VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems

ECRYPT II

Measurements of stream ciphers

Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.

Which stream ciphers are measured?

• aes128ctr: The Advanced Encryption Standard (128-bit key) in a particular counter mode. Implementation contributed to eBASC by Wei Dai.
• aes192ctr: The Advanced Encryption Standard (192-bit key) in a particular counter mode. Implementation contributed to eBASC by Wei Dai.
• aes256ctr: The Advanced Encryption Standard (256-bit key) in a particular counter mode. Implementation contributed to eBASC by Wei Dai.
• aes128estream: The Advanced Encryption Standard (128-bit key) in another counter mode specified by eSTREAM. The aes128estream/e/gladman implementation is a wrapper by STVL around Brian Gladman's AES software. Sixteen additional implementations, optimized for various CPUs, were contributed to eSTREAM by Daniel J. Bernstein, Hongjun Wu, and Peter Schwabe.
• aes256estream: The Advanced Encryption Standard (256-bit key) in another counter mode specified by eSTREAM. The aes256estream/e/gladman implementation is a wrapper by STVL around Brian Gladman's AES software. Two additional implementations were contributed to eSTREAM by Hongjun Wu.
• chacha8: The ChaCha8 stream cipher (256-bit key) designed by Daniel J. Bernstein. Thirteen implementations were contributed to eSTREAM by the designer. SSSE3 implementation contributed to eBASH by Samuel Neves.
• chacha12: The ChaCha12 stream cipher (256-bit key) designed by Daniel J. Bernstein. Thirteen implementations were contributed to eSTREAM by the designer. SSSE3 implementation contributed to eBASH by Samuel Neves.
• chacha20: The ChaCha20 stream cipher (256-bit key) designed by Daniel J. Bernstein. Thirteen implementations were contributed to eSTREAM by the designer. SSSE3 implementation contributed to eBASH by Samuel Neves.
• cryptmtv3: The CryptMT v3 stream cipher (256-bit key) designed by Makoto Matsumoto, Matsuo Saito, Takuji Nishimura, and Mariko Hagita. The cryptmtv3/e/v3 implementation was contributed to eSTREAM by the designers.
• dragon: The Dragon stream cipher (256-bit key) designed by Kevin Chen, Matt Henricksen, William Millan, Joanne Fuller, Leonie Simpson, Ed Dawson, HoonJae Lee, and SangJae Moon. The dragon/e/submissions/dragon implementation was contributed to eSTREAM by the designers.
• hc128: The HC-128 stream cipher (128-bit key) designed by Hongjun Wu. Three implementations were contributed to eSTREAM by the designer. HC-128 is one of the software ciphers in the final eSTREAM portfolio.
• hc256: The HC-256 stream cipher (256-bit key) designed by Hongjun Wu. Two implementations were contributed to eSTREAM by the designer.
• lexv2: The LEX v2 stream cipher (128-bit key) designed by Alex Biryukov. The lexv2/e/v2/ref implementation was contributed to eSTREAM by the designer. Six additional implementations were contributed to eSTREAM by Peter Schwabe.
• nlsv2: The NLS v2 stream cipher (128-bit key) designed by Gregory Rose, Philip Hawkes, Michael Paddon, and Miriam Wiggers de Vries. Two implementations were contributed to eSTREAM by the designers.
• ocelot1: The OCELOT1 stream cipher (256-bit key) designed by George Anescu. Implementation contributed to eBASH by the designer.
• ocelot2: The OCELOT2 stream cipher (256-bit key) designed by George Anescu. Implementation contributed to eBASH by the designer.
• panama: The Panama stream cipher (256-bit key) designed by Joan Daemen and Craig Clapp. Implementation contributed to eBASC by Wei Dai.
• rabbit: The Rabbit stream cipher (128-bit key) designed by Martin Boesgaard, Mette Vesterager, Thomas Pedersen, Jesper Christensen, and Ove Scavenius. Ten implementations were contributed to eSTREAM by the designers. Rabbit is one of the software ciphers in the final eSTREAM portfolio.
• salsa208: The Salsa20/8 stream cipher (256-bit key) designed by Daniel J. Bernstein. Twenty-two implementations were contributed to eSTREAM by the designer.
• salsa2012: The Salsa20/12 stream cipher (256-bit key) designed by Daniel J. Bernstein. Twenty-two implementations were contributed to eSTREAM by the designer. Salsa20/12 is one of the software ciphers in the final eSTREAM portfolio.
• salsa20: The Salsa20/20 stream cipher (256-bit key) designed by Daniel J. Bernstein. Twenty-two implementations were contributed to eSTREAM by the designer.
• snow20: The SNOW 2.0 stream cipher (256-bit key) designed by Patrik Ekdahl and Thomas Johansson. The snow20/e/benchmarks/snow-2.0 implementation is a wrapper around the reference implementation from the designers.
• sosemanuk: The Sosemanuk stream cipher (256-bit key) designed by Come Berbain, Olivier Billet, Anne Canteaut, Nicolas Courtois, Henri Gilbert, Louis Goubin, Aline Gouget, Louis Granboulan, Cédric Lauradoux, Marine Minier, Thomas Pornin, and Hervé Sibert. The sosemanuk/e/submissions/sosemanuk implementation was contributed to eSTREAM by the designers. The sosemanuk/cryptopp implementation was contributed to eSTREAM by Wei Dai. Sosemanuk is one of the software ciphers in the final eSTREAM portfolio.
• tpy6: The TPy6 stream cipher (256-bit key) designed by Eli Biham and Jennifer Seberry. The tpy6/e/tpy6 implementation was contributed to eSTREAM by the designers.
• tpy: The TPy stream cipher (256-bit key) designed by Eli Biham and Jennifer Seberry. The tpy6/e/tpy6 implementation was contributed to eSTREAM by the designers.
• tpypy: The TPypy stream cipher (256-bit key) designed by Eli Biham and Jennifer Seberry. The tpy6/e/tpy6 implementation was contributed to eSTREAM by the designers.
• trivium: The Trivium stream cipher (80-bit key) designed by Christophe De Cannière and Bart Preneel. The trivium/e/submissions/trivium implementation was contributed to eSTREAM by the designers. Trivium is one of the hardware ciphers in the final eSTREAM portfolio, and the only one that also has a fast software implementation.
• xsalsa20: XSalsa20, a variant of Salsa20 with an extended nonce.

