| Cycles/byte for long+0 encrypt |
| 25% | 50% | 75% | aead |
| 1.47 | 1.48 | 1.49 | T:aes128gcmv1 |
| 1.81 | 1.82 | 1.83 | T:aes256gcmv1 |
| 5.20 | 5.23 | 5.25 | ascon128av12 |
| 7.60 | 7.64 | 7.67 | ascon128v12 |
| 7.62 | 7.66 | 7.71 | ascon80pqv12 |
| 11.10 | 11.13 | 11.15 | ascon128abi32v12 |
| 16.15 | 16.17 | 16.19 | ascon128bi32v12 |
| 16.57 | 16.61 | 16.65 | T:schwaemm256128v2 |
| 22.00 | 22.04 | 22.09 | T:schwaemm192192v2 |
| 22.75 | 22.78 | 22.82 | T:schwaemm128128v2 |
| 24.31 | 24.67 | 25.01 | T:schwaemm256256v2 |
| 32.25 | 32.32 | 32.39 | T:isapa128av20 |
| 33.91 | 34.01 | 34.09 | T:isapa128v20 |
| 39.37 | 39.44 | 39.49 | T:giftcofb128v1 |
| 40.11 | 40.26 | 40.34 | T:xoodyakround3 |
| 45.41 | 45.45 | 45.53 | T:romulusn |
| 56.37 | 56.46 | 56.54 | romulusn |
| 60.14 | 60.24 | 60.76 | T:tinyjambu128v2 |
| 68.95 | 69.08 | 69.14 | T:tinyjambu192v2 |
| 75.26 | 75.62 | 75.69 | T:tinyjambu256v2 |
| 84.42 | 84.51 | 84.60 | romulusm |
| 87.19 | 87.28 | 87.34 | T:isapk128av20 |
| 115.43 | 115.75 | 116.12 | T:isapk128v20 |
| 166.70 | 166.80 | 166.88 | T!!!romulust |
| 181.42 | 181.51 | 181.64 | T:elephant200v2 |
| 289.64 | 290.81 | 292.40 | T:isapxv20 |
| 6284.38 | 6296.21 | 6313.40 | T:elephant176v2 |
| 9379.15 | 9380.05 | 9381.38 | T:elephant160v2 |
| 20208.56 | 20216.32 | 20222.76 | aes256gcmv1 |
|
| Cycles/byte for long+0 decrypt |
| 25% | 50% | 75% | aead |
| 1.27 | 1.30 | 1.31 | T:aes128gcmv1 |
| 1.82 | 1.82 | 1.83 | T:aes256gcmv1 |
| 5.10 | 5.11 | 5.13 | ascon128av12 |
| 7.62 | 7.63 | 7.65 | ascon128v12 |
| 7.63 | 7.64 | 7.66 | ascon80pqv12 |
| 10.99 | 11.00 | 11.01 | ascon128abi32v12 |
| 16.21 | 16.24 | 16.25 | ascon128bi32v12 |
| 16.57 | 16.61 | 16.64 | T:schwaemm256128v2 |
| 22.00 | 22.04 | 22.10 | T:schwaemm192192v2 |
| 22.73 | 22.82 | 23.49 | T:schwaemm128128v2 |
| 23.45 | 23.52 | 23.59 | T:schwaemm256256v2 |
| 32.35 | 32.47 | 32.55 | T:isapa128av20 |
| 33.90 | 33.99 | 34.07 | T:isapa128v20 |
| 39.16 | 39.21 | 39.26 | T:giftcofb128v1 |
| 39.79 | 39.82 | 39.90 | T:xoodyakround3 |
| 45.58 | 45.68 | 46.33 | T:romulusn |
| 56.69 | 56.82 | 57.23 | romulusn |
| 60.25 | 60.32 | 60.45 | T:tinyjambu128v2 |
| 69.15 | 69.30 | 69.62 | T:tinyjambu192v2 |
| 75.46 | 75.72 | 76.01 | T:tinyjambu256v2 |
| 84.77 | 84.94 | 84.98 | romulusm |
| 87.19 | 87.26 | 87.35 | T:isapk128av20 |
| 115.45 | 115.70 | 115.97 | T:isapk128v20 |
| 166.55 | 166.78 | 166.93 | T!!!romulust |
| 181.39 | 181.53 | 181.67 | T:elephant200v2 |
| 285.68 | 305.34 | 316.05 | T:isapxv20 |
