VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of stream ciphers, indexed by machine

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.

What do the graphs and tables mean?

Each computer also has a series of tables, six tables for each computer. The fourth table shows the speed, in cycles/byte, of encrypting 576-byte messages. Each row of the table lists

• the first quartile of many speed measurements,
• the median of many speed measurements,
• the third quartile of many speed measurements, and
• the name of the stream cipher.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20120120

Cycles/byte for long messages quartile median quartile stream 3.40 3.41 3.64 hc128 3.82 3.85 4.14 tpy 3.78 4.04 4.12 tpy6 4.04 4.09 4.10 cryptmtv3 3.84 4.12 4.21 sosemanuk 4.17 4.23 4.25 chacha8 3.94? 4.34? 4.47? nlsv2 4.39 4.55 4.60 salsa208 4.91 5.06 5.15 hc256 5.18 5.39 5.55 snow20 5.82 5.85 5.87 chacha12 5.87 5.88 5.90 trivium 6.02 6.02 6.03 salsa2012 6.20 6.23 6.35 rabbit 6.24 6.25 6.29 tpypy 6.70 6.82 6.93 panama 7.52 7.54 7.54 lexv2 8.88 8.93 8.96 chacha20 9.84 9.88 9.95 salsa20 9.87 9.88 9.90 xsalsa20 13.21 13.68 14.20 aes128ctr 14.45 14.47 15.01 aes128estream 16.20 16.44 17.42 aes192ctr 17.93 18.40 18.43 dragon 19.25 19.42 20.23 aes256ctr 22.30 22.32 22.94 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 4.24 4.25 4.26 chacha8 4.32 4.50 4.56 nlsv2 4.46 4.53 4.56 salsa208 4.96 5.07 5.11 tpy6 5.24 5.28 5.32 sosemanuk 5.41 5.52 5.59 snow20 5.85 5.86 6.00 tpy 5.87 5.89 5.90 chacha12 6.07 6.07 6.07 cryptmtv3 6.08 6.08 6.08 salsa2012 6.12 6.13 6.14 trivium 6.41 6.41 6.47 rabbit 7.81 7.81 7.81 lexv2 8.54 8.55 8.56 tpypy 8.98 8.98 9.00 chacha20 9.13 9.14 9.17 panama 9.73 9.73 9.85 hc128 9.92 9.92 9.96 salsa20 10.11 10.11 10.12 xsalsa20 14.35 14.39 14.60 aes128ctr 14.62 14.62 14.89 aes128estream 17.22 17.30 17.75 aes192ctr 18.64 18.86 18.87 dragon 20.28 20.31 20.64 aes256ctr 20.43 20.50 20.55 hc256 22.50 22.51 22.79 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 4.31 4.31 4.32 chacha8 4.56 4.56 4.57 salsa208 5.22 5.23 5.47 nlsv2 5.78 5.80 5.91 snow20 5.95 5.96 5.96 chacha12 6.18 6.18 6.19 salsa2012 6.54 6.54 6.55 trivium 6.72 6.73 6.74 rabbit 6.87 6.87 6.92 tpy6 7.34 7.36 7.61 sosemanuk 8.12 8.13 8.13 cryptmtv3 8.24 8.25 8.26 lexv2 9.08 9.08 9.09 chacha20 9.31 9.33 9.36 tpy 10.00 10.00 10.01 salsa20 10.49 10.49 10.54 xsalsa20 12.36 12.37 12.47 tpypy 12.85 12.87 13.08 panama 14.81 14.82 14.84 aes128estream 15.61 15.63 15.69 aes128ctr 18.43 18.47 18.56 aes192ctr 19.61 19.63 19.66 dragon 20.27 20.28 20.28 hc128 21.66 21.86 22.22 aes256ctr 22.79 22.85 22.86 aes256estream 46.48 46.48 46.49 hc256

Cycles/byte for 576 bytes quartile median quartile stream 4.51 4.51 4.54 chacha8 4.81 4.81 4.89 salsa208 6.15 6.15 6.16 chacha12 6.45 6.45 6.48 salsa2012 6.70 6.71 6.81 snow20 7.28 7.30 7.67 nlsv2 7.57 7.61 7.70 rabbit 7.66 7.66 7.68 trivium 8.87 8.88 8.91 cryptmtv3 9.40 9.41 9.56 lexv2 9.46 9.47 9.48 chacha20 10.20 10.21 10.27 salsa20 11.53 11.53 11.54 xsalsa20 12.03 12.05 12.20 tpy6 12.99 13.10 13.85 sosemanuk 15.34 15.37 15.56 aes128estream 18.64 18.66 18.70 tpy 19.05 19.09 19.33 aes128ctr 21.63 21.67 21.68 dragon 21.78 21.85 22.53 tpypy 21.83 22.06 22.39 aes192ctr 22.80 22.84 22.89 panama 23.84 23.87 24.03 aes256estream 25.80 26.09 26.91 aes256ctr 48.34 48.36 48.53 hc128 115.39 115.72 115.76 hc256

Cycles/byte for 64 bytes quartile median quartile stream 6.80 6.80 6.80 chacha8 7.88 7.88 7.92 salsa208 8.48 8.53 8.77 chacha12 9.61 9.61 9.61 salsa2012 12.56 12.56 12.61 salsa20 12.75 12.75 12.80 chacha20 17.30 17.34 17.34 cryptmtv3 18.05 18.09 18.42 rabbit 18.75 18.80 18.84 snow20 21.38 21.38 21.75 trivium 22.12 22.36 22.55 aes128estream 23.81 23.86 24.00 lexv2 24.47 24.61 25.12 xsalsa20 36.23 36.52 36.80 aes256estream 41.67 41.72 41.95 nlsv2 47.16 47.30 47.58 dragon 61.78 62.02 62.16 aes128ctr 63.94 64.41 64.78 aes192ctr 71.20? 73.12? 82.50? aes256ctr 77.72 78.66 79.83 tpy6 78.38 79.17 83.62 sosemanuk 137.77 139.55 142.12 tpy 149.86 150.23 150.56 panama 147.42 150.70 153.05 tpypy 408.09 408.09 408.42 hc128 999.14 999.28 1002.19 hc256

Cycles/byte for 8 bytes quartile median quartile stream 67.88 68.25 68.25 chacha8 71.25 71.25 71.25 salsa208 80.62 81.00 81.38 chacha12 84.38 85.88 86.62 salsa2012 87.75 87.75 88.50 cryptmtv3 103.88 104.62 105.00 aes128estream 108.00 108.38 108.75 rabbit 114.00 114.00 114.38 salsa20 114.75 114.75 114.75 chacha20 132.38 132.38 133.12 trivium 141.75 142.88 142.88 lexv2 148.12 148.50 150.75 snow20 158.62 159.00 160.88 aes256estream 204.38 204.38 205.50 nlsv2 209.25 209.62 209.62 xsalsa20 249.38 249.75 251.62 dragon 404.62 412.12 416.62 aes128ctr 442.50 451.12 457.50 aes192ctr 440.25? 461.25? 522.00? aes256ctr 611.62 612.75 613.88 tpy6 616.50 622.50 661.12 sosemanuk 1088.62 1089.38 1093.88 tpy 1170.00 1186.88 1202.62 tpypy 1211.25 1212.38 1215.75 panama 3262.88 3264.38 3265.12 hc128 7990.88 7992.00 8014.50 hc256

