I have done such a benchmark when implementing my cryptographic library: https://monocypher.org/speed https://monocypher.org/speed Also look at BearSSL: https:

I have done such a benchmark when implementing my cryptographic library: https://monocypher.org/speed https://monocypher.org/speed Also look at BearSSL: https://www.bearssl.org/constanttime.html https://www.bearssl.org/constanttime.html 2.4GB per second for AES-INI is comparable to my own measurements with AVS-256 Chacha20. Chacha is slightly faster than Salsa, mostly because it removed some word shuffling Salsa needed for matrix transposition.