| 6284.77 | 6296.59 | 6318.05 | T:elephant176v2 |
| 9379.16 | 9380.09 | 9381.14 | T:elephant160v2 |
| 20200.44 | 20211.78 | 20283.47 | aes256gcmv1 |
|
| Cycles/byte for long+0 forgery |
| 25% | 50% | 75% | aead |
| 1.27 | 1.29 | 1.31 | T:aes128gcmv1 |
| 1.81 | 1.82 | 1.83 | T:aes256gcmv1 |
| 5.11 | 5.12 | 5.14 | ascon128av12 |
| 7.62 | 7.63 | 7.65 | ascon128v12 |
| 7.62 | 7.63 | 7.65 | ascon80pqv12 |
| 10.98 | 11.00 | 11.01 | ascon128abi32v12 |
| 16.20 | 16.23 | 16.25 | ascon128bi32v12 |
| 16.57 | 16.60 | 16.63 | T:schwaemm256128v2 |
| 17.04 | 17.12 | 17.18 | T:isapa128v20 |
| 21.44 | 21.48 | 21.54 | T:isapa128av20 |
| 21.98 | 22.02 | 22.07 | T:schwaemm192192v2 |
| 22.76 | 22.83 | 24.37 | T:schwaemm128128v2 |
| 23.46 | 23.52 | 23.59 | T:schwaemm256256v2 |
| 39.17 | 39.21 | 39.26 | T:giftcofb128v1 |
| 39.82 | 39.96 | 40.20 | T:xoodyakround3 |
| 45.51 | 45.60 | 45.67 | T:romulusn |
| 56.17 | 56.22 | 56.26 | T!!!romulust |
| 56.46 | 56.65 | 56.67 | romulusn |
| 57.79 | 57.84 | 57.92 | T:isapk128av20 |
| 60.26 | 60.34 | 61.25 | T:tinyjambu128v2 |
| 69.11 | 69.21 | 69.33 | T:tinyjambu192v2 |
| 72.06 | 72.28 | 72.45 | T:isapk128v20 |
| 75.49 | 75.72 | 75.99 | T:tinyjambu256v2 |
| 84.80 | 84.95 | 85.02 | romulusm |
| 168.41? | 181.30? | 189.45? | T:isapxv20 |
| 181.39 | 181.52 | 181.65 | T:elephant200v2 |
| 301.01 | 301.61 | 302.18 | aes256gcmv1 |
| 6283.94 | 6293.46 | 6310.27 | T:elephant176v2 |
| 9379.10 | 9380.61 | 9382.09 | T:elephant160v2 |
|
| Cycles/byte for long+long encrypt |
| 25% | 50% | 75% | aead |
| 0.97 | 0.97 | 0.97 | T:aes128gcmv1 |
| 1.15 | 1.15 | 1.16 | T:aes256gcmv1 |
| 5.05 | 5.07 | 5.09 | ascon128av12 |
| 7.52 | 7.53 | 7.55 | ascon80pqv12 |
| 7.56 | 7.58 | 7.60 | ascon128v12 |
| 10.92 | 10.98 | 11.00 | ascon128abi32v12 |
| 16.21 | 16.22 | 16.23 | ascon128bi32v12 |
| 16.29 | 16.43 | 16.46 | T:schwaemm256128v2 |
| 21.81 | 21.83 | 21.87 | T:schwaemm192192v2 |
| 22.62 | 22.65 | 22.68 | T:schwaemm128128v2 |
| 24.30 | 24.33 | 24.39 | T:schwaemm256256v2 |
| 25.80 | 25.84 | 25.89 | T:isapa128v20 |
| 26.78 | 26.84 | 26.90 | T:isapa128av20 |
| 31.11 | 31.17 | 31.20 | T:xoodyakround3 |
| 39.33 | 39.40 | 41.00 | T:giftcofb128v1 |
| 41.04 | 41.06 | 41.13 | T:romulusn |
| 42.15 | 42.21 | 42.24 | romulusn |
| 49.16 | 49.24 | 49.63 | T:tinyjambu128v2 |
| 53.86 | 54.02 | 54.59 | T:tinyjambu192v2 |
| 56.19 | 56.35 | 57.35 | romulusm |
| 57.12 | 57.15 | 57.21 | T:tinyjambu256v2 |
| 72.44 | 72.51 | 72.59 | T:isapk128av20 |