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20120120

Cycles/byte for long messages quartile median quartile stream 3.23 3.26 3.31 rabbit 3.11 3.28 3.44 cryptmtv3 3.06? 3.47? 3.80? tpy6 3.47? 3.84? 4.73? tpy 3.95? 4.00? 4.54? hc128 3.74? 4.15? 4.45? nlsv2 4.51 4.56 4.60 chacha8 5.01 5.21 5.36 hc256 5.49 5.52 5.56 salsa208 5.74 5.96 6.11 snow20 5.73 6.17 6.32 tpypy 6.46 6.50 6.54 chacha12 6.66? 7.19? 7.50? sosemanuk 7.64 7.68 7.72 salsa2012 9.49 9.69 9.87 trivium 10.33 10.37 10.41 chacha20 9.75 10.37 10.64 lexv2 11.95 11.97 12.01 salsa20 11.96 11.98 12.04 xsalsa20 17.11 17.15 17.91 aes128estream 23.09 23.15 23.86 dragon 25.98 26.70 27.40 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 3.45 3.45 3.47 rabbit 4.59 4.61 4.62 chacha8 4.47 4.62 4.69 nlsv2 4.69 4.85 4.92 tpy6 5.56 5.57 5.58 salsa208 6.08 6.15 6.18 snow20 6.54 6.55 6.56 chacha12 6.48 6.56 6.97 tpy 6.54 6.58 6.60 cryptmtv3 7.72 7.73 7.74 salsa2012 7.59 7.79 7.85 sosemanuk 8.31 8.52 8.60 tpypy 9.98 10.04 10.13 trivium 10.40 10.41 10.43 chacha20 10.26 10.45 10.57 lexv2 12.02 12.02 12.04 salsa20 12.06 12.07 12.33 hc128 12.29 12.29 12.32 xsalsa20 17.28 17.29 17.67 aes128estream 23.84 23.85 24.15 dragon 27.26 27.26 27.41 aes256estream 27.27 27.28 27.29 hc256

Cycles/byte for 1536 bytes quartile median quartile stream 3.76 3.77 3.79 rabbit 4.68 4.69 4.71 chacha8 5.63 5.64 5.64 salsa208 5.49 5.74 5.89 nlsv2 6.40 6.55 6.58 snow20 6.61 6.63 6.65 chacha12 6.96 7.01 7.22 tpy6 7.79 7.80 7.82 salsa2012 8.75 8.81 9.10 sosemanuk 8.85 8.99 9.04 cryptmtv3 10.48 10.48 10.50 chacha20 10.34 10.65 10.72 tpy 10.65 10.76 10.86 trivium 10.71 11.01 11.16 lexv2 12.11 12.12 12.13 salsa20 12.42 12.59 12.82 tpypy 12.82 12.84 12.88 xsalsa20 17.46 17.47 17.48 aes128estream 25.03 25.05 25.27 dragon 25.55 25.56 25.56 hc128 27.53 27.54 27.56 aes256estream 63.89 64.08 64.76 hc256

Cycles/byte for 576 bytes quartile median quartile stream 4.60 4.64 4.66 rabbit 4.90 4.91 4.94 chacha8 5.86 5.86 5.87 salsa208 6.82 6.82 6.83 chacha12 7.39 7.41 7.45 snow20 7.79 7.82 8.04 nlsv2 8.01 8.02 8.04 salsa2012 8.72 8.72 8.74 cryptmtv3 10.70 10.73 10.77 chacha20 11.87 11.89 11.96 sosemanuk 11.95 11.99 12.33 lexv2 12.33 12.33 12.34 salsa20 12.45 12.45 12.46 trivium 13.04 13.06 13.40 tpy6 14.23 14.26 14.31 xsalsa20 18.11 18.14 18.40 aes128estream 21.64 21.67 23.43 tpy 24.11 24.14 24.17 tpypy 28.06 28.11 28.33 dragon 28.24 28.28 28.31 aes256estream 61.60 61.65 61.90 hc128 159.56 159.58 159.62 hc256

Cycles/byte for 64 bytes quartile median quartile stream 7.50 7.50 7.55 chacha8 8.44 8.44 8.62 salsa208 9.42 9.47 9.66 chacha12 10.59 10.59 10.83 salsa2012 13.31 13.31 13.36 chacha20 14.86 14.91 14.91 salsa20 15.09 15.28 15.33 rabbit 17.72 17.72 18.05 cryptmtv3 20.16 20.20 20.39 snow20 25.64 25.69 25.92 aes128estream 27.52 27.66 28.08 lexv2 31.97 32.02 32.16 xsalsa20 35.20 35.25 35.25 trivium 37.31 37.50 37.78 aes256estream 46.64 46.78 47.11 sosemanuk 46.69 46.88 47.16 nlsv2 67.45 67.59 68.06 dragon 90.66 90.98 91.03 tpy6 166.83 171.89 172.31 tpypy 170.72 172.36 178.41 tpy 523.59 523.88 524.25 hc128 1389.09 1411.88 1412.25 hc256

Cycles/byte for 8 bytes quartile median quartile stream 72.75 72.75 72.75 chacha8 81.38 81.38 81.75 salsa208 88.12 88.12 88.50 chacha12 98.62 98.62 98.62 salsa2012 102.38 103.50 105.38 cryptmtv3 106.88 107.25 108.75 rabbit 117.00 117.38 117.38 aes128estream 119.25 119.25 119.62 chacha20 133.50 133.50 133.50 salsa20 141.75 142.12 142.50 aes256estream 145.12 145.50 147.75 lexv2 161.25 161.62 162.38 snow20 216.38 217.12 217.88 trivium 231.00 231.75 235.12 nlsv2 269.62 270.75 271.12 xsalsa20 367.50 372.00 373.50 sosemanuk 378.00 378.75 381.38 dragon 702.00 702.38 702.75 tpy6 1317.75 1335.00 1349.25 tpypy 1345.50 1404.75 1408.88 tpy 4187.62 4188.75 4200.00 hc128 11149.10 11151.00 11288.60 hc256

amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20111120

Cycles/byte for long messages quartile median quartile stream 3.39 3.40 3.51 hc128 3.41 3.63 3.68 tpy 3.78? 3.92? 4.21? sosemanuk 3.81 4.00 4.11 tpy6 4.05 4.09 4.21 cryptmtv3 4.19 4.23 4.25 chacha8 4.00 4.29 4.42 nlsv2 4.39 4.52 4.60 salsa208 4.89 4.92 5.23 hc256 5.15 5.18 5.20 snow20 5.80 5.82 5.84 chacha12 5.85 5.87 5.88 trivium 5.99 6.02 6.02 salsa2012 6.20 6.22 6.24 rabbit 6.25 6.26 6.64 tpypy 6.65 6.78 7.08 panama 7.46 7.52 7.88 lexv2 8.91 8.94 8.99 chacha20 9.80 9.87 9.92 xsalsa20 9.87 9.88 9.92 salsa20 13.45 13.90 14.25 aes128ctr 14.28 14.45 14.76 aes128estream 15.81 16.44 16.75 aes192ctr 18.36 18.38 18.43 dragon 19.21 19.86 20.27 aes256ctr 22.28 22.29 22.71 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 4.24 4.26 4.27 chacha8 4.35 4.48 4.54 nlsv2 4.46 4.52 4.56 salsa208 4.98 5.06 5.11 tpy6 5.17 5.22 5.31 sosemanuk 5.41 5.41 5.42 snow20 5.80 5.80 5.81 tpy 5.87 5.88 5.88 chacha12 6.07 6.07 6.13 cryptmtv3 6.08 6.08 6.08 salsa2012 6.12 6.12 6.13 trivium 6.40 6.40 6.41 rabbit 7.81 7.81 7.98 lexv2 8.54 8.55 8.65 tpypy 8.98 8.99 9.01 chacha20 9.11 9.13 9.21 panama 9.73 9.73 9.78 hc128 9.92 9.93 9.94 salsa20 10.11 10.11 10.13 xsalsa20 14.42 14.57 14.66 aes128ctr 14.61 14.61 14.76 aes128estream 17.26 17.44 17.54 aes192ctr 18.84 18.84 18.86 dragon 20.24 20.41 20.60 aes256ctr 20.50 20.50 20.59 hc256 22.49 22.49 22.70 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 4.31 4.31 4.34 chacha8 4.56 4.57 4.57 salsa208 5.22 5.23 5.28 nlsv2 5.78 5.79 5.91 snow20 5.95 5.96 5.96 chacha12 6.17 6.18 6.19 salsa2012 6.54 6.54 6.56 trivium 6.71 6.72 6.74 rabbit 6.86 6.90 6.91 tpy6 7.32 7.46 7.53 sosemanuk 8.12 8.13 8.13 cryptmtv3 8.24 8.24 8.25 lexv2 9.08 9.08 9.09 chacha20 8.93 9.31 9.42 tpy 10.00 10.00 10.01 salsa20 10.50 10.50 10.55 xsalsa20 12.36 12.37 12.52 tpypy 12.81 12.86 13.03 panama 14.81 14.81 14.83 aes128estream 15.56 15.59 15.92 aes128ctr 18.51 18.58 18.91 aes192ctr 19.61 19.61 19.68 dragon 20.27 20.28 20.28 hc128 21.40 21.49 21.83 aes256ctr 22.85 22.85 22.85 aes256estream 46.31 46.35 46.48 hc256

Cycles/byte for 576 bytes quartile median quartile stream 4.51 4.52 4.53 chacha8 4.81 4.82 4.90 salsa208 6.16 6.16 6.17 chacha12 6.43 6.43 6.47 salsa2012 6.71 6.71 6.81 snow20 7.28 7.30 7.31 nlsv2 7.56 7.61 7.73 rabbit 7.64 7.66 7.67 trivium 8.87 8.89 8.93 cryptmtv3 9.37 9.37 9.51 lexv2 9.46 9.46 9.46 chacha20 10.20 10.20 10.22 salsa20 11.52 11.53 11.60 xsalsa20 12.04 12.07 12.29 tpy6 13.01 13.37 13.57 sosemanuk 15.33 15.35 15.41 aes128estream 18.16 18.34 18.36 tpy 19.17 19.30 19.94 aes128ctr 21.64 21.66 21.68 dragon 21.86 21.95 22.55 tpypy 22.10 22.25 22.45 aes192ctr 22.68 22.75 23.37 panama 23.84 23.85 23.89 aes256estream 25.33 25.76 25.87 aes256ctr 48.33 48.34 48.39 hc128 115.34 115.38 115.70 hc256

Cycles/byte for 64 bytes quartile median quartile stream 6.80 6.84 7.08 chacha8 7.88 7.92 7.97 salsa208 8.72 8.77 8.77 chacha12 9.52 9.52 9.56 salsa2012 12.61 12.66 12.66 salsa20 12.80 12.80 12.94 chacha20 17.30 17.34 17.48 cryptmtv3 18.05 18.05 18.38 rabbit 18.75 18.89 19.08 snow20 21.38 21.61 21.84 trivium 22.12 22.36 22.55 aes128estream 23.81 23.86 23.91 lexv2 24.38 24.42 24.56 xsalsa20 36.23 36.52 36.52 aes256estream 41.67 41.81 42.00 nlsv2 47.25 47.72 48.09 dragon 62.39 63.09 69.00 aes128ctr 64.08 64.64 65.77 aes192ctr 67.22 70.03 70.73 aes256ctr 75.80 79.12 80.34 sosemanuk 78.14 79.83 80.16 tpy6 134.91 137.39 138.66 tpy 148.73 149.34 153.33 panama 152.72 152.95 153.28 tpypy 407.86 407.91 408.09 hc128 998.95 998.95 999.05 hc256

Cycles/byte for 8 bytes quartile median quartile stream 67.88 67.88 67.88 chacha8 71.62 72.00 72.38 salsa208 81.00 81.00 81.00 chacha12 84.38 84.38 85.12 salsa2012 87.75 87.75 88.12 cryptmtv3 103.88 104.62 105.38 aes128estream 108.38 108.38 109.12 rabbit 114.38 114.38 114.75 salsa20 115.12 115.12 115.12 chacha20 130.50 132.38 133.12 trivium 141.38 141.38 141.75 lexv2 147.75 149.25 150.75 snow20 158.62 159.75 161.25 aes256estream 204.00 204.38 205.88 nlsv2 209.62 210.00 210.38 xsalsa20 248.25 249.38 252.00 dragon 415.50? 421.50? 466.50? aes128ctr 423.38 431.25 434.62 aes192ctr 445.50 471.75 481.88 aes256ctr 590.62 593.62 599.62 tpy6 592.12 628.50 655.12 sosemanuk 1087.50 1089.75 1091.62 tpy 1170.75 1175.25 1194.75 tpypy 1177.50 1183.50 1209.75 panama 3262.12 3262.50 3262.88 hc128 8013.75 8013.75 8014.12 hc256

x86; normally amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h5e450, supercop-20111120

Cycles/byte for long messages quartile median quartile stream 3.25 3.25 3.26 rabbit 2.92? 3.30? 3.32? cryptmtv3 3.30 3.30 3.59 tpy6 3.50 3.51 3.53 tpy 3.96 3.98 3.99 hc128 4.28 4.40 4.41 nlsv2 4.53 4.54 4.54 chacha8 5.35 5.37 5.41 hc256 5.50 5.50 5.50 salsa208 5.68 5.73 5.75 tpypy 5.74 5.82 5.83 snow20 6.48 6.48 6.48 chacha12 6.92 6.94 6.95 sosemanuk 7.65 7.66 7.66 salsa2012 9.56 9.56 9.57 trivium 9.91 9.94 10.17 lexv2 10.34 10.34 10.36 chacha20 11.97 11.97 11.98 salsa20 11.97 11.97 11.98 xsalsa20 17.14 17.15 17.16 aes128estream 21.99 22.00 23.50 dragon 27.34 27.37 27.51 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 3.45 3.45 3.45 rabbit 4.59 4.59 4.59 chacha8 4.67 4.67 4.81 tpy6 4.65 4.70 4.71 nlsv2 5.55 5.55 5.55 salsa208 6.01 6.03 6.04 snow20 6.37 6.38 6.39 tpy 6.40 6.40 6.41 cryptmtv3 6.52 6.52 6.53 chacha12 7.56 7.57 7.57 sosemanuk 7.71 7.71 7.71 salsa2012 8.29 8.30 8.31 tpypy 9.97 9.97 9.97 trivium 10.19 10.20 10.31 lexv2 10.40 10.40 10.40 chacha20 12.02 12.02 12.03 salsa20 12.05 12.06 12.06 hc128 12.29 12.29 12.29 xsalsa20 17.29 17.29 17.29 aes128estream 23.21 23.22 23.71 dragon 26.98 26.99 27.01 hc256 27.38 27.39 27.42 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 3.76 3.77 3.78 rabbit 4.67 4.67 4.68 chacha8 5.48 5.49 5.50 nlsv2 5.63 5.63 5.63 salsa208 6.38 6.38 6.44 snow20 6.60 6.60 6.60 chacha12 6.95 6.95 6.95 tpy6 7.79 7.79 7.80 salsa2012 8.74 8.74 8.77 sosemanuk 8.80 8.80 8.81 cryptmtv3 10.48 10.49 10.49 chacha20 10.64 10.65 10.66 lexv2 10.65 10.66 10.66 trivium 10.65 10.66 10.66 tpy 12.10 12.10 12.11 salsa20 12.20 12.39 12.39 tpypy 12.82 12.82 12.82 xsalsa20 17.46 17.46 17.47 aes128estream 24.38 24.89 24.92 dragon 25.43 25.44 25.55 hc128 27.41 27.57 27.58 aes256estream 63.04 63.05 63.05 hc256

