VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of stream ciphers, indexed by machine

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.

What do the graphs and tables mean?

Each computer also has a series of tables, six tables for each computer. The fourth table shows the speed, in cycles/byte, of encrypting 576-byte messages. Each row of the table lists

• the first quartile of many speed measurements,
• the median of many speed measurements,
• the third quartile of many speed measurements, and
• the name of the stream cipher.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

armeabi (v7-A, Krait); 2012 Qualcomm Snapdragon S4 APQ8060A; 2 x 1512MHz; h9dragon, supercop-20130126

Cycles/byte for long messages quartile median quartile stream 3.15 3.22 3.32 salsa208 3.19 3.22 3.31 chacha8 4.21 4.24 4.32 chacha12 4.50 4.53 4.53 salsa2012 5.05 5.14 5.29 salsa20 5.23 5.33 5.41 xsalsa20 5.73 5.79 5.85 nlsv2 6.36 6.57 6.66 chacha20 8.30 8.36 8.43 tpy 8.34 8.44 8.49 cryptmtv3 9.03 9.10 9.11 tpy6 13.14 13.25 13.48 tpypy 18.59 18.62 18.87 aes128ctr 27.73 27.80 27.86 aes128estream 39.68 39.89 39.95 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 4.11 4.15 4.19 salsa208 4.25 4.25 4.26 chacha8 5.28 5.30 5.30 chacha12 5.40 5.41 5.42 salsa2012 6.15 6.21 6.30 salsa20 6.58 6.65 6.67 xsalsa20 7.46 7.49 7.50 nlsv2 7.51 7.67 7.70 chacha20 9.74 9.75 9.76 cryptmtv3 11.22 11.23 11.24 tpy6 12.03 12.04 12.06 tpy 17.01 17.03 17.05 tpypy 23.02 23.02 23.03 aes128ctr 29.21 29.25 29.26 aes128estream 41.26 41.37 41.40 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 5.66 5.68 5.85 chacha8 5.58 5.70 5.73 salsa208 6.67 6.69 6.85 salsa2012 6.88 6.88 6.91 chacha12 7.68 7.77 7.77 salsa20 8.54 8.56 8.59 xsalsa20 9.07 9.21 9.27 chacha20 10.72 10.75 10.84 nlsv2 11.81 11.96 12.02 cryptmtv3 14.66 14.69 14.79 tpy6 18.07 18.16 18.32 tpy 22.99 23.08 23.27 tpypy 29.99 30.36 30.39 aes128ctr 31.51 31.60 31.63 aes128estream 43.60 43.68 43.78 aes256estream

Cycles/byte for 576 bytes quartile median quartile stream 9.85 10.08 10.16 salsa208 10.39 10.40 10.47 chacha8 11.18 11.19 11.26 salsa2012 11.03 11.49 11.50 chacha12 11.99 12.11 12.20 salsa20 13.47 13.78 13.86 chacha20 14.01 14.02 14.10 xsalsa20 16.82 17.32 17.63 cryptmtv3 18.59 18.74 18.89 nlsv2 24.89 24.97 24.98 tpy6 34.64 34.73 34.81 tpy 37.25 37.41 37.49 aes128estream 39.05 39.85 39.93 tpypy 49.68 50.50 50.84 aes256estream 51.59 52.45 52.53 aes128ctr

Cycles/byte for 64 bytes quartile median quartile stream 62.41 63.81 65.20 salsa208 60.33 65.16 65.91 salsa2012 64.17 68.05 68.78 chacha8 64.17 70.12 70.20 salsa20 70.19 70.88 70.89 chacha12 71.00 75.84 77.27 chacha20 84.30 84.83 85.14 cryptmtv3 91.06 92.66 93.56 xsalsa20 100.34? 107.75? 111.94? aes128estream 122.38 124.94 126.06 nlsv2 123.64 127.09 129.45 aes256estream 145.69 151.98 152.75 tpy6 247.09 248.25 250.23 tpy 252.31 255.80 258.70 tpypy 318.92 318.98 319.64 aes128ctr

Cycles/byte for 8 bytes quartile median quartile stream 532.62 538.75 549.88 salsa208 516.00 550.25 555.62 salsa2012 549.62 555.12 556.12 chacha8 527.75 561.12 567.00 salsa20 567.12 572.62 572.88 chacha12 570.00 612.12 623.50 chacha20 624.00 629.38 639.75 cryptmtv3 724.38 736.12 760.00 aes128estream 743.25 748.75 754.12 xsalsa20 741.62 749.25 758.62 aes256estream 794.38 840.12 851.25 nlsv2 1126.12 1134.38 1154.00 tpy6 1908.38 1922.00 1928.00 tpy 1973.38 1995.62 2001.50 tpypy 2492.25 2517.50 2524.25 aes128ctr

armeabi (Cortex A15); 2012 Samsung Exynos 5 Dual; 2 x 1700MHz; sachr, supercop-20130126

Cycles/byte for long messages quartile median quartile stream 2.64? 2.75? 3.07? chacha8 3.43? 3.74? 3.83? salsa208 3.53? 3.87? 3.98? chacha12 3.78? 4.16? 4.99? nlsv2 4.57 4.70 4.81 tpy 4.91 4.97 5.04 tpy6 5.41 5.46 5.53 salsa2012 5.53 5.92 6.02 chacha20 5.93 6.39 6.55 cryptmtv3 6.96 7.07 7.11 tpypy 8.60 8.65 8.69 xsalsa20 8.63 8.68 8.82 salsa20 17.62 17.82 17.87 aes128estream 25.47 25.57 25.65 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 3.51 3.56 3.76 chacha8 4.40 4.43 4.46 salsa208 4.67 4.71 4.74 chacha12 5.07? 5.11? 5.72? nlsv2 6.07 6.09 6.12 salsa2012 6.55 6.58 6.61 tpy6 6.80 6.81 6.84 chacha20 7.09 7.11 7.14 cryptmtv3 7.67 7.70 7.76 tpy 9.27 9.30 9.40 salsa20 9.49 9.52 9.53 xsalsa20 10.05 10.09 10.10 tpypy 18.54 18.62 18.64 aes128estream 26.30 26.34 26.37 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 4.63 4.68 4.81 chacha8 5.46 5.53 5.68 salsa208 5.71 5.74 5.83 chacha12 6.97 7.02 7.11 nlsv2 7.09 7.21 7.28 salsa2012 7.79 7.86 8.03 chacha20 8.20 8.24 8.30 cryptmtv3 9.28 9.30 9.36 tpy6 10.31 10.37 10.41 salsa20 10.96 10.99 11.11 xsalsa20 12.60 12.67 12.83 tpy 15.06 15.17 15.26 tpypy 19.78 19.87 20.00 aes128estream 27.56 27.64 27.70 aes256estream

Cycles/byte for 576 bytes quartile median quartile stream 7.68 7.87 8.06 chacha8 8.61 8.68 8.82 salsa208 8.77 8.89 9.00 chacha12 10.63 10.79 10.92 salsa2012 10.80 10.99 11.28 chacha20 10.96 11.10 11.34 cryptmtv3 11.60 11.67 11.81 nlsv2 13.99 14.07 14.30 salsa20 15.70 15.77 16.07 xsalsa20 16.34 16.44 16.59 tpy6 23.38 23.78 24.57 aes128estream 25.90 26.18 26.70 tpy 28.40 28.68 28.75 tpypy 31.08 31.26 31.40 aes256estream