| 93.73 | 93.94 | 94.14 | T:isapk128v20 |
| 111.21 | 111.30 | 111.36 | T!!!romulust |
| 136.62 | 136.69 | 138.27 | T:elephant200v2 |
| 233.23 | 233.98 | 235.57 | T:isapxv20 |
| 4696.72 | 4704.64 | 4715.90 | T:elephant176v2 |
| 7034.15 | 7034.93 | 7041.87 | T:elephant160v2 |
| 10250.93 | 10258.10 | 10261.68 | aes256gcmv1 |
|
| Cycles/byte for long+long decrypt |
| 25% | 50% | 75% | aead |
| 0.86 | 0.88 | 0.89 | T:aes128gcmv1 |
| 1.15 | 1.15 | 1.15 | T:aes256gcmv1 |
| 5.06 | 5.08 | 5.12 | ascon128av12 |
| 7.47 | 7.49 | 7.51 | ascon80pqv12 |
| 7.49 | 7.51 | 7.53 | ascon128v12 |
| 10.91 | 10.92 | 10.93 | ascon128abi32v12 |
| 16.23 | 16.25 | 16.26 | ascon128bi32v12 |
| 16.29 | 16.43 | 16.46 | T:schwaemm256128v2 |
| 21.81 | 21.84 | 21.91 | T:schwaemm192192v2 |
| 22.62 | 22.66 | 22.70 | T:schwaemm128128v2 |
| 23.65 | 23.71 | 24.09 | T:schwaemm256256v2 |
| 25.80 | 25.84 | 25.89 | T:isapa128v20 |
| 26.87 | 26.93 | 26.97 | T:isapa128av20 |
| 30.93 | 30.99 | 31.11 | T:xoodyakround3 |
| 39.22 | 39.25 | 39.37 | T:giftcofb128v1 |
| 41.15 | 41.20 | 41.27 | T:romulusn |
| 42.19 | 42.23 | 42.34 | romulusn |
| 49.25 | 49.32 | 49.49 | T:tinyjambu128v2 |
| 53.89 | 54.08 | 54.35 | T:tinyjambu192v2 |
| 56.53 | 56.55 | 59.25 | romulusm |
| 57.16 | 57.19 | 57.22 | T:tinyjambu256v2 |
| 72.43 | 72.51 | 72.57 | T:isapk128av20 |
| 93.79 | 93.97 | 94.22 | T:isapk128v20 |
| 111.05 | 111.24 | 111.32 | T!!!romulust |
| 136.58 | 136.66 | 136.76 | T:elephant200v2 |
| 230.49 | 242.55 | 251.36 | T:isapxv20 |
| 4696.13 | 4705.30 | 4719.95 | T:elephant176v2 |
| 7033.67 | 7034.42 | 7034.98 | T:elephant160v2 |
| 10253.77 | 10256.66 | 10259.02 | aes256gcmv1 |
|
| Cycles/byte for long+long forgery |
| 25% | 50% | 75% | aead |
| 0.86 | 0.88 | 0.89 | T:aes128gcmv1 |
| 1.15 | 1.15 | 1.15 | T:aes256gcmv1 |
| 5.05 | 5.07 | 5.08 | ascon128av12 |
| 7.47 | 7.48 | 7.51 | ascon80pqv12 |
| 7.46 | 7.50 | 7.52 | ascon128v12 |
| 10.86 | 10.92 | 10.93 | ascon128abi32v12 |
| 16.19 | 16.25 | 16.27 | ascon128bi32v12 |
| 16.30 | 16.43 | 16.46 | T:schwaemm256128v2 |
| 17.36 | 17.39 | 17.44 | T:isapa128v20 |
| 21.39 | 21.41 | 21.45 | T:isapa128av20 |
| 21.63 | 21.84 | 21.91 | T:schwaemm192192v2 |
| 22.63 | 22.66 | 23.33 | T:schwaemm128128v2 |
| 23.66 | 23.72 | 23.76 | T:schwaemm256256v2 |
| 30.91 | 30.95 | 31.01 | T:xoodyakround3 |
| 39.21 | 39.24 | 39.27 | T:giftcofb128v1 |
| 41.14 | 41.23 | 41.65 | T:romulusn |
| 42.20 | 42.25 | 42.37 | romulusn |
| 49.22 | 49.28 | 49.53 | T:tinyjambu128v2 |
