Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz After Kurt's improvement, with our usage patterns (48 bytes), PKEY mode on 3.0.0 takes 2x as many cycles as 1.1.1 That factor probably depends on how good the hardware AES support is in your CPU. I think it's significantly faster in newer CPU chips. 1.1.1g: AES-128 16 48 16 434 0.434 475ac1c053379e7dbd4ce80b87d2178e AES-192 24 48 16 442 0.442 c906422bfe0963de6df50e022b4aa7d4 AES-256 32 48 16 453 0.453 991f4017858de97515260dd9ae440b06 1.1.1g improved: AES-128 16 48 16 230 0.230 475ac1c053379e7dbd4ce80b87d2178e AES-192 24 48 16 252 0.252 c906422bfe0963de6df50e022b4aa7d4 AES-256 32 48 16 252 0.252 991f4017858de97515260dd9ae440b06 3.0.0 alpha3: AES-128 16 48 16 815 0.815 475ac1c053379e7dbd4ce80b87d2178e AES-192 24 48 16 831 0.831 c906422bfe0963de6df50e022b4aa7d4 AES-256 32 48 16 846 0.846 991f4017858de97515260dd9ae440b06 3.0.0-alpha3 improved: AES-128 16 48 16 500 0.500 475ac1c053379e7dbd4ce80b87d2178e AES-192 24 48 16 515 0.515 c906422bfe0963de6df50e022b4aa7d4 AES-256 32 48 16 530 0.530 991f4017858de97515260dd9ae440b06 Thanks again. -- These are my opinions. I hate spam.