Cycles/byte for 576 bytes quartile median quartile stream 4.62 4.62 4.65 rabbit 4.89 4.89 4.90 chacha8 5.85 5.86 5.87 salsa208 6.82 6.82 6.85 chacha12 7.39 7.39 7.41 snow20 7.47 7.49 7.52 nlsv2 8.00 8.01 8.01 salsa2012 8.72 8.74 8.77 cryptmtv3 10.69 10.70 10.71 chacha20 11.86 11.88 11.92 lexv2 11.88 11.89 11.93 sosemanuk 12.32 12.32 12.33 salsa20 12.44 12.45 12.45 trivium 13.03 13.04 13.06 tpy6 14.22 14.23 14.23 xsalsa20 18.10 18.10 18.11 aes128estream 23.41 23.42 23.42 tpy 24.08 24.10 24.12 tpypy 27.47 27.50 28.03 dragon 28.31 28.32 28.35 aes256estream 61.58 61.59 61.61 hc128 159.33 159.34 159.35 hc256

Cycles/byte for 64 bytes quartile median quartile stream 7.45 7.50 7.59 chacha8 8.39 8.48 8.53 salsa208 9.42 9.42 9.66 chacha12 10.50 10.55 10.83 salsa2012 13.31 13.31 13.31 chacha20 14.86 14.91 15.14 salsa20 15.28 15.33 16.08 rabbit 17.72 17.95 18.38 cryptmtv3 20.25 20.44 20.62 snow20 25.69 25.88 26.25 aes128estream 27.52 27.66 27.89 lexv2 32.06 32.11 32.16 xsalsa20 35.30 35.34 35.39 trivium 38.39 38.67 39.05 aes256estream 37.88 38.72 38.77 nlsv2 46.55 46.64 46.69 sosemanuk 66.70 67.27 68.20 dragon 90.75 91.22 92.02 tpy6 171.33 171.61 171.98 tpypy 186.70 186.70 187.22 tpy 521.72 523.64 524.30 hc128 1391.77 1398.00 1424.11 hc256

Cycles/byte for 8 bytes quartile median quartile stream 72.38? 73.12? 141.00? chacha8 81.00? 81.00? 157.50? salsa208 88.12? 88.88? 172.50? chacha12 97.88 97.88 98.25 salsa2012 102.75? 108.75? 205.88? cryptmtv3 107.62? 112.50? 211.12? rabbit 116.62? 117.75? 229.88? aes128estream 119.25? 119.62? 234.38? chacha20 132.75 133.12 133.12 salsa20 144.75? 147.00? 285.38? lexv2 146.62? 148.88? 292.88? aes256estream 162.38? 165.38? 320.62? snow20 203.25? 204.38? 402.00? nlsv2 216.75? 218.62? 429.38? trivium 269.62 270.00 270.75 xsalsa20 367.12? 373.12? 757.12? sosemanuk 380.25? 385.50? 747.00? dragon 702.00 702.00 756.38 tpy6 1333.50? 1334.62? 2663.25? tpypy 1469.25 1470.00 1470.38 tpy 4162.88 4164.00 4186.12 hc128 11152.50 11168.60 11169.80 hc256

amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20120120

Cycles/byte for long messages quartile median quartile stream 3.33 3.41 3.67 hc128 3.82 4.01 4.10 tpy6 3.99 4.03 4.10 cryptmtv3 3.52? 4.08? 4.35? tpy 3.91 4.09 4.22 sosemanuk 4.17 4.21 4.25 chacha8 3.90? 4.23? 4.44? nlsv2 4.37 4.50 4.62 salsa208 4.87 4.91 5.19 hc256 5.18 5.41 5.55 snow20 5.81 5.83 5.85 chacha12 5.86 5.88 5.89 trivium 5.98 6.01 6.03 salsa2012 6.20 6.22 6.33 rabbit 6.21 6.50 6.81 tpypy 6.75 6.90 7.09 panama 7.48 7.54 7.69 lexv2 8.92 8.94 9.00 chacha20 9.82 9.86 9.88 salsa20 9.87 9.90 9.98 xsalsa20 13.66 13.71 14.38 aes128ctr 14.44 14.46 14.97 aes128estream 15.89 16.33 17.24 aes192ctr 18.36 18.39 18.52 dragon 19.14 19.52 20.43 aes256ctr 22.26 22.30 22.86 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 4.23 4.25 4.26 chacha8 4.34 4.45 4.55 nlsv2 4.48 4.52 4.57 salsa208 4.98 5.06 5.10 tpy6 5.23 5.27 5.32 sosemanuk 5.41 5.52 5.58 snow20 5.87 5.87 5.89 chacha12 6.07 6.07 6.08 cryptmtv3 6.08 6.08 6.09 salsa2012 5.86 6.10 6.18 tpy 6.12 6.13 6.13 trivium 6.41 6.41 6.46 rabbit 7.81 7.81 7.89 lexv2 8.54 8.63 8.73 tpypy 8.98 8.99 9.02 chacha20 9.10 9.12 9.20 panama 9.73 9.74 9.87 hc128 9.92 9.92 9.93 salsa20 10.11 10.12 10.16 xsalsa20 14.38 14.39 14.70 aes128ctr 14.61 14.62 14.87 aes128estream 17.25 17.28 17.70 aes192ctr 18.84 18.85 18.91 dragon 20.20 20.26 20.69 aes256ctr 20.42 20.43 20.57 hc256 22.50 22.50 22.78 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 4.31 4.31 4.31 chacha8 4.56 4.57 4.57 salsa208 5.24 5.39 5.47 nlsv2 5.76 5.78 5.79 snow20 5.95 5.95 5.96 chacha12 6.19 6.19 6.21 salsa2012 6.54 6.54 6.55 trivium 6.72 6.73 6.78 rabbit 6.87 6.89 6.90 tpy6 7.28 7.33 7.55 sosemanuk 8.13 8.13 8.14 cryptmtv3 8.24 8.25 8.27 lexv2 9.08 9.09 9.10 chacha20 9.05 9.17 9.18 tpy 10.00 10.00 10.00 salsa20 10.49 10.50 10.55 xsalsa20 12.11 12.23 12.26 tpypy 12.82 12.84 13.32 panama 14.81 14.82 14.83 aes128estream 15.52 15.54 15.71 aes128ctr 18.42 18.42 18.45 aes192ctr 19.60 19.65 19.70 dragon 20.28 20.28 20.29 hc128 21.52 21.87 22.01 aes256ctr 22.86 22.89 23.30 aes256estream 46.31 46.32 46.35 hc256