| 54.03 | 54.16 | 55.27 | T:tinyjambu192v2 |
| 55.99 | 56.03 | 56.10 | T!!!romulust |
| 56.53 | 56.93 | 58.24 | romulusm |
| 57.18 | 57.22 | 57.26 | T:tinyjambu256v2 |
| 57.76 | 57.79 | 57.83 | T:isapk128av20 |
| 72.04 | 72.15 | 72.30 | T:isapk128v20 |
| 136.60 | 136.69 | 137.08 | T:elephant200v2 |
| 176.61 | 184.36 | 188.04 | T:isapxv20 |
| 301.51 | 301.69 | 302.06 | aes256gcmv1 |
| 4698.90 | 4710.40 | 4739.74 | T:elephant176v2 |
| 7032.34 | 7034.20 | 7034.70 | T:elephant160v2 |
|
| Cycles/byte for 0+long encrypt |
| 25% | 50% | 75% | aead |
| 0.47 | 0.48 | 0.49 | T:aes128gcmv1 |
| 0.48 | 0.49 | 0.49 | T:aes256gcmv1 |
| 4.88 | 4.94 | 5.00 | ascon128av12 |
| 7.38 | 7.41 | 7.47 | ascon80pqv12 |
| 7.49 | 7.51 | 7.55 | ascon128v12 |
| 10.83 | 10.84 | 10.86 | ascon128abi32v12 |
| 16.22 | 16.23 | 16.26 | ascon128bi32v12 |
| 16.25 | 16.28 | 16.31 | T:schwaemm256128v2 |
| 17.60 | 17.65 | 17.70 | T:isapa128v20 |
| 21.52 | 21.54 | 21.56 | T:isapa128av20 |
| 21.61 | 21.66 | 21.71 | T:schwaemm192192v2 |
| 21.94 | 21.99 | 22.09 | T:xoodyakround3 |
| 22.47 | 22.51 | 22.55 | T:schwaemm128128v2 |
| 23.51 | 23.55 | 23.62 | T:schwaemm256256v2 |
| 27.99 | 28.03 | 28.77 | romulusn |
| 28.02 | 28.10 | 28.14 | romulusm |
| 36.63 | 36.67 | 36.70 | T:romulusn |
| 38.18 | 38.40 | 39.30 | T:tinyjambu128v2 |
| 38.66 | 38.69 | 38.85 | T:tinyjambu256v2 |
| 38.67 | 39.09 | 39.28 | T:tinyjambu192v2 |
| 39.24 | 39.28 | 39.31 | T:giftcofb128v1 |
| 55.84 | 55.89 | 56.43 | T!!!romulust |
| 57.59 | 57.70 | 57.77 | T:isapk128av20 |
| 71.84 | 71.96 | 72.17 | T:isapk128v20 |
| 92.06 | 92.15 | 92.23 | T:elephant200v2 |
| 175.69 | 176.08 | 176.83 | T:isapxv20 |
| 301.27 | 301.58 | 301.95 | aes256gcmv1 |
| 3109.65 | 3116.06 | 3129.19 | T:elephant176v2 |
| 4689.41 | 4689.96 | 4690.83 | T:elephant160v2 |
|
| Cycles/byte for 0+long decrypt |
| 25% | 50% | 75% | aead |
| 0.47 | 0.47 | 0.48 | T:aes256gcmv1 |
| 0.47 | 0.47 | 0.48 | T:aes128gcmv1 |
| 4.95 | 4.97 | 5.00 | ascon128av12 |
| 7.32 | 7.34 | 7.40 | ascon80pqv12 |
| 7.38 | 7.40 | 7.44 | ascon128v12 |
| 10.81 | 10.83 | 10.86 | ascon128abi32v12 |
| 16.23 | 16.25 | 16.28 | ascon128bi32v12 |
| 16.24 | 16.28 | 16.32 | T:schwaemm256128v2 |
| 17.59 | 17.65 | 17.70 | T:isapa128v20 |
| 21.52 | 21.55 | 21.59 | T:isapa128av20 |
| 21.60 | 21.65 | 21.69 | T:schwaemm192192v2 |
| 21.93 | 22.06 | 22.10 | T:xoodyakround3 |
| 22.48 | 22.53 | 22.61 | T:schwaemm128128v2 |
| 23.90 | 23.99 | 24.03 | T:schwaemm256256v2 |
| 27.98 | 28.00 | 28.03 | romulusn |