Cycles/byte for 64 bytes quartile median quartile stream 46.58 47.05 47.88 salsa208 47.80 49.62 50.23 chacha8 49.41 49.97 51.16 salsa2012 52.23 52.73 53.19 chacha12 54.61 55.06 55.75 cryptmtv3 56.16 57.14 58.61 salsa20 57.38 57.84 58.95 chacha20 67.36 68.98 70.53 aes128estream 71.75 72.06 72.97 xsalsa20 72.59 74.06 75.64 aes256estream 74.86 76.27 78.33 nlsv2 105.61 106.42 107.98 tpy6 194.75 195.72 196.91 tpy 199.16 201.53 202.39 tpypy

Cycles/byte for 8 bytes quartile median quartile stream 388.62 392.62 407.75 chacha8 408.75 416.75 427.12 salsa208 426.38 432.50 446.00 chacha12 412.00? 436.38? 470.62? cryptmtv3 433.50 439.38 473.62 salsa2012 438.12 450.62 469.50 aes256estream 430.25? 459.12? 590.88? aes128estream 468.75 475.50 490.38 chacha20 483.75 497.62 513.38 nlsv2 501.88? 533.75? 565.75? salsa20 604.00 614.25 630.88 xsalsa20 825.88 832.50 844.88 tpy6 1523.00 1530.50 1555.25 tpy 1543.12 1556.75 1574.62 tpypy

amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20130126

Cycles/byte for long messages quartile median quartile stream 1.25 1.30 1.34 aes128ctr 1.42 1.45 1.50 aes192ctr 1.58 1.62 1.66 aes256ctr 1.75 1.76 1.77 chacha8 2.09 2.11 2.11 salsa208 2.33 2.35 2.38 panama 2.51 2.53 2.56 chacha12 2.72 2.73 2.76 hc128 2.84 2.85 2.85 salsa2012 2.80 2.88 2.91 tpy 3.03 3.07 3.12 tpy6 3.32 3.35 3.40 sosemanuk 3.86 3.93 4.01 nlsv2 4.02 4.07 4.12 hc256 4.10 4.10 4.12 chacha20 4.32 4.32 4.32 trivium 4.32 4.33 4.37 cryptmtv3 4.32 4.34 4.40 salsa20 4.33 4.34 4.36 xsalsa20 4.39 4.43 4.57 tpypy 4.67 4.72 4.76 snow20 5.64 5.65 5.70 rabbit 6.13 6.18 6.20 lexv2 11.58 11.62 11.64 aes128estream 16.95 17.08 17.12 dragon 23.27 23.33 23.37 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 1.77 1.79 1.81 aes128ctr 1.81 1.81 1.82 chacha8 1.95 1.97 1.98 aes192ctr 2.14 2.15 2.15 salsa208 2.16 2.17 2.20 aes256ctr 2.62 2.62 2.64 chacha12 2.88 2.88 2.88 salsa2012 3.34 3.35 3.36 panama 3.96 3.97 3.99 tpy6 4.15 4.15 4.16 chacha20 4.14 4.17 4.18 sosemanuk 4.17 4.21 4.26 nlsv2 4.38 4.38 4.42 salsa20 4.52 4.52 4.52 trivium 4.58 4.59 4.59 xsalsa20 4.89 4.91 4.92 snow20 4.89 4.91 4.94 tpy 5.14 5.14 5.17 cryptmtv3 5.82 5.82 5.85 rabbit 6.34 6.37 6.39 lexv2 6.53 6.56 6.63 tpypy 7.74 7.74 7.75 hc128 11.67 11.69 11.70 aes128estream 16.82 16.84 16.87 hc256 17.43 17.51 17.54 dragon 23.43 23.46 23.47 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 1.82 1.83 1.83 chacha8 2.20 2.24 2.26 salsa208 2.50 2.55 2.61 aes128ctr 2.60 2.60 2.63 chacha12 2.78 2.80 2.86 aes192ctr 2.94 2.97 2.98 salsa2012 3.06 3.08 3.10 aes256ctr 4.21 4.22 4.24 chacha20 4.44 4.45 4.49 salsa20 4.81 4.82 4.84 nlsv2 4.85 4.85 4.85 trivium 4.96 4.97 4.98 xsalsa20 4.97 4.98 4.99 panama 5.22 5.26 5.29 snow20 5.55 5.57 5.60 sosemanuk 5.58 5.61 5.69 tpy6 6.07 6.10 6.13 rabbit 6.74 6.77 6.77 lexv2 7.43 7.44 7.45 cryptmtv3 8.37 8.44 8.47 tpy 9.82 9.86 9.95 tpypy 11.79 11.81 11.88 aes128estream 16.05 16.06 16.08 hc128 18.22 18.27 18.32 dragon 23.74 23.77 23.78 aes256estream 38.11 38.14 38.18 hc256

Cycles/byte for 576 bytes quartile median quartile stream 1.86 1.86 1.92 chacha8 2.61 2.61 2.61 salsa208 2.65 2.72 2.90 chacha12 3.49 3.49 3.49 salsa2012 4.84 4.95 5.04 aes128ctr 5.04 5.06 5.10 chacha20 5.07 5.15 5.30 aes192ctr 5.27 5.29 5.37 salsa20 5.72 5.72 5.73 trivium 5.98 6.05 6.12 snow20 6.38 6.38 6.50 nlsv2 6.40 6.51 6.57 aes256ctr 6.52 6.55 6.55 xsalsa20 6.84 6.85 6.88 rabbit 7.53 7.62 7.74 lexv2 7.96 7.97 7.97 cryptmtv3 9.41 9.44 9.47 panama 9.43 9.45 9.59 tpy6 9.33 9.47 9.54 sosemanuk 12.24 12.24 12.24 aes128estream 17.34 17.54 17.64 tpy 19.09 19.19 19.38 tpypy 20.05 20.12 20.15 dragon 24.30 24.33 24.41 aes256estream 38.23 38.28 38.35 hc128 94.89 94.95 95.02 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.84 4.84 4.84 chacha8 6.20 6.20 6.20 salsa208 7.19 7.19 7.19 chacha12 8.17 8.17 8.17 salsa2012 12.17 12.17 12.23 salsa20 12.12 12.39 12.91 cryptmtv3 12.59 12.59 12.59 chacha20 16.72 16.78 17.16 trivium 16.45 16.81 16.81 rabbit 16.88 16.97 17.11 snow20 16.98 17.31 17.50 aes128estream 18.47 18.47 19.38 lexv2 23.45 23.47 23.67 xsalsa20 30.95 31.11 31.42 nlsv2 33.00 33.03 33.12 aes256estream 34.75 34.88 35.28 aes128ctr 36.52 36.78 37.12 aes192ctr 37.55 37.91 38.00 aes256ctr 44.19 44.28 45.20 dragon 52.14 52.92 54.52 sosemanuk 57.67 58.27 58.75 tpy6 65.22 65.52 65.89 panama 132.55 134.22 136.16 tpy 134.50 135.64 136.52 tpypy 322.38 322.42 322.73 hc128 820.94 821.16 821.47 hc256

