72 131.13 T:aes256otrsv2 128.88 129.66 132.16 T:aes256otrpv2 129.48 130.62 138.39 T:aes256otrpv1 130.45 131.10 132.11 T:aes256otrsv3 128.67? 131.67? 143.55? T:aes256otrsv1 131.16 132.52 138.49 T:lakekeyakv1 132.06 132.62 133.70 T:morus1280256v2 132.23 133.56 134.93 T:aes256otrpv3 135.13 135.77 137.76 T:acorn128v2 135.75 136.13 138.86 T:aesjambuv1 135.89 136.37 141.41 T:acorn128v3 153.64 154.00 155.52 T:ketjesrv1 156.09 158.09 161.03 T:aes256otrcv3 166.43 166.84 168.49 T:ketjesrv2 168.26 169.38 175.25 T:lakekeyakv2 169.98 170.68 172.21 T:deoxysii128v141 184.89 185.49 191.04 T:aes128gcmv1 186.52 187.73 197.41 T:deoxysi256v141 194.45 198.58 213.16 T:aes256gcmv1 203.66 204.42 209.41 T:proest256otrv1 203.98 204.84 209.26 T:norx6444v2 205.81 207.26 207.98 T:ketjejrv1 207.25 210.94 223.08 T:norx6444v3 212.36 212.85 214.52 aegis128l 215.75 216.46 220.86 T:ketjemajorv2 214.95 217.91 221.78 T:aezv4 221.32 222.05 226.88 T:aezv5 245.83 249.23 261.70 T:norx6444v1 253.82 254.10 256.19 T:tiaoxinv2 253.79 254.44 257.76 T:tiaoxinv1 259.55 259.85 263.50 T:deoxysneq128128v13 259.70 260.66 270.98 T:deoxysneq128128v1 296.81 297.50 299.62 T:proest128otrv1 355.55 356.28 359.77 T:ketjejrv2 364.40 366.38 396.73 T:deoxysii256v141 384.35 387.81 397.91 T:seakeyakv2 388.75 388.95 390.34 T:deoxyseq128128v1 418.74 420.66 429.24 T:deoxyseq128128v13 429.32 429.93 433.38 T:deoxysneq256128v13 429.46 430.77 436.26 T:deoxysneq256128v1 437.66 440.55 446.25 T:aezv1 527.46 529.36 536.89 T:twine80n6t4clocv3 527.45 529.71 542.81 T:twine80n6t4clocv2 542.88 546.35 553.63 T:oceankeyakv2 610.49 613.49 618.38 T:aezv3 653.78 654.33 658.44 T:deoxyseq256128v1 701.09 703.41 714.83 T:deoxyseq256128v13 1334.79 1341.80 1360.84 T:lunarkeyakv2 3836.37 3865.06 4025.00 T:led80n6t4silcv2 3837.52 3867.38 4021.17 T:led80n6t4silcv3 3884.34 3989.10 4143.62 T:led80n6silcv1 8796.08 8896.64 9003.81 T:acorn128 8925.52 9083.35 9165.11 T:present80n6t4silcv3 8915.21 9105.70 9145.90 T:present80n6t4silcv2 9037.48 9123.79 9202.09 T:present80n6silcv1

Cycles/byte for 64+64 decrypt 25% 50% 75% aead 47.00 47.34 47.72 T:norx3241v1 47.77 48.02 48.81 T:norx3241v3 47.83 48.03 49.02 T:norx3241v2 51.19 51.36 52.34 T:morus640128v1 52.88 52.98 53.77 T:norx6441v1 52.64 53.19 54.08 T:norx6441v2 53.09 53.46 53.79 T:morus640128v2 53.24 53.64 54.73 T:norx6441v3 58.62 58.81 59.70 T:norx3261v1 59.09 59.26 60.50 T:norx3261v2 59.21 59.41 60.12 T:norx3261v3 64.73 64.95 66.11 ascon128av12 65.36 65.78 66.83 T:norx6461v1 65.79 66.26 66.95 T:norx6461v2 66.62 66.84 67.76 T:norx6461v3 