| 28.00 | 28.11 | 28.14 | romulusm |
| 36.68 | 36.73 | 37.64 | T:romulusn |
| 38.17 | 38.35 | 38.70 | T:tinyjambu128v2 |
| 38.63 | 38.67 | 38.71 | T:tinyjambu256v2 |
| 38.52 | 38.98 | 40.18 | T:tinyjambu192v2 |
| 39.23 | 39.26 | 39.30 | T:giftcofb128v1 |
| 55.82 | 55.86 | 55.91 | T!!!romulust |
| 57.58 | 57.67 | 57.76 | T:isapk128av20 |
| 71.96 | 72.11 | 72.25 | T:isapk128v20 |
| 92.09 | 92.17 | 92.27 | T:elephant200v2 |
| 171.46? | 186.47? | 192.64? | T:isapxv20 |
| 300.95 | 301.20 | 301.71 | aes256gcmv1 |
| 3103.23 | 3110.45 | 3118.89 | T:elephant176v2 |
| 4689.49 | 4689.90 | 4690.57 | T:elephant160v2 |
|
| Cycles/byte for 0+long forgery |
| 25% | 50% | 75% | aead |
| 0.47 | 0.47 | 0.48 | T:aes256gcmv1 |
| 0.46 | 0.47 | 0.50 | T:aes128gcmv1 |
| 4.95 | 4.97 | 4.99 | ascon128av12 |
| 7.31 | 7.33 | 7.36 | ascon80pqv12 |
| 7.35 | 7.38 | 7.40 | ascon128v12 |
| 10.82 | 10.84 | 10.86 | ascon128abi32v12 |
| 16.18 | 16.23 | 16.27 | ascon128bi32v12 |
| 16.25 | 16.28 | 16.30 | T:schwaemm256128v2 |
| 17.61 | 17.66 | 17.72 | T:isapa128v20 |
| 21.43 | 21.48 | 21.54 | T:isapa128av20 |
| 21.61 | 21.66 | 21.70 | T:schwaemm192192v2 |
| 21.88 | 21.95 | 22.08 | T:xoodyakround3 |
| 22.48 | 22.52 | 22.58 | T:schwaemm128128v2 |
| 23.88 | 23.97 | 24.03 | T:schwaemm256256v2 |
| 27.98 | 28.00 | 28.03 | romulusn |
| 28.02 | 28.11 | 28.15 | romulusm |
| 36.66 | 36.71 | 36.76 | T:romulusn |
| 38.18 | 38.26 | 38.84 | T:tinyjambu128v2 |
| 38.62 | 38.68 | 39.64 | T:tinyjambu256v2 |
| 38.71 | 39.04 | 39.21 | T:tinyjambu192v2 |
| 39.24 | 39.27 | 39.31 | T:giftcofb128v1 |
| 55.81 | 55.85 | 55.89 | T!!!romulust |
| 57.65 | 57.71 | 57.79 | T:isapk128av20 |
| 71.95 | 72.14 | 74.28 | T:isapk128v20 |
| 92.05 | 92.15 | 92.27 | T:elephant200v2 |
| 172.84 | 185.21 | 191.53 | T:isapxv20 |
| 301.09 | 301.47 | 302.00 | aes256gcmv1 |
| 3101.89 | 3109.12 | 3116.08 | T:elephant176v2 |
| 4689.41 | 4689.82 | 4690.27 | T:elephant160v2 |
|
| Cycles/byte for 1536+1536 encrypt |
| 25% | 50% | 75% | aead |
| 1.21 | 1.22 | 1.22 | T:aes128gcmv1 |
| 1.40 | 1.40 | 1.40 | T:aes256gcmv1 |
| 5.21 | 5.22 | 5.24 | ascon128av12 |
| 7.66 | 7.67 | 7.69 | ascon80pqv12 |
| 7.70 | 7.71 | 7.73 | ascon128v12 |
| 11.29 | 11.30 | 11.31 | ascon128abi32v12 |
| 16.49 | 16.50 | 16.52 | ascon128bi32v12 |
| 16.95 | 16.97 | 17.36 | T:schwaemm256128v2 |
| 22.34 | 22.36 | 22.39 | T:schwaemm192192v2 |
| 22.96 | 22.98 | 23.00 | T:schwaemm128128v2 |
| 24.89 | 24.94 | 25.04 | T:schwaemm256256v2 |
| 29.25 | 29.30 | 29.36 | T:isapa128av20 |