What do the graphs and tables mean?

Each computer also has a series of tables, six tables for each computer. The fourth table shows the speed, in cycles/byte, of encrypting 576-byte messages. Each row of the table lists

• the first quartile of many speed measurements,
• the median of many speed measurements,
• the third quartile of many speed measurements, and
• the name of the stream cipher.

The computer name is linked to additional information about the implementations and compilers selected for benchmarking.

amd64, 1595MHz, Intel Xeon E7310 (6fb), nalla, supercop-20100728

Cycles/byte for long messages quartile median quartile stream 1.95 2.00 2.01 salsa208 2.00 2.03 2.05 chacha8 1.95 2.04 2.13 panama 2.26 2.28 2.29 cryptmtv3 2.26 2.37 2.44 sosemanuk 2.34 2.44 2.47 hc128 2.55 2.62 2.70 tpy 2.64 2.65 2.67 salsa2012 2.70 2.76 2.80 chacha12 3.05 3.12 3.19 tpy6 3.56 3.57 3.59 trivium 3.97 4.01 4.06 xsalsa20 4.00 4.03 4.05 salsa20 3.95 4.03 4.11 nlsv2 4.09 4.13 4.16 chacha20 4.01 4.14 4.29 tpypy 3.58? 4.22? 4.31? hc256 4.29 4.30 4.32 snow20 5.11 5.44 5.47 rabbit 5.77 5.78 5.79 lexv2 10.53 10.55 10.56 aes128estream 11.96 12.04 12.14 aes128ctr 14.56 14.65 14.77 aes192ctr 16.76 16.88 17.00 dragon 17.23 17.26 17.30 aes256estream 17.39 17.50 17.59 aes256ctr

Cycles/byte for 4096 bytes quartile median quartile stream 2.00 2.02 2.02 salsa208 2.04 2.05 2.06 chacha8 2.68 2.68 2.69 salsa2012 2.76 2.76 2.78 chacha12 2.90 2.92 2.95 panama 3.06 3.11 3.14 sosemanuk 3.60 3.60 3.61 cryptmtv3 3.73 3.73 3.74 trivium 3.82 3.83 3.83 tpy6 4.04 4.05 4.06 salsa20 4.16 4.17 4.18 chacha20 4.20 4.21 4.22 xsalsa20 4.20 4.23 4.25 nlsv2 4.28 4.30 4.32 tpy 4.43 4.44 4.44 snow20 5.47 5.62 5.64 rabbit 6.00 6.00 6.00 lexv2 6.10 6.12 6.14 tpypy 7.04 7.06 7.07 hc128 10.64 10.65 10.65 aes128estream 12.61 12.63 12.65 aes128ctr 15.36 15.39 15.41 aes192ctr 17.02 17.12 17.14 hc256 17.23 17.26 17.30 dragon 17.37 17.38 17.38 aes256estream 18.05 18.07 18.09 aes256ctr