74.73 74.95 76.30 ascon128v12 81.97 83.02 86.59 T:riverkeyakv2 87.05 87.37 92.26 T:ascon128v1 86.50 87.50 92.09 T:ascon128v11 88.91 89.16 89.74 T:aegis128 88.46 89.22 91.27 T:aeadaes128ocbtaglen64v1 89.02 89.50 90.98 T:aeadaes128ocbtaglen96v1 89.38 90.45 97.43 T:aeadaes128ocbtaglen128v1 97.95 98.39 98.89 T:morus1280128v2 98.30 98.55 101.16 T:aeadaes192ocbtaglen64v1 98.44 98.82 100.36 T:aeadaes192ocbtaglen96v1 98.77 99.08 99.64 T:ascon128av11 98.39 99.36 103.05 T:ascon96v1 98.53 100.09 106.53 T:aeadaes192ocbtaglen128v1 104.33 104.70 106.32 T:aes128otrsv2 105.14 105.54 107.62 T:aes128otrsv3 105.54 106.01 106.90 T:aes128otrpv2 104.84 106.42 111.62 T:aes128otrsv1 106.17 106.66 108.55 T:aes128otrpv1 106.94 107.83 109.24 T:aes128otrpv3 108.78 109.00 110.57 T:aeadaes256ocbtaglen96v1 108.59 109.12 111.13 T:aeadaes256ocbtaglen64v1 108.66 109.49 113.11 T:aeadaes256ocbtaglen128v1 113.49 113.91 115.08 T:aes128n8t8clocv2 113.50 113.98 118.45 T:aes128n12t8clocv2 113.11 114.01 114.74 T:aes128n8t8silcv2 113.80 114.03 114.68 T:aegis128l 113.52 114.34 115.19 T:aes128n12t8silcv2 114.41 114.88 116.08 T:aes128n12t8silcv3 115.27 115.57 117.05 T:colm0v1 115.13 115.62 117.09 T:aes128n8clocv1 115.47 115.80 116.95 T:ketjeminorv2 114.95 115.93 117.79 T:aes128n12t8clocv3 115.67 116.34 118.21 T:aes128n12clocv1 116.77 117.02 118.73 T:colm127v1 117.11 117.40 117.90 T:aegis256 125.30 125.49 127.54 T:morus1280128v1 125.07 125.84 127.15 T:aes128otrcv3 126.60 126.85 127.46 T:morus1280256v1 128.45 128.61 131.21 T:aes256otrsv2 128.71 130.07 130.95 T:aes256otrsv1 129.93 130.49 132.89 T:aes256otrsv3 129.98 130.55 131.82 T:aes256otrpv1 131.31 132.45 134.10 T:aes256otrpv3 133.38 133.79 134.77 T:morus1280256v2 133.92 134.46 135.39 T:aesjambuv1 130.67? 134.77? 166.46? T:aes256otrpv2 133.39 135.66 139.06 T:lakekeyakv1 136.38 136.81 139.31 T:acorn128v2 137.16 137.69 138.62 T:acorn128v3 151.42 153.70 155.79 T:deoxysi128v141 153.96 154.58 155.80 T:ketjesrv1 157.12 158.00 160.45 T:aes256otrcv3 166.69 167.07 169.05 T:ketjesrv2 169.32 169.63 171.45 T:deoxysii128v141 171.34 173.16 178.91 T:lakekeyakv2 184.16 185.70 191.50 T:aes128gcmv1 193.27 194.58 202.22 T:aes256gcmv1 203.95 204.75 206.03 T:proest256otrv1 205.80 206.15 209.34 T:norx6444v2 207.86 209.00 210.34 T:ketjejrv1 208.45 209.62 211.83 T:norx6444v3 212.48 213.09 215.42 aegis128l 213.12 214.22 215.63 T:aezv4 212.54 214.45 224.74 T:deoxysi256v141 219.09 220.41 225.67 T:ketjemajorv2 220.62 221.73 224.68 T:aezv5 248.55 250.05 259.27 T:norx6444v1 253.79 254.06 256.88 T:tiaoxinv1 253.82 254.25 255.33 T:tiaoxinv2 297.95 299.52 306.41 T:proest128otrv1 311.84 313.76 316.94 T:deoxysneq128128v13 312.04 314.22 327.69 T:deoxysneq128128v1 354.88 355.79 358.79 T:ketjejrv2 363.25 363.67 367.73 T:deoxysii256v141 388.99? 