Cycles/byte for 576 bytes quartile median quartile stream 4.51 4.51 4.52 chacha8 4.84 4.86 4.93 salsa208 6.15 6.15 6.16 chacha12 6.44 6.44 6.51 salsa2012 6.68 6.70 6.76 snow20 7.29 7.29 7.31 nlsv2 7.54 7.62 7.70 rabbit 7.63 7.66 7.66 trivium 8.88 8.95 8.98 cryptmtv3 9.40 9.43 9.59 lexv2 9.46 9.46 9.51 chacha20 10.20 10.20 10.21 salsa20 11.52 11.52 11.58 xsalsa20 12.01 12.11 12.14 tpy6 12.91 13.11 13.65 sosemanuk 15.33 15.35 15.40 aes128estream 18.46 19.01 19.03 tpy 18.81 19.15 19.20 aes128ctr 21.65 21.67 21.69 dragon 21.71 21.78 21.86 aes192ctr 21.53 21.84 22.31 tpypy 22.68 22.77 23.05 panama 23.84 23.86 23.89 aes256estream 25.54 26.03 26.76 aes256ctr 48.33 48.36 48.69 hc128 115.32 115.38 115.44 hc256

Cycles/byte for 64 bytes quartile median quartile stream 6.80 6.84 6.89 chacha8 7.92 7.92 8.02 salsa208 8.44 8.44 8.44 chacha12 9.61 9.61 9.66 salsa2012 12.56 12.56 12.61 salsa20 12.75 12.80 12.80 chacha20 17.30 17.30 17.34 cryptmtv3 18.14 18.23 18.42 rabbit 18.84 18.89 19.12 snow20 21.42 21.56 21.80 trivium 22.12 22.17 22.36 aes128estream 23.81 23.86 24.14 lexv2 24.38 24.42 24.98 xsalsa20 36.23 36.52 36.61 aes256estream 41.77 41.91 42.14 nlsv2 47.48 47.72 48.00 dragon 60.38 63.05 65.91 aes128ctr 63.19 63.47 64.27 aes192ctr 68.44 69.33 71.06 aes256ctr 75.28 78.47 82.55 sosemanuk 78.00 79.59 80.44 tpy6 137.86 139.55 139.92 tpy 148.50 149.44 152.06 panama 152.48 153.14 155.86 tpypy 407.86 408.09 408.14 hc128 998.62 998.67 998.72 hc256

Cycles/byte for 8 bytes quartile median quartile stream 67.88 68.25 68.25 chacha8 71.25 71.62 71.62 salsa208 81.00 81.38 81.38 chacha12 84.00 84.75 88.88 salsa2012 87.75 87.75 88.50 cryptmtv3 103.88 103.88 104.25 aes128estream 108.00 108.75 109.12 rabbit 114.00 114.00 114.75 salsa20 115.12 115.12 115.12 chacha20 130.88 132.38 132.75 trivium 141.38 142.12 143.25 lexv2 149.25 150.38 151.88 snow20 159.00 159.75 162.75 aes256estream 204.00 204.00 205.50 nlsv2 208.88 209.25 209.62 xsalsa20 248.62 248.62 250.88 dragon 414.00 418.12 426.38 aes128ctr 423.00 425.62 427.50 aes192ctr 451.12? 462.00? 505.50? aes256ctr 598.88 613.50 615.75 tpy6 599.25 624.00 652.50 sosemanuk 1089.38 1090.50 1094.62 tpy 1169.25 1187.62 1212.00 tpypy 1174.88 1192.88 1212.75 panama 3262.50 3263.62 3279.75 hc128 7986.38 7987.12 7988.25 hc256

x86; normally amd64; Bobcat (500f20); 2011 AMD E-350; 2 x 1600MHz; h4e350, supercop-20120120

Cycles/byte for long messages quartile median quartile stream 3.03? 3.20? 3.60? cryptmtv3 3.24 3.27 3.28 rabbit 3.02? 3.46? 3.80? tpy6 3.42? 3.69? 3.86? tpy 3.64? 3.99? 4.54? hc128 3.73? 4.17? 4.43? nlsv2 4.50 4.55 4.59 chacha8 5.09 5.35 5.59 hc256 5.49 5.52 5.56 salsa208 5.69 5.91 6.09 snow20 5.89 6.15 6.35 tpypy 6.46 6.50 6.53 chacha12 6.71? 7.22? 7.51? sosemanuk 7.64 7.68 7.71 salsa2012 9.37 9.55 9.89 trivium 9.54 10.13 10.49 lexv2 10.34 10.37 10.40 chacha20 11.95 11.97 12.01 salsa20 11.97 11.98 12.03 xsalsa20 17.06 17.08 17.76 aes128estream 22.78 23.26 23.87 dragon 26.03 27.62 28.06 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 3.45 3.45 3.46 rabbit 4.59 4.61 4.61 chacha8 4.46 4.64 4.69 nlsv2 4.68 4.84 4.92 tpy6 5.56 5.57 5.58 salsa208 6.06 6.14 6.17 snow20 6.46 6.53 6.55 tpy 6.51 6.54 6.59 cryptmtv3 6.54 6.54 6.55 chacha12 7.71 7.73 7.73 salsa2012 7.62 7.82 7.87 sosemanuk 8.39 8.51 8.61 tpypy 9.98 10.05 10.14 trivium 10.21 10.37 10.51 lexv2 10.40 10.41 10.42 chacha20 12.02 12.02 12.04 salsa20 12.07 12.09 12.35 hc128 12.29 12.29 12.32 xsalsa20 17.24 17.24 17.56 aes128estream 23.84 23.85 24.15 dragon 27.02 27.04 27.15 hc256 27.27 27.52 27.73 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 3.76 3.77 3.78 rabbit 4.67 4.69 4.70 chacha8 5.47 5.60 5.66 nlsv2 5.63 5.64 5.66 salsa208 6.39 6.52 6.57 snow20 6.62 6.63 6.64 chacha12 6.96 7.17 7.25 tpy6 7.79 7.79 7.82 salsa2012 8.78 8.84 9.16 sosemanuk 8.88 8.96 9.05 cryptmtv3 10.49 10.50 10.52 chacha20 10.66 10.73 10.85 trivium 10.67 10.90 11.01 tpy 10.74 11.02 11.18 lexv2 12.11 12.13 12.13 salsa20 12.51 12.70 12.84 tpypy 12.82 12.86 12.88 xsalsa20 17.45 17.46 17.47 aes128estream 24.42 24.92 25.03 dragon 25.56 25.57 25.61 hc128 27.52 27.67 27.95 aes256estream 63.18 63.18 63.72 hc256

Cycles/byte for 576 bytes quartile median quartile stream 4.61 4.61 4.64 rabbit 4.88 4.88 4.89 chacha8 5.85 5.86 5.86 salsa208 6.82 6.84 6.88 chacha12 7.40 7.43 7.56 snow20 8.02 8.02 8.02 salsa2012 8.16 8.24 8.31 nlsv2 8.72 8.74 8.83 cryptmtv3 10.70 10.70 10.72 chacha20 11.91 11.94 11.99 lexv2 11.91 11.95 12.17 sosemanuk 12.32 12.33 12.33 salsa20 12.45 12.47 12.49 trivium 13.03 13.05 13.10 tpy6 14.22 14.23 14.24 xsalsa20 18.06 18.08 18.29 aes128estream 21.68 23.40 23.43 tpy 24.08 24.12 24.14 tpypy 28.09 28.11 28.18 dragon 28.26 28.29 28.32 aes256estream 61.47 61.61 61.67 hc128 159.71 159.75 160.07 hc256