Cycles/byte for 8 bytes quartile median quartile stream 39.50 39.75 40.50 chacha8 54.38 54.38 54.38 salsa208 56.62 56.62 57.12 chacha12 70.00 70.25 70.25 salsa2012 73.75 73.75 73.75 cryptmtv3 74.00 75.75 81.00 aes128estream 96.62 98.88 100.38 rabbit 101.88 102.25 102.38 salsa20 103.00 103.00 103.00 trivium 109.75 109.75 109.75 chacha20 113.25 113.25 116.12 lexv2 124.88 128.38 128.50 aes256estream 134.50 137.38 137.62 snow20 158.12 159.50 163.75 nlsv2 191.88 193.75 195.50 xsalsa20 230.50 232.00 235.38 dragon 275.50 281.62 285.25 aes192ctr 276.38 281.75 289.75 aes128ctr 302.88 303.75 314.12 aes256ctr 414.00 416.50 428.62 sosemanuk 440.75 453.12 468.00 tpy6 520.88 522.62 524.00 panama 1048.50 1053.75 1070.12 tpypy 1053.50 1063.00 1090.50 tpy 2577.88 2581.50 2583.38 hc128 6575.75 6576.88 6576.88 hc256

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-5800K; 2 x 3800MHz; hydra9, supercop-20130126

Cycles/byte for long messages quartile median quartile stream 2.13 2.13 2.14 chacha8 2.32 2.35 2.36 salsa208 2.31 2.42 2.53 tpy 2.77 2.82 2.88 tpy6 2.90 2.93 2.97 hc128 2.96 2.97 2.98 rabbit 3.05 3.05 3.06 chacha12 3.11 3.16 3.20 salsa2012 3.62? 3.86? 4.16? tpypy 3.83? 3.98? 5.82? nlsv2 4.31 4.36 4.42 hc256 4.79 4.80 4.82 cryptmtv3 4.77 4.82 4.86 xsalsa20 4.75 4.83 4.85 salsa20 4.91 4.92 4.93 chacha20 4.91 4.96 5.01 snow20 5.61 5.63 5.69 trivium 6.09 6.17 6.24 sosemanuk 8.68 8.73 8.75 lexv2 15.07 15.13 15.39 aes128estream 20.54? 20.63? 23.71? dragon 22.96 23.04 23.16 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.19 2.19 2.19 chacha8 2.37 2.37 2.38 salsa208 3.12 3.13 3.13 rabbit 3.13 3.13 3.14 chacha12 3.18 3.19 3.21 salsa2012 3.78 3.81 3.83 tpy6 4.30? 4.34? 5.71? nlsv2 4.58 4.63 4.68 tpy 4.83 4.86 4.88 salsa20 5.02 5.04 5.04 chacha20 5.11 5.13 5.16 snow20 5.12 5.14 5.17 xsalsa20 5.51 5.52 5.54 cryptmtv3 6.03 6.08 6.21 tpypy 6.10 6.11 6.14 trivium 6.71 6.74 6.78 sosemanuk 8.91 8.93 8.94 lexv2 9.11 9.11 9.13 hc128 15.18 15.21 15.41 aes128estream 21.11 21.14 23.45 dragon 23.07 23.10 23.12 hc256 23.18 23.22 23.29 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.23 2.23 2.24 chacha8 2.41 2.44 2.48 salsa208 3.16 3.16 3.16 chacha12 3.23 3.24 3.34 salsa2012 3.38 3.39 3.39 rabbit 4.90 4.93 5.01 salsa20 5.01 5.01 5.02 chacha20 5.08 5.10 5.31 nlsv2 5.40 5.40 5.47 snow20 5.38 5.43 5.48 tpy6 5.66 5.67 5.71 xsalsa20 6.87 6.92 6.97 trivium 7.73 7.80 7.84 sosemanuk 8.03 8.08 8.18 tpy 8.26 8.27 8.32 cryptmtv3 9.22 9.24 9.26 lexv2 9.72 9.96 10.05 tpypy 15.34 15.34 15.42 aes128estream 19.38 19.40 19.43 hc128 21.99 22.01 22.05 dragon 23.51 23.60 23.65 aes256estream 54.24 54.30 54.34 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.35 2.36 2.36 chacha8 2.75 2.75 2.76 salsa208 3.28 3.28 3.28 chacha12 3.70 3.72 3.86 salsa2012 4.09 4.10 4.10 rabbit 5.14 5.14 5.14 chacha20 5.62 5.62 5.62 salsa20 6.31 6.32 6.34 snow20 7.10 7.13 7.52 nlsv2 7.60 7.63 7.68 xsalsa20 8.11 8.12 8.13 cryptmtv3 8.94 8.98 8.98 trivium 9.93 10.02 10.03 tpy6 10.24 10.31 10.35 lexv2 10.64 10.72 10.87 sosemanuk 15.77 15.84 15.89 aes128estream 17.52 17.67 18.01 tpy 18.90 19.57 20.43 tpypy 24.22 24.44 24.47 aes256estream 24.39 24.49 24.50 dragon 46.87 46.94 47.15 hc128 137.06 137.23 137.30 hc256

Cycles/byte for 64 bytes quartile median quartile stream 5.59 5.59 5.59 chacha8 6.19 6.19 6.19 salsa208 7.72 7.72 7.72 chacha12 8.11 8.16 8.17 salsa2012 11.97 11.97 11.97 chacha20 12.09 12.11 12.17 salsa20 12.38 12.52 12.70 rabbit 13.03 13.11 13.78 cryptmtv3 16.33 16.72 17.12 snow20 21.05 21.30 21.45 aes128estream 22.84 22.95 23.27 lexv2 29.48 29.61 29.61 xsalsa20 34.28 34.33 34.83 trivium 35.23 35.23 35.34 aes256estream 38.70 38.95 39.23 nlsv2 42.64 43.20 43.62 sosemanuk 53.81 54.20 54.30 dragon 64.83 65.09 65.14 tpy6 134.47 137.94 139.66 tpy 140.59 141.36 150.03 tpypy 397.22 397.22 397.56 hc128 1197.45 1198.91 1199.67 hc256

Cycles/byte for 8 bytes quartile median quartile stream 50.88 50.88 50.88 chacha8 54.62 54.62 54.62 salsa208 67.88 67.88 67.88 chacha12 70.75 70.75 71.50 salsa2012 80.38 81.12 82.00 cryptmtv3 89.25 89.38 89.88 aes128estream 88.50 89.75 89.88 rabbit 101.88 101.88 101.88 chacha20 102.00 102.25 102.88 salsa20 128.75 131.12 132.00 lexv2 134.25 136.75 138.50 snow20 144.25 145.00 147.25 aes256estream 205.75 206.62 209.62 nlsv2 224.25 224.25 224.38 trivium 239.62 239.88 239.88 xsalsa20 282.62 287.88 291.50 dragon 339.00 344.12 348.38 sosemanuk 491.12 491.62 496.38 tpy6 1081.88 1094.88 1098.00 tpy 1108.00 1122.25 1161.50 tpypy 3173.50 3180.88 3185.12 hc128 9576.12 9585.25 9594.12 hc256

amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20130419

Cycles/byte for long messages quartile median quartile stream 1.22 1.24 1.30 aes128ctr 1.47 1.49 1.53 aes192ctr 1.61 1.63 1.66 aes256ctr 1.76 1.78 1.79 chacha8 2.06 2.08 2.12 salsa208 2.40 2.41 2.43 panama 2.53 2.55 2.58 chacha12 2.39? 2.75? 3.38? hc128 2.79 2.86 2.89 tpy 2.84 2.87 2.87 salsa2012 2.94? 3.15? 3.41? tpy6 3.36 3.41 3.42 sosemanuk 3.83 3.92 3.95 nlsv2 4.04 4.05 4.07 hc256 4.09 4.09 4.12 chacha20 4.31 4.33 4.34 trivium 4.32 4.33 4.34 cryptmtv3 4.31 4.34 4.36 salsa20 4.34 4.37 4.38 xsalsa20 4.37 4.46 4.54 tpypy 4.71 4.73 4.76 snow20 5.69 5.72 5.74 rabbit 6.13 6.15 6.17 lexv2 11.56 11.58 11.65 aes128estream 16.86 16.98 17.35 dragon 23.23 23.27 23.36 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 1.75 1.75 1.78 aes128ctr 1.82 1.82 1.82 chacha8 1.98 1.99 2.01 aes192ctr 2.13 2.14 2.15 salsa208 2.19 2.20 2.21 aes256ctr 2.64 2.65 2.65 chacha12 2.88 2.90 2.90 salsa2012 3.37 3.38 3.38 panama 4.00 4.03 4.22 tpy6 4.12 4.15 4.16 sosemanuk 4.15 4.15 4.16 chacha20 4.15 4.19 4.21 nlsv2 4.38 4.38 4.40 salsa20 4.52 4.52 4.54 trivium 4.58 4.59 4.60 xsalsa20 4.89 4.91 4.93 tpy 4.92 4.92 4.94 snow20 5.14 5.14 5.15 cryptmtv3 5.86 5.89 5.90 rabbit 6.36 6.36 6.37 lexv2 6.60 6.64 6.65 tpypy 7.75 7.76 8.23 hc128 11.66 11.68 11.71 aes128estream 16.82 16.83 16.84 hc256 17.34 17.35 17.62 dragon 23.40 23.41 23.45 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 1.80 1.80 1.81 chacha8 2.20 2.24 2.27 salsa208 2.53 2.59 2.63 aes128ctr 2.62 2.62 2.63 chacha12 2.78 2.80 2.82 aes192ctr 2.95 2.95 2.99 salsa2012 3.08 3.09 3.12 aes256ctr 4.23 4.23 4.27 chacha20 4.47 4.48 4.49 salsa20 4.76 4.82 4.92 nlsv2 4.85 4.85 4.86 trivium 4.94 4.95 5.01 xsalsa20 4.96 4.99 5.00 panama 5.18 5.19 5.21 snow20 5.46 5.46 5.47 sosemanuk 5.61 5.63 6.04 tpy6 6.13 6.15 6.18 rabbit 6.71 6.74 6.76 lexv2 7.43 7.44 7.47 cryptmtv3 8.33 8.37 8.40 tpy 9.80 9.84 9.96 tpypy 11.87 11.88 11.88 aes128estream 16.04 16.06 16.79 hc128 17.98 17.99 18.33 dragon 23.69 23.74 23.77 aes256estream 38.09 38.11 38.13 hc256

Cycles/byte for 576 bytes quartile median quartile stream 1.86 1.87 1.88 chacha8 2.61 2.61 2.73 salsa208 2.67 2.68 2.73 chacha12 3.50 3.51 3.51 salsa2012 4.87 4.93 5.03 aes128ctr 5.04 5.05 5.07 chacha20 5.06 5.17 5.26 aes192ctr 5.27 5.28 5.34 salsa20 5.72 5.72 5.72 trivium 6.06 6.13 6.18 snow20 6.40 6.42 6.67 nlsv2 6.40 6.48 6.50 aes256ctr 6.54 6.54 6.56 xsalsa20 6.83 6.85 6.88 rabbit 7.67 7.72 7.77 lexv2 7.95 7.96 8.03 cryptmtv3 9.03 9.09 9.16 sosemanuk 9.30 9.39 9.43 panama 9.36 9.48 10.34 tpy6 12.14 12.18 12.20 aes128estream 17.42 17.61 17.78 tpy 19.12 19.30 19.87 tpypy 19.69 19.72 19.81 dragon 24.28 24.34 24.40 aes256estream 38.21 38.35 38.64 hc128 94.87 94.90 95.02 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.88 4.88 4.88 chacha8 6.19 6.20 6.20 salsa208 6.98 6.98 6.98 chacha12 8.17 8.17 8.19 salsa2012 11.98 11.98 11.98 salsa20 12.23 12.38 12.42 cryptmtv3 12.59 12.59 12.59 chacha20 15.88 16.00 16.00 rabbit 16.78 16.78 17.16 trivium 17.41 17.44 17.50 snow20 17.09 17.50 17.92 aes128estream 18.44 19.19 20.12 lexv2 23.48 23.48 23.66 xsalsa20 31.05 31.17 32.02 nlsv2 32.80 33.03 33.12 aes256estream 34.53 35.61 36.02 aes128ctr 35.92 36.16 36.28 aes192ctr 38.23 38.45 39.64 aes256ctr 43.27 43.62 44.00 dragon 49.62 49.94 50.42 sosemanuk 57.41 58.22 60.62 tpy6 64.48 64.56 65.14 panama 133.42 134.91 135.31 tpy 134.52 138.61 138.80 tpypy 322.36 322.53 323.06 hc128 821.34 821.47 821.53 hc256

Cycles/byte for 8 bytes quartile median quartile stream 40.12 40.12 40.12 chacha8 54.38 54.38 54.62 salsa208 56.62 56.75 57.50 chacha12 68.50 69.12 71.38 cryptmtv3 70.25 70.38 76.12 salsa2012 74.00 75.50 78.75 aes128estream 95.12 96.50 96.62 rabbit 101.62 101.62 102.25 salsa20 102.00 103.00 103.00 trivium 107.75 108.88 111.62 lexv2 109.75 109.75 109.75 chacha20 124.62 124.88 125.62 aes256estream 140.00 140.50 141.38 snow20 155.75 160.75 163.00 nlsv2 192.25 193.12 193.38 xsalsa20 224.38 226.00 227.75 dragon 280.88 283.12 284.62 aes192ctr 285.50 287.62 293.62 aes128ctr 300.38 303.00 311.75 aes256ctr 395.25 397.50 399.75 sosemanuk 440.62? 442.62? 804.25? tpy6 513.25 514.00 515.12 panama 1074.12 1083.12 1094.75 tpy 1067.12 1094.12 1115.38 tpypy 2576.38 2582.00 2587.00 hc128 6577.00 6578.62 6578.75 hc256

x86; normally amd64; Piledriver (610f01); 2012 AMD A10-4655M; 2 x 2000MHz; h9trinity, supercop-20130419