397.56? 446.93? T:seakeyakv2 417.54 418.21 422.88 T:deoxyseq128128v13 447.29 450.98 459.95 T:aezv1 485.02 488.57 499.02 T:deoxysneq256128v13 490.77 491.77 497.23 T:deoxyseq128128v1 486.94 495.46 535.25 T:deoxysneq256128v1 526.03 527.11 533.12 T:twine80n6t4clocv3 525.83 527.48 544.47 T:twine80n6t4clocv2 547.95 549.77 559.77 T:oceankeyakv2 608.38 611.87 619.62 T:aezv3 700.52 701.56 704.96 T:deoxyseq256128v13 765.10 768.30 793.56 T:deoxyseq256128v1 1338.09 1348.91 1403.26 T:lunarkeyakv2 3834.50 3848.17 3999.12 T:led80n6t4silcv2 3838.80 3861.52 4049.08 T:led80n6t4silcv3 3879.37 3905.05 4066.64 T:led80n6silcv1 8857.44 8930.16 8985.57 T:acorn128 9027.23 9052.89 9107.87 T:present80n6t4silcv2 9022.34 9052.98 9103.32 T:present80n6t4silcv3 8940.63 9076.88 9120.11 T:present80n6silcv1

Cycles/byte for 64+64 forgery 25% 50% 75% aead 46.98 47.23 47.85 T:norx3241v1 47.42 47.74 48.78 T:norx3241v3 47.54 47.84 48.67 T:norx3241v2 51.38 51.57 52.13 T:morus640128v1 52.62 52.95 53.45 T:norx6441v2 52.38 53.02 53.52 T:norx6441v1 53.00 53.13 53.38 T:morus640128v2 53.04 53.35 53.81 T:norx6441v3 58.30 58.75 59.66 T:norx3261v1 58.81 59.16 59.62 T:norx3261v2 59.01 59.33 59.98 T:norx3261v3 64.70 65.01 65.59 ascon128av12 65.25 65.66 66.11 T:norx6461v1 66.03 66.21 66.98 T:norx6461v2 66.38 66.84 67.31 T:norx6461v3 74.28 74.55 75.41 ascon128v12 82.57? 85.50? 95.06? T:riverkeyakv2 86.78 87.16 89.45 T:ascon128v1 86.82 87.37 89.87 T:ascon128v11 88.76 89.09 89.92 T:aegis128 88.74 89.12 90.62 T:aeadaes128ocbtaglen128v1 88.77 89.42 89.89 T:aeadaes128ocbtaglen64v1 88.18 89.67 92.55 T:aeadaes128ocbtaglen96v1 94.30 94.48 95.60 T:ascon128av11 94.55 94.98 96.09 T:ascon96v1 97.26 97.62 98.60 T:morus1280128v2 96.97 97.76 98.45 T:aeadaes192ocbtaglen96v1 98.20 98.44 99.19 T:aeadaes192ocbtaglen64v1 97.99 98.50 99.61 T:aeadaes192ocbtaglen128v1 104.27 104.48 105.24 T:aes128otrsv2 104.35 104.78 106.09 T:aes128otrsv1 104.99 105.47 106.30 T:aes128otrpv2 105.20 105.80 107.10 T:aes128otrsv3 105.92 106.59 107.93 T:aes128otrpv1 107.12 107.52 108.52 T:aes128otrpv3 108.16 108.72 109.68 T:aeadaes256ocbtaglen128v1 108.63 108.89 109.54 T:aeadaes256ocbtaglen64v1 108.10 108.95 112.95 T:aeadaes256ocbtaglen96v1 112.84 113.34 114.62 T:aes128n12t8clocv2 113.17 113.59 114.93 T:aes128n8t8silcv2 113.27 113.77 116.20 T:aes128n8t8clocv2 