Cycles/byte for 64 bytes quartile median quartile stream 7.45 7.50 7.69 chacha8 8.39 8.44 8.48 salsa208 9.38 9.42 9.61 chacha12 10.55 10.69 10.88 salsa2012 13.31 13.36 13.36 chacha20 14.86 14.91 14.91 salsa20 15.19 15.23 15.42 rabbit 17.67 17.81 17.95 cryptmtv3 20.20 20.30 20.53 snow20 25.59 25.78 26.25 aes128estream 27.56 27.70 28.03 lexv2 31.97 32.02 32.25 xsalsa20 35.20 35.34 35.48 trivium 37.50 37.73 38.62 aes256estream 46.73 46.97 47.30 nlsv2 46.64 47.06 48.05 sosemanuk 67.36 67.45 68.34 dragon 90.56 90.80 91.08 tpy6 171.52 172.03 172.36 tpypy 176.30 186.70 187.12 tpy 524.48 524.62 528.80 hc128 1395.09 1395.42 1395.70 hc256

Cycles/byte for 8 bytes quartile median quartile stream 72.75 72.75 73.50 chacha8 81.00 81.38 81.38 salsa208 88.12 88.12 88.50 chacha12 98.62 99.00 99.00 salsa2012 102.38 104.62 105.00 cryptmtv3 106.88 107.25 108.38 rabbit 116.62 116.62 117.00 aes128estream 119.25 119.25 119.25 chacha20 133.12 133.12 133.50 salsa20 142.12 142.50 144.38 aes256estream 145.50 146.62 149.25 lexv2 161.62 162.00 162.75 snow20 216.75 217.12 219.00 trivium 231.00 232.50 235.12 nlsv2 269.25 269.62 270.38 xsalsa20 367.88 369.75 375.75 sosemanuk 378.00 378.00 380.25 dragon 702.00 702.38 703.12 tpy6 1334.62 1338.00 1342.12 tpypy 1341.38 1347.38 1470.38 tpy 4187.25 4189.12 4191.75 hc128 11157.40 11159.60 11213.20 hc256

amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20120120

Cycles/byte for long messages quartile median quartile stream 2.30 2.32 2.35 salsa208 2.42 2.42 2.44 cryptmtv3 2.40 2.46 2.51 sosemanuk 2.51 2.52 2.52 chacha8 2.60 2.61 2.62 panama 2.67 2.67 2.68 hc128 3.02 3.03 3.04 tpy 3.05 3.09 3.13 tpy6 3.15 3.15 3.17 salsa2012 3.46 3.47 3.48 chacha12 3.42 3.53 3.68 nlsv2 3.60 3.62 3.65 hc256 3.91 3.92 3.92 trivium 3.87 4.00 4.06 snow20 4.33 4.33 4.33 rabbit 4.22 4.34 4.47 tpypy 4.69 4.70 4.70 lexv2 4.81 4.83 4.85 salsa20 4.80 4.84 4.86 xsalsa20 5.35 5.35 5.35 chacha20 9.59 9.63 9.72 aes128ctr 9.66 9.66 9.66 aes128estream 11.42 11.52 11.64 aes192ctr 12.58 12.64 12.67 dragon 13.65 13.72 13.83 aes256ctr 16.40 16.58 16.98 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.36 2.36 2.38 salsa208 2.56 2.56 2.56 chacha8 3.14 3.17 3.17 sosemanuk 3.20 3.20 3.21 salsa2012 3.51 3.51 3.51 chacha12 3.59 3.59 3.59 panama 3.73 3.77 3.84 nlsv2 3.83 3.84 3.86 tpy6 4.09 4.10 4.10 trivium 4.14 4.14 4.14 cryptmtv3 4.13 4.16 4.19 snow20 4.49 4.49 4.49 rabbit 4.80 4.80 4.81 tpy 4.86 4.87 4.88 salsa20 4.87 4.87 4.87 lexv2 5.00 5.01 5.02 xsalsa20 5.40 5.40 5.40 chacha20 6.12 6.13 6.18 tpypy 6.92 6.92 6.93 hc128 9.77 9.77 9.77 aes128estream 10.07 10.09 10.11 aes128ctr 12.11 12.12 12.17 aes192ctr 12.94 12.96 12.96 dragon 14.19 14.20 14.23 aes256ctr 14.76 14.76 14.77 hc256 16.71 16.73 16.91 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.43 2.43 2.44 salsa208 2.63 2.63 2.63 chacha8 3.27 3.27 3.28 salsa2012 3.58 3.59 3.59 chacha12 4.39 4.39 4.40 trivium 4.38 4.40 4.48 nlsv2 4.40 4.42 4.49 snow20 4.39 4.42 4.42 sosemanuk 4.75 4.75 4.76 rabbit 4.94 4.94 4.96 salsa20 5.07 5.08 5.13 tpy6 5.15 5.15 5.15 lexv2 5.21 5.22 5.23 panama 5.29 5.29 5.31 xsalsa20 5.49 5.49 5.50 chacha20 5.78 5.78 5.79 cryptmtv3 7.74 7.74 7.74 tpy 9.07 9.12 9.22 tpypy 9.91 9.91 9.91 aes128estream 10.81 10.83 10.86 aes128ctr 12.93 12.94 13.02 aes192ctr 13.51 13.53 13.54 dragon 14.00 14.00 14.01 hc128 14.93 15.00 15.07 aes256ctr 16.96 16.96 17.16 aes256estream 33.35 33.36 33.36 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.85 2.87 2.87 salsa208 3.00 3.01 3.02 chacha8 3.82 3.82 3.83 salsa2012 4.09 4.10 4.11 chacha12 5.01 5.07 5.38 snow20 5.18 5.18 5.19 trivium 5.47 5.47 5.48 rabbit 5.76 5.78 5.78 salsa20 5.75 5.78 5.85 nlsv2 5.93 5.94 5.94 lexv2 6.23 6.24 6.26 cryptmtv3 6.28 6.29 6.29 chacha20 6.69 6.70 6.71 xsalsa20 7.65 7.69 7.71 sosemanuk 8.33 8.38 8.48 tpy6 9.53 9.54 9.71 panama 10.28 10.28 10.28 aes128estream 12.97 13.01 13.08 aes128ctr 15.00 15.02 15.05 dragon 15.06 15.26 15.43 aes192ctr 15.61 15.62 15.68 tpy 17.01 17.05 17.16 tpypy 17.63 17.67 18.01 aes256ctr 17.73 17.84 17.91 aes256estream 32.85 32.87 32.88 hc128 82.85 82.85 82.86 hc256