| 31.40 | 31.48 | 32.26 | T:xoodyakround3 |
| 37.60 | 37.64 | 37.67 | T:isapa128v20 |
| 39.70 | 39.72 | 39.74 | T:giftcofb128v1 |
| 41.60 | 41.63 | 41.94 | T:romulusn |
| 42.53 | 42.55 | 42.58 | romulusn |
| 49.54 | 49.59 | 50.06 | T:tinyjambu128v2 |
| 54.36 | 54.54 | 54.64 | T:tinyjambu192v2 |
| 56.65 | 56.67 | 56.71 | romulusm |
| 57.54 | 57.56 | 57.61 | T:tinyjambu256v2 |
| 83.50 | 83.53 | 83.59 | T:isapk128av20 |
| 112.83 | 112.88 | 112.92 | T!!!romulust |
| 139.49 | 139.55 | 139.61 | T:elephant200v2 |
| 170.02 | 170.20 | 170.91 | T:isapk128v20 |
| 388.56 | 388.94 | 392.17 | T:isapxv20 |
| 4734.79 | 4740.65 | 4768.02 | T:elephant176v2 |
| 7114.06 | 7114.86 | 7135.89 | T:elephant160v2 |
| 10464.39 | 10466.76 | 10468.17 | aes256gcmv1 |
|
| Cycles/byte for 1536+1536 decrypt |
| 25% | 50% | 75% | aead |
| 1.12 | 1.13 | 1.13 | T:aes128gcmv1 |
| 1.41 | 1.41 | 1.41 | T:aes256gcmv1 |
| 5.21 | 5.22 | 5.25 | ascon128av12 |
| 7.62 | 7.63 | 7.67 | ascon80pqv12 |
| 7.63 | 7.65 | 7.66 | ascon128v12 |
| 11.23 | 11.23 | 11.25 | ascon128abi32v12 |
| 16.52 | 16.54 | 16.55 | ascon128bi32v12 |
| 16.94 | 16.97 | 17.08 | T:schwaemm256128v2 |
| 22.34 | 22.37 | 23.62 | T:schwaemm192192v2 |
| 22.97 | 23.00 | 23.04 | T:schwaemm128128v2 |
| 24.23 | 24.31 | 24.40 | T:schwaemm256256v2 |
| 29.33 | 29.37 | 29.41 | T:isapa128av20 |
| 31.31 | 31.43 | 31.49 | T:xoodyakround3 |
| 37.66 | 37.69 | 37.72 | T:isapa128v20 |
| 39.59 | 39.60 | 39.64 | T:giftcofb128v1 |
| 41.70 | 41.74 | 41.79 | T:romulusn |
| 42.65 | 42.72 | 42.76 | romulusn |
| 49.65 | 49.71 | 49.89 | T:tinyjambu128v2 |
| 54.47 | 54.52 | 54.64 | T:tinyjambu192v2 |
| 56.84 | 56.90 | 57.46 | romulusm |
| 57.61 | 57.64 | 57.67 | T:tinyjambu256v2 |
| 83.54 | 83.56 | 83.86 | T:isapk128av20 |
| 112.77 | 112.88 | 112.94 | T!!!romulust |
| 139.51 | 139.57 | 139.72 | T:elephant200v2 |
| 170.04 | 170.12 | 170.49 | T:isapk128v20 |
| 391.62 | 407.40 | 412.96 | T:isapxv20 |
| 4734.99 | 4743.83 | 4774.57 | T:elephant176v2 |
| 7113.66 | 7114.81 | 7159.48 | T:elephant160v2 |
| 10463.67 | 10466.34 | 10476.56 | aes256gcmv1 |
|
| Cycles/byte for 1536+1536 forgery |
| 25% | 50% | 75% | aead |
| 1.13 | 1.13 | 1.14 | T:aes128gcmv1 |
| 1.41 | 1.41 | 1.41 | T:aes256gcmv1 |
| 5.20 | 5.22 | 5.23 | ascon128av12 |
| 7.61 | 7.62 | 7.66 | ascon80pqv12 |
| 7.63 | 7.64 | 7.65 | ascon128v12 |
| 11.18 | 11.22 | 11.25 | ascon128abi32v12 |
| 16.52 | 16.53 | 16.55 | ascon128bi32v12 |
| 16.94 | 16.96 | 17.31 | T:schwaemm256128v2 |