114.09 114.27 115.07 T:aegis128l 113.85 114.45 115.52 T:aes128n12t8silcv3 113.54 114.66 117.40 T:aes128n12t8silcv2 114.56 115.01 115.63 T:colm0v1 115.03 115.70 118.55 T:aes128n8clocv1 114.94 115.85 118.96 T:aes128n12clocv1 115.83 116.15 117.02 T:colm127v1 113.80 116.45 125.93 T:aes128n12t8clocv3 115.59 116.59 121.62 T:ketjeminorv2 117.41 117.61 117.77 T:aegis256 124.33 124.80 126.06 T:aes128otrcv3 125.45 125.76 128.34 T:morus1280128v1 126.50 126.81 127.36 T:morus1280256v1 127.75 128.62 130.08 T:aes256otrsv1 128.31 128.92 132.60 T:aes256otrsv2 130.10 130.45 132.41 T:aes256otrsv3 129.70 130.52 138.18 T:aes256otrpv2 131.27 131.80 134.03 T:aes256otrpv3 130.17 131.88 136.88 T:aes256otrpv1 133.29 133.59 133.85 T:morus1280256v2 133.52 133.87 134.42 T:aesjambuv1 132.75 134.67 137.20 T:lakekeyakv1 136.98 137.16 138.44 T:acorn128v3 136.58 137.74 143.98 T:acorn128v2 153.68 154.13 154.97 T:ketjesrv1 151.82 154.43 158.77 T:deoxysi128v141 156.03 157.12 159.44 T:aes256otrcv3 166.29 166.98 168.08 T:ketjesrv2 170.26 171.39 175.98 T:lakekeyakv2 170.69 172.73 177.39 T:deoxysii128v141 184.05 185.66 197.73 T:aes128gcmv1 194.12 197.15 206.47 T:aes256gcmv1 198.85 199.08 200.94 T:proest256otrv1 206.71 207.12 209.83 T:ketjejrv1 206.09 207.14 208.23 T:norx6444v2 208.32 208.73 210.94 T:norx6444v3 212.38 212.53 213.69 aegis128l 212.32 213.66 214.84 T:aezv4 213.24 214.27 223.80 T:deoxysi256v141 217.78 219.38 221.45 T:ketjemajorv2 219.03 220.33 223.95 T:aezv5 248.65 249.60 251.58 T:norx6444v1 253.80 254.20 256.22 T:tiaoxinv1 254.30 255.43 260.01 T:tiaoxinv2 297.60 298.86 302.19 T:proest128otrv1 312.04 313.17 323.46 T:deoxysneq128128v1 311.20 313.23 314.68 T:deoxysneq128128v13 354.37 355.59 359.56 T:ketjejrv2 363.62 363.92 369.35 T:deoxysii256v141 386.95 388.79 394.70 T:seakeyakv2 418.28 419.20 423.14 T:deoxyseq128128v13 448.28 451.36 461.94 T:aezv1 485.20 485.74 488.55 T:deoxysneq256128v1 485.34 486.85 491.85 T:deoxysneq256128v13 489.38 493.18 504.96 T:deoxyseq128128v1 525.84 526.57 528.88 T:twine80n6t4clocv2 525.68 527.14 527.98 T:twine80n6t4clocv3 547.95 553.08 607.65 T:oceankeyakv2 609.41 610.91 618.27 T:aezv3 701.60 702.59 706.13 T:deoxyseq256128v13 763.02 765.25 776.21 T:deoxyseq256128v1 1337.05 1344.44 1397.54 T:lunarkeyakv2 3837.08 3851.18 4021.34 T:led80n6t4silcv3 3833.30 3880.57 3992.01 T:led80n6t4silcv2 3879.09 3910.25 4088.63 T:led80n6silcv1 8907.92 8975.54 9055.20 T:acorn128 9026.62 9063.37 9093.57 T:present80n6t4silcv2 9033.24 9086.50 9199.48 T:present80n6silcv1 8930.38 9092.02 9150.48 T:present80n6t4silcv3