Cycles/byte for long messages quartile median quartile stream 2.13 2.14 2.20 chacha8 2.30 2.31 2.37 salsa208 2.28 2.35 2.48 tpy 2.82 2.86 2.89 tpy6 2.86 2.91 2.94 hc128 2.96 2.97 3.00 rabbit 3.05 3.06 3.08 chacha12 3.12 3.19 3.20 salsa2012 3.81 3.92 3.97 tpypy 3.91 3.93 3.96 nlsv2 4.26 4.30 4.39 hc256 4.80 4.82 4.84 cryptmtv3 4.79 4.82 4.83 salsa20 4.81 4.84 4.85 xsalsa20 4.89 4.92 4.98 chacha20 4.91 4.95 4.99 snow20 5.61 5.64 5.70 trivium 6.25 6.34 6.53 sosemanuk 8.54 8.58 8.65 lexv2 15.04 15.08 15.11 aes128estream 20.54 20.65 20.70 dragon 22.93 23.02 23.07 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.19 2.19 2.24 chacha8 2.34 2.35 2.39 salsa208 3.13 3.13 3.15 rabbit 3.13 3.14 3.15 chacha12 3.18 3.21 3.21 salsa2012 3.82 3.83 3.83 tpy6 4.29 4.30 4.32 nlsv2 4.52 4.54 4.56 tpy 4.86 4.86 4.86 salsa20 5.04 5.05 5.09 chacha20 5.14 5.14 5.14 xsalsa20 5.13 5.15 5.17 snow20 5.52 5.52 5.54 cryptmtv3 5.98 5.99 6.02 tpypy 6.10 6.12 6.16 trivium 6.81 6.86 6.99 sosemanuk 8.80 8.82 8.86 lexv2 9.07 9.08 9.10 hc128 15.17 15.18 15.19 aes128estream 21.09 21.16 21.19 dragon 23.02 23.04 23.08 hc256 23.16 23.21 23.23 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.23 2.24 2.25 chacha8 2.41 2.42 2.45 salsa208 3.16 3.17 3.17 chacha12 3.25 3.25 3.35 salsa2012 3.38 3.39 3.41 rabbit 4.90 4.91 4.97 salsa20 5.01 5.01 5.06 chacha20 5.09 5.10 5.12 nlsv2 5.40 5.42 5.47 tpy6 5.41 5.47 5.53 snow20 5.65 5.66 5.69 xsalsa20 6.89 6.96 6.97 trivium 7.79 7.82 7.92 sosemanuk 7.88 7.93 7.94 tpy 8.28 8.30 8.31 cryptmtv3 9.15 9.17 9.20 lexv2 9.58 9.70 9.77 tpypy 15.32 15.33 15.37 aes128estream 19.35 19.39 19.42 hc128 21.92 21.99 22.08 dragon 23.52 23.58 23.61 aes256estream 54.22 54.25 54.28 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.35 2.35 2.36 chacha8 2.74 2.75 2.76 salsa208 3.29 3.29 3.30 chacha12 3.70 3.70 3.71 salsa2012 4.11 4.13 4.14 rabbit 5.14 5.14 5.19 chacha20 5.63 5.64 5.70 salsa20 6.26 6.31 6.35 snow20 7.01 7.03 7.12 nlsv2 7.57 7.60 7.61 xsalsa20 8.07 8.08 8.08 cryptmtv3 8.99 8.99 9.00 trivium 9.86 10.08 10.14 tpy6 10.27 10.32 10.41 lexv2 10.65 10.68 10.86 sosemanuk 15.85 15.87 15.88 aes128estream 17.07 17.16 17.25 tpy 18.76 19.11 19.48 tpypy 24.22 24.33 24.47 dragon 24.37 24.40 24.42 aes256estream 46.85 46.93 46.93 hc128 137.03 137.19 137.28 hc256

Cycles/byte for 64 bytes quartile median quartile stream 5.59 5.59 5.59 chacha8 6.08 6.09 6.11 salsa208 7.72 7.72 7.95 chacha12 8.11 8.12 8.19 salsa2012 11.97 11.97 11.97 chacha20 12.09 12.14 12.17 salsa20 12.78 12.84 13.73 rabbit 12.95 13.06 13.06 cryptmtv3 16.30 16.69 16.92 snow20 21.34 21.50 21.88 aes128estream 24.58 24.78 25.25 lexv2 29.27 29.27 29.36 xsalsa20 34.27 34.53 34.84 trivium 35.34 35.78 35.83 aes256estream 38.75 38.84 39.28 nlsv2 41.70 43.61 44.59 sosemanuk 54.64 54.67 55.89 dragon 64.17 64.25 64.86 tpy6 133.89 134.41 136.22 tpy 140.75 140.89 141.36 tpypy 397.22 397.36 397.62 hc128 1196.64 1197.03 1198.14 hc256

Cycles/byte for 8 bytes quartile median quartile stream 50.88 50.88 51.25 chacha8 55.38 55.50 55.62 salsa208 67.88 67.88 69.25 chacha12 70.38 70.38 71.00 salsa2012 80.50 81.00 83.62 cryptmtv3 88.50 90.12 91.38 rabbit 91.62 92.62 95.25 aes128estream 101.88 101.88 101.88 chacha20 102.75 103.00 103.75 salsa20 132.12 135.38 141.88 lexv2 133.25 135.62 136.62 snow20 143.75 144.25 144.88 aes256estream 201.75 203.12 206.50 nlsv2 224.25 224.25 224.38 trivium 239.88 240.50 241.12 xsalsa20 294.12 295.38 297.62 dragon 338.38 340.38 343.12 sosemanuk 492.12 492.12 500.75 tpy6 1053.50 1055.50 1056.38 tpy 1105.00 1106.62 1132.62 tpypy 3173.50 3173.50 3185.12 hc128 9583.12 9590.88 9593.50 hc256

amd64; Bulldozer (600f12); 2012 AMD FX-4170; 2 x 4200MHz; pistol, supercop-20121016

Cycles/byte for long messages quartile median quartile stream 1.80 1.86 1.90 chacha8 2.13 2.13 2.14 salsa208 2.55 2.57 2.58 chacha12 2.82 2.86 2.89 hc128 2.89 2.90 2.90 salsa2012 3.15 3.20 3.25 tpy 3.36 3.45 3.53 tpy6 4.14 4.17 4.20 chacha20 4.18? 4.39? 4.96? hc256 4.41 4.42 4.43 xsalsa20 4.41 4.43 4.44 salsa20 4.47 4.48 4.49 cryptmtv3 4.61 4.75 4.83 nlsv2 4.74 4.81 4.99 tpypy 4.84 4.88 4.89 snow20 5.84 5.84 5.85 trivium 6.28 6.31 6.40 sosemanuk 6.29 6.32 6.34 rabbit 6.43 6.44 6.55 lexv2 12.09 12.12 12.15 aes128estream 17.82 18.98 19.07 dragon 21.57 21.65 21.69 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 1.88 1.92 1.95 chacha8 2.17 2.18 2.18 salsa208 2.66 2.66 2.67 chacha12 2.93 2.94 2.94 salsa2012 4.19 4.20 4.23 chacha20 4.39 4.43 4.47 tpy6 4.45 4.46 4.47 salsa20 4.64 4.64 4.65 xsalsa20 5.01 5.04 5.10 nlsv2 5.08 5.10 5.11 snow20 5.26 5.27 5.27 cryptmtv3 5.26 5.28 5.30 tpy 6.08 6.08 6.08 trivium 6.49 6.50 6.51 rabbit 6.64 6.65 6.71 sosemanuk 6.69 6.70 6.75 lexv2 7.04 7.06 7.09 tpypy 8.68 8.69 8.70 hc128 12.24 12.26 12.26 aes128estream 19.00 19.02 19.44 hc256 18.55 19.28 19.28 dragon 21.79 21.80 21.82 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 1.85 1.93 1.93 chacha8 2.22 2.23 2.25 salsa208 2.63 2.64 2.68 chacha12 2.99 3.00 3.00 salsa2012 4.25 4.27 4.29 chacha20 4.51 4.52 4.52 salsa20 4.99 5.00 5.01 xsalsa20 5.44 5.45 5.54 snow20 5.68 5.70 5.92 nlsv2 6.18 6.24 6.25 tpy6 6.47 6.47 6.48 trivium 6.78 6.79 6.82 rabbit 7.01 7.04 7.08 lexv2 7.41 7.41 7.43 sosemanuk 7.71 7.73 7.74 cryptmtv3 8.62 8.63 8.69 tpy 10.44 10.63 10.69 tpypy 12.39 12.43 12.48 aes128estream 18.33 18.34 18.38 hc128 19.22 19.29 20.14 dragon 22.03 22.11 22.13 aes256estream 43.17 43.41 43.91 hc256