| 22.34 | 22.37 | 23.10 | T:schwaemm192192v2 |
| 22.86 | 22.87 | 22.89 | T:isapa128av20 |
| 22.97 | 23.00 | 23.22 | T:schwaemm128128v2 |
| 23.38 | 23.41 | 23.44 | T:isapa128v20 |
| 24.29 | 24.33 | 24.39 | T:schwaemm256256v2 |
| 31.31 | 31.36 | 31.41 | T:xoodyakround3 |
| 39.59 | 39.62 | 39.65 | T:giftcofb128v1 |
| 41.74 | 41.78 | 41.83 | T:romulusn |
| 42.65 | 42.73 | 42.94 | romulusn |
| 49.64 | 49.69 | 50.10 | T:tinyjambu128v2 |
| 54.47 | 54.65 | 54.95 | T:tinyjambu192v2 |
| 56.79 | 56.86 | 56.90 | romulusm |
| 57.57 | 57.61 | 57.67 | T!!!romulust |
| 57.61 | 57.64 | 57.67 | T:tinyjambu256v2 |
| 64.26 | 64.28 | 64.32 | T:isapk128av20 |
| 111.46 | 111.52 | 111.58 | T:isapk128v20 |
| 139.50 | 139.56 | 139.62 | T:elephant200v2 |
| 256.61 | 267.01 | 269.50 | T:isapxv20 |
| 510.47 | 510.70 | 511.47 | aes256gcmv1 |
| 4733.98 | 4741.83 | 4759.45 | T:elephant176v2 |
| 7113.79 | 7114.84 | 7131.36 | T:elephant160v2 |
|
| Cycles/byte for 64+64 encrypt |
| 25% | 50% | 75% | aead |
| 8.38 | 8.42 | 8.57 | ascon128av12 |
| 10.13 | 10.19 | 10.36 | T:aes128gcmv1 |
| 10.66 | 10.73 | 10.83 | ascon80pqv12 |
| 10.74 | 10.79 | 11.04 | ascon128v12 |
| 10.79 | 10.88 | 11.23 | T:aes256gcmv1 |
| 18.56 | 18.68 | 18.82 | ascon128abi32v12 |
| 22.98 | 23.05 | 23.17 | ascon128bi32v12 |
| 28.57 | 28.72 | 28.91 | T:schwaemm256128v2 |
| 30.31 | 30.49 | 30.70 | T:schwaemm128128v2 |
| 36.75 | 36.90 | 37.18 | T:schwaemm192192v2 |
| 38.98 | 39.10 | 39.29 | T:schwaemm256256v2 |
| 46.15 | 46.28 | 46.41 | T:xoodyakround3 |
| 47.94 | 48.08 | 48.28 | T:giftcofb128v1 |
| 50.12 | 50.21 | 50.45 | romulusn |
| 54.37 | 54.65 | 59.22 | T:romulusn |
| 58.11 | 58.39 | 61.98 | T:tinyjambu128v2 |
| 63.46 | 63.64 | 63.80 | T:tinyjambu192v2 |
| 64.49 | 64.62 | 64.76 | romulusm |
| 67.00 | 67.19 | 67.42 | T:tinyjambu256v2 |
| 85.27 | 85.44 | 85.74 | T:isapa128av20 |
| 148.28 | 148.44 | 148.67 | T!!!romulust |
| 198.27 | 198.68 | 199.07 | T:elephant200v2 |
| 308.60 | 309.11 | 309.62 | T:isapa128v20 |
| 321.11 | 321.47 | 329.89 | T:isapk128av20 |
| 1902.07 | 1903.35 | 1904.83 | T:isapk128v20 |
| 3903.51 | 3906.58 | 3910.66 | T:isapxv20 |
| 5900.54 | 5936.21 | 5961.21 | T:elephant176v2 |
| 9524.88 | 9527.03 | 9530.28 | T:elephant160v2 |
| 15273.01 | 15276.16 | 15279.48 | aes256gcmv1 |
|
| Cycles/byte for 64+64 decrypt |
| 25% | 50% | 75% | aead |
| 8.59 | 8.64 | 9.19 | ascon128av12 |
| 10.10 | 10.15 | 10.28 | T:aes128gcmv1 |
| 10.73 | 10.80 | 10.88 | ascon128v12 |
| 10.73 | 10.83 | 10.98 | ascon80pqv12 |