Cycles/byte for 64 bytes quartile median quartile stream 6.64 6.64 6.66 chacha8 6.98 6.98 7.00 salsa208 8.86 8.92 8.94 chacha12 9.00 9.00 9.00 salsa2012 12.38 12.41 12.47 cryptmtv3 13.02 13.02 13.09 chacha20 13.08 13.08 13.09 salsa20 13.86 13.98 14.12 snow20 14.81 14.81 14.83 rabbit 14.88 14.89 15.09 aes128estream 15.09 15.09 15.09 trivium 15.38 15.38 15.42 lexv2 21.19 21.19 22.14 xsalsa20 26.59 26.86 27.00 aes256estream 29.36 29.42 29.44 nlsv2 34.14 34.41 34.48 dragon 41.20 41.45 42.09 aes128ctr 42.92 43.25 45.14 aes192ctr 44.16 44.38 44.52 sosemanuk 45.06 46.25 49.02 aes256ctr 49.98 50.25 50.41 tpy6 64.73 65.06 65.16 panama 115.75 115.75 115.89 tpy 118.38 118.58 118.66 tpypy 274.36 274.42 274.48 hc128 718.09 718.16 718.17 hc256

Cycles/byte for 8 bytes quartile median quartile stream 55.38 55.38 55.88 chacha8 57.50 57.62 58.25 salsa208 64.25 65.25 65.38 aes128estream 67.62 68.12 68.75 cryptmtv3 73.12 73.75 74.75 chacha12 73.62 73.75 74.25 salsa2012 91.38 91.38 91.50 rabbit 91.38 91.50 92.00 lexv2 93.62 93.62 94.12 trivium 105.75 105.88 106.38 chacha20 106.38 107.00 107.50 salsa20 109.00 109.25 109.75 snow20 119.12 119.62 121.75 aes256estream 142.88 144.00 145.62 nlsv2 171.62 171.75 172.25 xsalsa20 185.62 186.75 192.12 dragon 269.12 270.38 274.25 aes128ctr 278.62 279.62 298.50 aes192ctr 287.38 288.00 314.00 aes256ctr 349.38 350.50 350.62 sosemanuk 378.25 378.38 379.38 tpy6 516.62 520.62 521.75 panama 916.00 918.75 919.38 tpypy 907.75 922.25 923.75 tpy 2191.62 2193.12 2193.62 hc128 5745.25 5745.38 5745.38 hc256

x86; normally amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20120120

Cycles/byte for long messages quartile median quartile stream 1.77? 1.79? 2.07? cryptmtv3 2.74 2.76 2.76 chacha8 2.77 2.78 2.80 salsa208 2.78 2.79 2.79 rabbit 2.88 2.94 3.00 tpy 2.95 3.00 3.03 tpy6 3.37 3.41 3.45 hc128 3.73 3.75 3.78 nlsv2 3.72 3.76 3.77 salsa2012 3.87 3.88 3.88 chacha12 4.39 4.40 4.44 snow20 4.23 4.42 4.56 hc256 4.98 4.99 5.00 sosemanuk 5.01 5.11 5.17 tpypy 5.69 5.73 5.75 salsa20 5.69 5.77 5.83 xsalsa20 6.04 6.04 6.05 chacha20 6.45 6.46 6.49 trivium 7.50 7.53 7.55 lexv2 12.46 12.46 12.47 aes128estream 17.70 17.82 17.86 dragon 21.85 21.87 21.95 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.80 2.81 2.81 chacha8 2.82 2.83 2.83 salsa208 2.94 2.94 2.94 rabbit 3.79 3.80 3.81 salsa2012 3.93 3.93 3.93 chacha12 3.95 3.96 3.97 tpy6 4.04 4.05 4.06 nlsv2 4.34 4.34 4.47 cryptmtv3 4.59 4.59 4.59 snow20 4.97 4.97 5.00 tpy 5.35 5.35 5.35 sosemanuk 5.76 5.77 5.78 salsa20 5.95 5.99 5.99 xsalsa20 6.09 6.10 6.10 chacha20 6.76 6.77 6.78 trivium 7.20 7.24 7.27 tpypy 7.74 7.74 7.75 lexv2 8.93 8.94 8.95 hc128 12.60 12.60 12.60 aes128estream 18.26 18.31 18.32 dragon 21.82 21.90 21.94 hc256 22.01 22.02 22.04 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.88 2.88 2.89 chacha8 2.90 2.90 2.91 salsa208 3.20 3.20 3.20 rabbit 3.86 3.87 3.88 salsa2012 4.01 4.02 4.02 chacha12 4.69 4.70 4.70 nlsv2 4.88 4.88 4.90 snow20 5.48 5.53 5.53 tpy6 5.84 5.85 5.86 salsa20 6.12 6.12 6.12 sosemanuk 6.18 6.18 6.19 chacha20 6.32 6.36 6.36 xsalsa20 6.36 6.37 6.38 cryptmtv3 7.25 7.27 7.27 trivium 8.08 8.09 8.10 lexv2 8.34 8.35 8.42 tpy 10.78 10.80 10.81 tpypy 12.73 12.73 12.74 aes128estream 18.16 18.18 18.19 hc128 19.05 19.14 19.15 dragon 22.22 22.24 22.31 aes256estream 50.81 50.89 50.92 hc256

Cycles/byte for 576 bytes quartile median quartile stream 3.24 3.25 3.26 chacha8 3.25 3.27 3.28 salsa208 3.87 3.88 3.89 rabbit 4.36 4.37 4.38 salsa2012 4.51 4.51 4.52 chacha12 5.61 5.64 5.66 snow20 6.11 6.21 6.22 nlsv2 6.54 6.54 6.55 cryptmtv3 6.55 6.55 6.58 salsa20 6.88 6.88 6.89 chacha20 7.83 7.88 7.88 xsalsa20 8.18 8.18 8.19 sosemanuk 8.57 8.59 8.60 trivium 8.96 9.01 9.02 lexv2 9.73 9.78 9.86 tpy6 13.19 13.19 13.21 aes128estream 17.34 17.34 17.35 tpy 20.38 20.82 20.85 tpypy 21.30 21.36 21.38 dragon 22.84 22.85 22.92 aes256estream 42.91 42.94 42.97 hc128 128.28 128.37 128.38 hc256

Cycles/byte for 64 bytes quartile median quartile stream 6.92 6.98 7.00 chacha8 7.14 7.20 7.20 salsa208 9.06 9.06 9.08 chacha12 9.20 9.27 9.28 salsa2012 12.39 12.41 12.59 rabbit 12.81 12.88 12.95 cryptmtv3 13.34 13.36 13.36 salsa20 13.36 13.36 13.38 chacha20 15.36 15.38 15.58 snow20 18.41 18.42 18.62 aes128estream 20.28 20.36 20.69 lexv2 24.78 24.84 24.92 xsalsa20 25.00 25.27 25.28 trivium 29.48 29.50 29.64 nlsv2 30.80 30.81 31.09 aes256estream 32.05 32.05 32.06 sosemanuk 49.34 49.38 49.44 dragon 62.31 63.34 63.41 tpy6 132.22 132.23 132.44 tpy 142.27 146.84 147.03 tpypy 359.98 360.33 360.48 hc128 1119.20 1119.27 1119.28 hc256