Cycles/byte for 576 bytes quartile median quartile stream 1.95 1.97 1.98 chacha8 2.59 2.61 2.61 salsa208 2.75 2.77 2.77 chacha12 3.50 3.50 3.52 salsa2012 5.14 5.14 5.15 chacha20 5.28 5.29 5.31 salsa20 6.39 6.41 6.48 snow20 6.57 6.59 6.60 xsalsa20 7.30 7.40 7.77 nlsv2 7.52 7.52 7.53 trivium 7.60 7.62 7.64 rabbit 8.05 8.06 8.06 cryptmtv3 8.13 8.17 8.27 lexv2 9.30 9.34 9.35 sosemanuk 10.40 10.60 10.67 tpy6 12.84 12.90 12.91 aes128estream 18.23 18.26 18.32 tpy 20.03 20.81 21.11 tpypy 21.41 21.45 21.48 dragon 22.64 22.82 22.93 aes256estream 44.12 44.16 44.27 hc128 107.96 108.25 108.61 hc256

Cycles/byte for 64 bytes quartile median quartile stream 5.06? 5.06? 15.19? chacha8 6.28 6.28 6.30 salsa208 7.41 7.41 7.41 chacha12 8.36 8.45 8.45 salsa2012 12.36 12.45 12.58 salsa20 12.72 12.72 12.72 chacha20 13.53? 13.53? 40.59? cryptmtv3 17.45 17.53 17.84 rabbit 18.34? 18.66? 54.84? snow20 18.41 18.80 18.95 aes128estream 19.66 20.72 20.94 lexv2 20.58? 20.94? 61.69? trivium 24.00 24.06 24.06 xsalsa20 29.97 30.62 30.66 sosemanuk 32.11? 32.25? 96.14? aes256estream 33.61 33.69 33.98 nlsv2 49.02 49.09 49.66 dragon 66.22 66.66 67.16 tpy6 135.34 135.61 135.84 tpy 142.03 146.78 151.12 tpypy 374.89 374.97 375.09 hc128 939.56 941.41 941.41 hc256

Cycles/byte for 8 bytes quartile median quartile stream 42.50? 42.50? 127.50? chacha8 55.00 55.00 55.00 salsa208 60.25 60.25 60.25 chacha12 70.00 70.00 70.00 salsa2012 76.50 76.50 81.75 aes128estream 84.75? 84.75? 238.50? cryptmtv3 102.00 102.00 107.50 salsa20 102.50 102.50 102.50 rabbit 108.75 108.75 109.00 chacha20 112.50 114.62 117.88 lexv2 125.25? 125.75? 376.50? trivium 124.75? 127.75? 373.50? aes256estream 149.75? 155.25? 447.75? snow20 171.25? 171.75? 516.00? nlsv2 196.50 197.25 197.25 xsalsa20 234.75? 248.75? 725.62? sosemanuk 262.50 267.00 271.00 dragon 514.75 519.00 522.75 tpy6 1089.00? 1096.25? 3284.25? tpy 1149.50 1162.25 1172.88 tpypy 2997.00 2997.25 2997.88 hc128 7501.88? 7515.38? 22401.40? hc256

x86; normally amd64; Bulldozer (600f12); 2012 AMD FX-4170; 2 x 4200MHz; pistol, supercop-20121016

Cycles/byte for long messages quartile median quartile stream 2.22 2.22 2.23 chacha8 2.33 2.37 2.41 salsa208 2.59 2.64 2.68 tpy 3.04 3.09 3.11 tpy6 3.09 3.11 3.15 hc128 3.17 3.18 3.19 rabbit 3.17 3.18 3.21 chacha12 3.18 3.21 3.22 salsa2012 4.32 4.41 4.49 tpypy 4.63 4.74 4.88 hc256 4.77 4.79 4.82 nlsv2 4.79 4.83 4.87 xsalsa20 4.82 4.84 4.85 salsa20 4.89 4.90 4.91 cryptmtv3 5.08 5.10 5.10 chacha20 5.06 5.11 5.14 snow20 5.80 5.81 5.82 trivium 6.37 6.45 6.47 sosemanuk 10.01 10.03 10.07 lexv2 15.28 15.30 15.33 aes128estream 23.21 23.33 23.36 dragon 26.51 26.61 26.68 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.28 2.28 2.28 chacha8 2.40 2.41 2.44 salsa208 3.24 3.25 3.25 salsa2012 3.25 3.26 3.28 chacha12 3.35 3.35 3.35 rabbit 4.18 4.20 4.21 tpy6 4.84 4.85 4.87 tpy 4.87 4.88 4.89 salsa20 5.16 5.16 5.18 nlsv2 5.20 5.21 5.21 chacha20 5.19 5.21 5.22 xsalsa20 5.28 5.31 5.33 snow20 5.58 5.59 5.59 cryptmtv3 6.26 6.27 6.27 trivium 6.73 6.77 6.80 tpypy 6.97 7.00 7.01 sosemanuk 10.05 10.05 10.06 hc128 10.26 10.28 10.29 lexv2 15.37 15.39 15.40 aes128estream 23.87 23.94 23.96 dragon 26.52 26.56 26.59 hc256 26.74 26.80 26.83 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.30 2.32 2.32 chacha8 2.46 2.46 2.47 salsa208 3.26 3.26 3.27 chacha12 3.30 3.33 3.34 salsa2012 3.62 3.63 3.64 rabbit 4.94 4.96 4.96 salsa20 5.18 5.18 5.18 chacha20 5.59 5.59 5.62 snow20 5.79 5.80 5.87 xsalsa20 6.02 6.05 6.11 nlsv2 6.07 6.09 6.21 tpy6 7.02 7.02 7.02 trivium 8.03 8.06 8.10 sosemanuk 8.34 8.42 8.54 tpy 8.39 8.42 8.58 cryptmtv3 10.51 10.54 10.58 tpypy 10.63 10.65 10.75 lexv2 15.50 15.52 15.53 aes128estream 21.38 21.42 21.55 hc128 24.87 24.98 25.06 dragon 27.04 27.09 27.14 aes256estream 62.89 63.02 63.06 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.45 2.49 2.50 chacha8 2.81 2.82 2.87 salsa208 3.45 3.47 3.48 chacha12 3.78 3.80 3.91 salsa2012 4.36 4.38 4.39 rabbit 5.35 5.35 5.35 chacha20 5.74 5.75 5.76 salsa20 6.54 6.59 6.64 snow20 8.10 8.10 8.11 cryptmtv3 8.03 8.11 8.16 xsalsa20 8.10 8.14 8.19 nlsv2 9.02 9.02 9.06 trivium 10.92 11.03 11.08 sosemanuk 11.09 11.22 11.61 tpy6 11.75 11.79 11.84 lexv2 15.99 16.03 16.11 aes128estream 18.06 18.18 18.31 tpy 20.82 20.97 21.15 tpypy 27.46 27.91 27.99 dragon 27.90 28.01 28.12 aes256estream 52.46 52.54 52.58 hc128 159.56 159.92 159.95 hc256