| 10.89 | 10.96 | 11.19 | T:aes256gcmv1 |
| 18.45 | 18.54 | 18.69 | ascon128abi32v12 |
| 23.18 | 23.22 | 23.34 | ascon128bi32v12 |
| 28.38 | 28.56 | 28.80 | T:schwaemm256128v2 |
| 30.29 | 30.48 | 30.73 | T:schwaemm128128v2 |
| 36.79 | 36.93 | 37.15 | T:schwaemm192192v2 |
| 38.43 | 38.52 | 38.73 | T:schwaemm256256v2 |
| 46.07 | 46.19 | 46.32 | T:xoodyakround3 |
| 48.07 | 48.14 | 48.30 | T:giftcofb128v1 |
| 50.37 | 50.44 | 50.53 | romulusn |
| 54.54 | 54.97 | 58.70 | T:romulusn |
| 58.58 | 58.79 | 62.44 | T:tinyjambu128v2 |
| 63.85 | 64.12 | 64.42 | T:tinyjambu192v2 |
| 64.77 | 64.90 | 65.08 | romulusm |
| 67.57 | 67.71 | 68.69 | T:tinyjambu256v2 |
| 85.29 | 85.46 | 85.64 | T:isapa128av20 |
| 148.55 | 148.73 | 149.00 | T!!!romulust |
| 198.30 | 198.64 | 199.09 | T:elephant200v2 |
| 309.70 | 310.27 | 310.61 | T:isapa128v20 |
| 321.67 | 324.12 | 329.65 | T:isapk128av20 |
| 1902.32 | 1903.44 | 1905.06 | T:isapk128v20 |
| 3930.27 | 4041.70 | 4126.67 | T:isapxv20 |
| 5892.53 | 5899.67 | 5909.65 | T:elephant176v2 |
| 9525.21 | 9527.48 | 9529.37 | T:elephant160v2 |
| 15257.14 | 15262.87 | 15269.32 | aes256gcmv1 |
|
| Cycles/byte for 64+64 forgery |
| 25% | 50% | 75% | aead |
| 8.67 | 8.74 | 9.07 | ascon128av12 |
| 10.21 | 10.28 | 10.38 | T:aes128gcmv1 |
| 10.73 | 10.80 | 10.95 | ascon128v12 |
| 10.75 | 10.81 | 10.96 | ascon80pqv12 |
| 10.91 | 10.96 | 11.13 | T:aes256gcmv1 |
| 18.60 | 18.67 | 18.76 | ascon128abi32v12 |
| 23.24 | 23.27 | 23.37 | ascon128bi32v12 |
| 28.35 | 28.47 | 28.64 | T:schwaemm256128v2 |
| 30.34 | 30.47 | 30.66 | T:schwaemm128128v2 |
| 36.71 | 36.91 | 37.09 | T:schwaemm192192v2 |
| 38.40 | 38.49 | 38.62 | T:schwaemm256256v2 |
| 46.13 | 46.22 | 46.34 | T:xoodyakround3 |
| 48.10 | 48.22 | 48.38 | T:giftcofb128v1 |
| 50.31 | 50.38 | 50.49 | romulusn |
| 54.31 | 54.50 | 54.68 | T:romulusn |
| 56.10 | 56.22 | 56.37 | T:isapa128av20 |
| 58.63 | 58.90 | 60.96 | T:tinyjambu128v2 |
| 63.94 | 64.13 | 64.38 | T:tinyjambu192v2 |
| 64.70 | 64.95 | 66.96 | romulusm |
| 67.66 | 67.83 | 69.22 | T:tinyjambu256v2 |
| 93.11 | 93.30 | 93.54 | T!!!romulust |
| 161.54 | 162.00 | 162.42 | T:isapa128v20 |
| 198.24 | 198.74 | 199.12 | T:elephant200v2 |
| 200.92 | 201.34 | 206.84 | T:isapk128av20 |
| 1000.87 | 1001.71 | 1002.56 | T:isapk128v20 |
| 2057.81 | 2115.60 | 2157.29 | T:isapxv20 |
| 5312.50 | 5314.92 | 5318.19 | aes256gcmv1 |
| 5899.89 | 5930.11 | 5950.93 | T:elephant176v2 |
| 9525.74 | 9527.45 | 9536.05 | T:elephant160v2 |
|