Cycles/byte for 8 bytes quartile median quartile stream 59.88 60.38 60.38 chacha8 61.50 61.50 61.50 salsa208 74.75 74.88 76.00 cryptmtv3 76.88 77.00 77.00 chacha12 77.50 78.00 78.12 salsa2012 78.62 78.62 78.75 aes128estream 85.88 86.38 87.00 rabbit 110.25 110.75 110.75 salsa20 110.75 111.38 113.00 lexv2 111.25 111.38 111.38 chacha20 117.00 118.00 118.50 aes256estream 123.50 124.62 124.62 snow20 155.00 157.25 157.25 trivium 157.38 158.38 158.38 nlsv2 202.25 202.75 203.25 xsalsa20 252.50 252.50 252.62 sosemanuk 269.25 269.75 273.00 dragon 478.00 479.00 487.38 tpy6 1039.50 1040.62 1055.62 tpy 1108.25 1114.88 1117.00 tpypy 2873.88 2874.88 2874.88 hc128 8959.62 8959.75 8959.75 hc256

amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20120120

Cycles/byte for long messages quartile median quartile stream 2.30 2.33 2.34 salsa208 2.41 2.42 2.44 cryptmtv3 2.43 2.43 2.49 sosemanuk 2.51 2.52 2.53 chacha8 2.60 2.61 2.62 panama 2.66 2.67 2.67 hc128 2.85? 3.03? 3.20? tpy 3.05 3.09 3.12 tpy6 3.14 3.15 3.17 salsa2012 3.45 3.46 3.48 chacha12 3.42 3.48 3.52 nlsv2 3.60 3.62 3.67 hc256 3.91 3.92 3.92 trivium 3.97 3.98 4.01 snow20 4.17? 4.34? 4.64? tpypy 4.36 4.37 4.37 rabbit 4.69 4.70 4.70 lexv2 4.81 4.83 4.84 xsalsa20 4.82 4.83 4.85 salsa20 5.34 5.35 5.38 chacha20 9.62 9.65 9.71 aes128ctr 9.66 9.67 9.67 aes128estream 11.49 11.52 11.54 aes192ctr 12.55 12.59 12.60 dragon 13.70 13.74 13.79 aes256ctr 16.38 16.63 16.98 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.36 2.37 2.37 salsa208 2.56 2.56 2.57 chacha8 3.15 3.15 3.17 sosemanuk 3.19 3.19 3.20 salsa2012 3.50 3.51 3.51 chacha12 3.59 3.60 3.60 panama 3.74 3.75 3.77 nlsv2 3.83 3.84 3.85 tpy6 4.09 4.09 4.10 trivium 4.14 4.14 4.14 cryptmtv3 4.14 4.14 4.15 snow20 4.51 4.51 4.51 rabbit 4.80 4.80 4.89 tpy 4.87 4.87 4.88 lexv2 4.87 4.88 4.88 salsa20 4.99 5.00 5.00 xsalsa20 5.40 5.40 5.41 chacha20 6.13 6.13 6.28 tpypy 6.92 6.92 6.92 hc128 9.77 9.77 9.77 aes128estream 10.09 10.09 10.11 aes128ctr 12.14 12.14 12.15 aes192ctr 12.91 12.92 12.92 dragon 14.23 14.24 14.25 aes256ctr 14.76 14.76 14.78 hc256 16.72 16.74 16.90 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.43 2.44 2.44 salsa208 2.63 2.63 2.64 chacha8 3.26 3.26 3.27 salsa2012 3.58 3.58 3.59 chacha12 4.38 4.38 4.42 sosemanuk 4.38 4.39 4.41 snow20 4.39 4.39 4.39 trivium 4.40 4.41 4.47 nlsv2 4.75 4.75 4.75 rabbit 4.94 4.95 4.95 salsa20 5.08 5.09 5.11 tpy6 5.16 5.17 5.17 lexv2 5.25 5.25 5.25 panama 5.28 5.28 5.29 xsalsa20 5.47 5.48 5.48 chacha20 5.78 5.78 5.79 cryptmtv3 7.74 7.74 7.95 tpy 9.06 9.09 9.31 tpypy 9.90 9.91 9.91 aes128estream 10.80 10.83 10.88 aes128ctr 12.96 13.00 13.01 aes192ctr 13.48 13.48 13.50 dragon 14.01 14.01 14.01 hc128 15.03 15.07 15.08 aes256ctr 16.94 16.99 17.10 aes256estream 33.35 33.35 33.36 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.86 2.86 2.88 salsa208 3.00 3.01 3.01 chacha8 3.81 3.83 3.83 salsa2012 4.08 4.08 4.09 chacha12 5.06 5.10 5.10 snow20 5.17 5.17 5.18 trivium 5.39 5.39 5.40 rabbit 5.76 5.76 5.77 salsa20 5.83 5.85 5.94 nlsv2 5.94 5.94 5.95 lexv2 6.25 6.25 6.26 chacha20 6.22 6.26 6.28 cryptmtv3 6.69 6.70 6.70 xsalsa20 7.61 7.62 7.73 sosemanuk 8.32 8.37 8.46 tpy6 9.59 9.60 9.64 panama 10.27 10.28 10.28 aes128estream 12.89 13.02 13.15 aes128ctr 14.98 14.99 15.01 dragon 15.25 15.32 15.40 aes192ctr 15.61 15.62 15.92 tpy 17.00 17.02 17.31 tpypy 17.71 17.72 17.77 aes256estream 17.86 17.88 17.96 aes256ctr 32.85 32.88 32.89 hc128 82.83 82.84 82.85 hc256

Cycles/byte for 64 bytes quartile median quartile stream 6.58 6.58 6.58 chacha8 6.88 6.89 6.89 salsa208 8.72 8.78 8.78 chacha12 8.89 8.91 8.95 salsa2012 12.61 12.67 12.73 cryptmtv3 12.92 12.92 12.98 chacha20 12.97 12.98 12.98 salsa20 13.41 13.41 13.70 rabbit 13.70 13.72 13.83 snow20 14.80 14.86 14.94 aes128estream 14.98 15.00 15.05 trivium 15.30 15.36 15.36 lexv2 21.14 21.14 21.16 xsalsa20 26.58 26.62 26.64 aes256estream 29.61 29.69 29.98 nlsv2 34.31 34.38 34.61 dragon 40.16 41.02 42.36 aes128ctr 43.39 44.00 44.23 sosemanuk 44.19 44.36 45.09 aes192ctr 47.23 48.19 48.20 aes256ctr 49.91 50.39 50.52 tpy6 64.72 64.84 65.69 panama 115.61 115.84 117.73 tpy 118.16 118.28 118.53 tpypy 274.22 274.22 274.34 hc128 717.72 717.78 717.80 hc256

Cycles/byte for 8 bytes quartile median quartile stream 54.62 54.62 55.12 chacha8 56.50 57.00 57.50 salsa208 63.38 63.88 64.38 aes128estream 67.75 67.75 67.88 cryptmtv3 71.75 72.12 73.12 chacha12 73.12 73.12 73.62 salsa2012 81.88 82.00 82.88 rabbit 90.62 91.12 91.75 lexv2 92.62 92.62 94.12 trivium 105.25 105.38 105.75 chacha20 105.75 106.25 106.25 salsa20 107.25 108.25 108.75 snow20 118.50 119.50 120.38 aes256estream 142.88 142.88 143.88 nlsv2 170.62 171.12 172.12 xsalsa20 184.25 184.75 186.75 dragon 266.25 272.00 278.38 aes128ctr 287.62 289.12 296.38 aes192ctr 299.75 303.25 304.25 aes256ctr 344.12 347.62 351.88 sosemanuk 377.38 381.25 386.12 tpy6 511.38 511.88 516.25 panama 905.75 910.25 924.25 tpy 914.00 916.50 919.88 tpypy 2190.38 2190.88 2191.38 hc128 5746.62 5746.75 5749.62 hc256