Cycles/byte for 64 bytes quartile median quartile stream 5.78 5.78 5.78 chacha8 6.34? 6.36? 19.03? salsa208 7.91 7.91 7.91 chacha12 8.22 8.28 8.28 salsa2012 12.17 12.17 12.17 chacha20 12.75 12.75 12.75 salsa20 13.14 13.20 13.91 rabbit 13.31 13.38 14.11 cryptmtv3 18.06 18.28 18.55 snow20 21.69 22.09 22.42 aes128estream 25.56 25.73 26.03 lexv2 32.50 33.50 34.66 xsalsa20 34.44 34.66 34.66 trivium 36.14 36.48 36.78 aes256estream 41.25 41.50 41.69 nlsv2 43.48 43.86 44.41 sosemanuk 62.94 63.62 64.83 dragon 74.00 74.05 74.12 tpy6 141.25 141.72 142.72 tpy 147.75 149.88 151.50 tpypy 446.72 446.72 446.72 hc128 1401.97 1403.72 1407.03 hc256

Cycles/byte for 8 bytes quartile median quartile stream 54.12 54.88 54.88 chacha8 55.00? 55.00? 165.00? salsa208 70.88 71.25 71.25 salsa2012 71.12 71.88 71.88 chacha12 92.50 92.50 93.50 aes128estream 94.88 95.12 97.00 rabbit 94.75 95.88 99.00 cryptmtv3 105.12 105.88 105.88 chacha20 107.00 107.00 107.00 salsa20 131.50 133.00 133.88 aes256estream 144.50 144.88 146.25 lexv2 145.38 146.25 148.00 snow20 206.50 209.00 210.75 nlsv2 239.50 239.50 239.50 trivium 276.75 278.75 282.38 xsalsa20 340.00 340.75 344.75 dragon 343.50? 348.38? 506.12? sosemanuk 580.00? 587.12? 1724.25? tpy6 1104.00 1107.00 1111.25 tpy 1168.25 1170.88 1180.50 tpypy 3552.50 3552.50 3583.50 hc128 11189.50 11209.50 11212.50 hc256

amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20130126

Cycles/byte for long messages quartile median quartile stream 1.18 1.19 1.20 chacha8 1.19? 1.27? 1.34? aes128ctr 1.47 1.50 1.51 aes192ctr 1.58 1.58 1.60 salsa208 1.70 1.72 1.75 aes256ctr 1.71 1.72 1.73 chacha12 1.78 1.80 1.81 panama 1.92 1.95 1.98 hc128 2.12 2.13 2.14 salsa2012 2.18 2.20 2.23 tpy 2.24 2.28 2.33 sosemanuk 2.63 2.68 2.74 tpy6 2.71 2.72 2.74 cryptmtv3 2.79 2.81 2.82 chacha20 2.90 2.93 2.97 hc256 3.06 3.08 3.09 nlsv2 3.16 3.17 3.18 trivium 3.22 3.24 3.25 xsalsa20 3.25 3.26 3.27 salsa20 3.28 3.35 3.41 tpypy 3.45 3.46 3.47 snow20 4.27 4.29 4.32 rabbit 4.89 4.91 4.91 lexv2 9.70 9.74 9.76 aes128estream 11.02 11.07 11.10 dragon 14.94 14.97 15.01 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 1.21 1.22 1.22 chacha8 1.60 1.60 1.61 salsa208 1.72 1.73 1.77 aes128ctr 1.75 1.76 1.76 chacha12 1.95 1.96 1.96 aes192ctr 2.15 2.16 2.16 salsa2012 2.18 2.19 2.20 aes256ctr 2.59 2.60 2.61 panama 2.85 2.85 2.86 chacha20 2.89 2.90 2.92 sosemanuk 3.12 3.13 3.14 cryptmtv3 3.25 3.26 3.27 nlsv2 3.27 3.27 3.28 salsa20 3.31 3.31 3.31 trivium 3.39 3.40 3.40 xsalsa20 3.47 3.49 3.51 tpy6 3.57 3.58 3.58 snow20 3.98 3.99 4.00 tpy 4.42 4.43 4.44 rabbit 5.06 5.07 5.07 lexv2 5.19 5.21 5.24 tpypy 5.38 5.38 5.39 hc128 9.79 9.82 9.82 aes128estream 11.33 11.35 11.37 dragon 11.94 11.95 11.96 hc256 15.06 15.08 15.10 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 1.22 1.22 1.23 chacha8 1.62 1.62 1.63 salsa208 1.76 1.77 1.78 chacha12 2.18 2.19 2.20 salsa2012 2.45 2.47 2.60 aes128ctr 2.68 2.70 2.72 aes192ctr 2.83 2.85 2.85 chacha20 2.93 2.95 2.96 aes256ctr 3.28 3.29 3.30 salsa20 3.53 3.53 3.54 trivium 3.66 3.67 3.68 xsalsa20 3.69 3.70 3.72 nlsv2 3.78 3.79 3.80 snow20 3.93 3.94 3.96 panama 3.95 3.97 4.05 sosemanuk 4.41 4.42 4.44 cryptmtv3 4.66 4.66 4.69 rabbit 4.79 4.79 4.81 tpy6 5.33 5.34 5.34 lexv2 6.59 6.61 6.62 tpy 7.81 7.83 7.85 tpypy 9.92 9.93 9.95 aes128estream 11.07 11.09 11.11 hc128 11.80 11.84 11.89 dragon 15.21 15.24 15.26 aes256estream 26.98 27.00 27.01 hc256

Cycles/byte for 576 bytes quartile median quartile stream 1.23 1.24 1.26 chacha8 1.79 1.81 1.82 salsa208 1.81 1.83 1.85 chacha12 2.41 2.42 2.44 salsa2012 2.86 2.88 2.91 chacha20 3.63 3.65 3.67 salsa20 4.11 4.14 4.16 trivium 4.25 4.28 4.30 snow20 4.46 4.53 4.89 aes128ctr 4.55 4.56 4.58 cryptmtv3 4.58 4.61 4.62 xsalsa20 4.74 4.75 4.79 nlsv2 4.79 4.84 4.93 aes192ctr 5.29 5.33 5.36 rabbit 5.41 5.43 5.45 aes256ctr 5.99 6.01 6.04 lexv2 6.85 6.92 7.07 sosemanuk 7.44 7.47 7.53 panama 8.15 8.17 8.20 tpy6 10.22 10.26 10.29 aes128estream 13.02 13.08 13.15 dragon 13.96 13.99 14.01 tpy 15.44 15.46 15.51 tpypy 15.71 15.74 15.77 aes256estream 26.27 26.31 26.38 hc128 67.01 67.08 67.15 hc256

Cycles/byte for 64 bytes quartile median quartile stream 2.38 2.44 2.44 chacha8 3.38 3.50 3.56 chacha12 3.50 3.56 3.56 salsa208 4.56 4.62 4.62 salsa2012 5.56 5.62 5.88 chacha20 6.81 6.81 6.88 salsa20 7.56 7.69 7.81 cryptmtv3 10.62 10.69 10.94 snow20 11.19 11.25 11.50 trivium 12.50 12.56 12.69 rabbit 13.62 13.81 14.00 aes128estream 14.50 14.62 14.75 lexv2 15.31 15.44 15.50 xsalsa20 21.50 21.56 21.62 aes256estream 21.50 21.56 21.69 nlsv2 29.00 29.25 30.06 dragon 30.31? 30.50? 34.31? aes128ctr 30.75 30.94 31.12 aes192ctr 31.19 31.31 31.56 aes256ctr 39.44 39.62 42.19 sosemanuk 52.44 52.69 53.19 panama 52.69 53.19 53.50 tpy6 109.88 110.06 110.31 tpy 110.81 111.19 112.69 tpypy 220.88 221.31 222.00 hc128 579.94 580.75 581.25 hc256

Cycles/byte for 8 bytes quartile median quartile stream 20.50 20.50 21.50 chacha8 29.00? 29.50? 32.50? chacha12 34.50 34.50 35.00 salsa208 40.00 41.00 42.50 cryptmtv3 43.00 43.00 45.00 salsa2012 45.50 46.00 46.50 chacha20 60.00 60.50 61.00 salsa20 61.00 61.50 62.00 aes128estream 70.00 71.00 74.00 trivium 75.00 75.50 77.00 rabbit 84.00 85.00 86.00 snow20 84.50 86.00 88.50 aes256estream 86.50 87.00 90.50 lexv2 106.00 106.50 107.50 nlsv2 127.50 128.00 129.00 xsalsa20 153.50 155.00 157.50 dragon 241.00 242.50 266.00 aes128ctr 245.00 245.50 248.00 aes192ctr 249.50 252.00 254.00 aes256ctr 315.00 319.50 337.00 sosemanuk 389.50 390.00 391.00 tpy6 420.00 422.00 425.50 panama 862.50 865.00 866.50 tpy 879.00 881.00 883.00 tpypy 1765.00 1771.50 1776.50 hc128 4626.50 4639.50 4650.00 hc256

x86; normally amd64; IB+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20130126

Cycles/byte for long messages quartile median quartile stream 1.42? 1.49? 1.77? chacha8 1.72 1.74 1.76 salsa208 1.73 1.87 1.90 tpy 2.12 2.14 2.15 chacha12 2.25 2.31 2.35 tpy6 2.35 2.36 2.36 rabbit 2.36 2.37 2.38 salsa2012 2.40 2.45 2.51 hc128 2.91 2.92 2.94 cryptmtv3 2.90 2.94 3.00 tpypy 3.16 3.20 3.21 nlsv2 3.27 3.35 3.40 hc256 3.43 3.45 3.46 chacha20 3.58 3.60 3.62 salsa20 3.61 3.62 3.64 snow20 3.61 3.64 3.66 xsalsa20 4.21 4.30 4.41 sosemanuk 4.48 4.49 4.50 trivium 6.12 6.14 6.17 lexv2 10.30 10.33 10.35 aes128estream 14.01 14.06 14.13 dragon 17.50 17.53 17.56 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 1.51? 1.52? 1.72? chacha8 1.76 1.77 1.77 salsa208 2.16 2.17 2.18 chacha12 2.38 2.39 2.40 salsa2012 2.49 2.49 2.49 rabbit 3.11 3.14 3.16 tpy6 3.29 3.30 3.31 cryptmtv3 3.40 3.42 3.43 nlsv2 3.48 3.49 3.50 chacha20 3.63 3.65 3.66 salsa20 3.75 3.75 3.76 snow20 3.75 3.77 3.78 tpy 3.83 3.84 3.85 xsalsa20 4.53 4.59 4.67 sosemanuk 4.69 4.70 4.70 trivium 4.87 4.88 4.90 tpypy 6.31 6.32 6.34 lexv2 6.79 6.81 6.84 hc128 10.40 10.41 10.43 aes128estream 14.45 14.47 14.52 dragon 16.23 16.25 16.27 hc256 17.61 17.62 17.64 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 1.52? 1.54? 1.74? chacha8 1.80 1.82 1.84 salsa208 2.17 2.18 2.20 chacha12 2.41 2.41 2.42 salsa2012 2.71 2.71 2.72 rabbit 3.47 3.48 3.50 chacha20 3.70 3.71 3.73 salsa20 3.88 3.90 3.93 nlsv2 3.96 3.97 3.98 snow20 4.15 4.17 4.18 xsalsa20 4.37 4.43 4.47 tpy6 4.82 4.83 4.84 cryptmtv3 5.05 5.05 5.07 trivium 5.10 5.15 5.27 sosemanuk 6.55 6.57 6.60 tpy 6.60 6.61 6.64 lexv2 7.69 7.72 7.74 tpypy 10.52 10.55 10.56 aes128estream 14.02 14.05 14.10 hc128 15.14 15.16 15.27 dragon 17.77 17.78 17.82 aes256estream 37.69 37.74 37.82 hc256

Cycles/byte for 576 bytes quartile median quartile stream 1.60? 1.62? 1.83? chacha8 2.01 2.03 2.05 salsa208 2.24 2.26 2.26 chacha12 2.65 2.67 2.70 salsa2012 3.23 3.24 3.26 rabbit 3.53 3.56 3.58 chacha20 4.05 4.09 4.15 salsa20 4.50 4.52 4.53 snow20 4.66 4.68 4.70 cryptmtv3 5.02 5.05 5.11 nlsv2 5.30 5.35 5.38 xsalsa20 5.94 5.96 5.99 trivium 6.74 6.78 7.03 sosemanuk 7.37 7.42 7.48 lexv2 7.96 8.02 8.12 tpy6 10.90 10.92 10.95 aes128estream 14.51 14.55 14.62 tpy 15.76 15.78 15.87 tpypy 16.91 16.95 17.02 dragon 18.23 18.26 18.31 aes256estream 33.20 33.31 33.47 hc128 94.72 94.88 95.14 hc256

Cycles/byte for 64 bytes quartile median quartile stream 2.94 3.00 3.12 chacha8 3.56 3.62 3.69 salsa208 4.00 4.06 4.12 chacha12 4.62 4.69 4.75 salsa2012 6.12 6.19 6.25 chacha20 6.81 6.88 7.19 salsa20 8.25 8.31 8.38 cryptmtv3 10.19 10.19 10.31 rabbit 11.50 11.62 11.88 snow20 15.06 15.12 15.25 aes128estream 17.56 17.56 17.62 trivium 17.56 17.81 18.06 lexv2 17.94 18.12 18.31 xsalsa20 22.44 22.50 22.62 nlsv2 23.62 23.69 23.81 aes256estream 24.75 24.88 25.00 sosemanuk 40.00 40.50 41.56 dragon 53.06 53.38 54.50 tpy6 114.31 115.06 115.69 tpypy 117.44 117.62 118.19 tpy 280.81 281.81 283.12 hc128 824.19 826.25 827.44 hc256

Cycles/byte for 8 bytes quartile median quartile stream 25.50 26.00 26.50 chacha8 33.50 34.00 34.50 salsa208 34.00 34.50 35.00 chacha12 42.00 42.50 43.00 salsa2012 48.50 49.00 50.00 cryptmtv3 51.00 51.50 52.50 chacha20 59.00 59.50 61.00 salsa20 67.00 67.50 68.00 aes128estream 67.00 68.00 68.00 rabbit 84.50 85.50 86.00 aes256estream 91.00 92.00 97.00 lexv2 92.00 92.50 93.50 snow20 109.50 110.00 111.00 trivium 119.00 119.50 120.50 nlsv2 146.50 148.00 149.50 xsalsa20 194.50 195.50 197.00 sosemanuk 221.50 222.50 224.50 dragon 399.50 401.00 410.00 tpy6 905.50 907.00 911.00 tpypy 940.50 942.00 945.00 tpy 2251.00 2261.50 2269.00 hc128 6612.50 6622.50 6633.00 hc256