Cycles/byte for 1536 bytes quartile median quartile stream 2.06 2.07 2.08 salsa208 2.11 2.14 2.14 chacha8 2.71 2.73 2.75 salsa2012 2.80 2.81 2.83 chacha12 4.00 4.00 4.01 trivium 4.09 4.10 4.11 salsa20 4.18 4.19 4.21 chacha20 4.36 4.39 4.46 panama 4.38 4.42 4.45 sosemanuk 4.53 4.55 4.57 xsalsa20 4.64 4.64 4.65 nlsv2 4.66 4.67 4.67 snow20 5.00 5.01 5.02 cryptmtv3 5.13 5.14 5.17 tpy6 5.91 5.96 5.96 rabbit 6.33 6.33 6.34 lexv2 6.71 6.72 6.74 tpy 8.78 8.92 8.94 tpypy 10.75 10.78 10.79 aes128estream 13.55 13.60 13.68 aes128ctr 14.77 14.78 14.81 hc128 16.32 16.35 16.46 aes192ctr 17.57 17.59 17.61 aes256estream 17.78 17.81 17.89 dragon 19.02 19.10 19.19 aes256ctr 38.68 38.71 38.79 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.30 2.31 2.34 salsa208 2.33 2.35 2.36 chacha8 2.99 3.01 3.08 salsa2012 3.11 3.14 3.15 chacha12 4.50 4.51 4.52 salsa20 4.65 4.67 4.71 chacha20 4.73 4.74 4.74 trivium 5.33 5.38 5.40 snow20 5.46 5.46 5.46 cryptmtv3 5.66 5.68 5.71 xsalsa20 5.76 5.78 5.89 nlsv2 6.69 6.70 6.72 rabbit 7.21 7.22 7.25 lexv2 7.73 7.90 7.96 sosemanuk 8.01 8.02 8.21 tpy6 8.24 8.28 8.46 panama 11.08 11.11 11.15 aes128estream 13.79 13.90 13.97 tpy 16.29 16.38 16.54 aes128ctr 16.99 17.27 17.36 tpypy 18.14 18.15 18.16 aes256estream 18.99 19.14 19.39 aes192ctr 19.31 19.43 19.55 dragon 22.24 22.42 22.50 aes256ctr 35.61 35.62 35.66 hc128 96.89 97.02 98.17 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.78 4.88 4.88 salsa208 4.78 4.88 4.97 chacha8 5.91 5.91 6.00 salsa2012 6.19 6.19 6.28 chacha12 8.06 8.16 8.16 salsa20 8.72 8.81 8.81 chacha20 11.16 11.34 11.62 cryptmtv3 13.41 13.50 13.69 snow20 14.34 14.44 14.53 trivium 15.84 15.84 16.03 aes128estream 16.22 16.88 16.97 rabbit 17.25 17.25 17.53 lexv2 18.66 18.75 18.84 xsalsa20 22.22 22.78 24.00 nlsv2 25.59 25.69 25.88 aes256estream 38.81 39.09 39.56 dragon 48.56 48.84 49.59 sosemanuk 49.03 49.78 51.28 tpy6 50.06 51.38 52.50 aes128ctr 53.06 53.91 56.06 aes192ctr 57.00 57.84 58.59 aes256ctr 58.22 59.16 60.47 panama 99.75 100.69 101.53 tpy 115.31 118.22 120.00 tpypy 299.53 301.03 301.41 hc128 840.94 841.59 844.59 hc256

Cycles/byte for 8 bytes quartile median quartile stream 57.00 60.00 60.00 salsa208 57.75 60.00 60.75 chacha8 62.25 63.00 64.50 cryptmtv3 69.00 69.00 69.00 salsa2012 70.50 71.25 71.25 chacha12 82.50 83.25 83.25 aes128estream 84.00 87.75 87.75 salsa20 90.75 91.50 91.50 trivium 93.00 93.00 93.00 chacha20 105.00 105.75 105.75 lexv2 105.00 105.75 109.50 aes256estream 108.75 108.75 110.25 snow20 109.50 110.25 110.25 rabbit 126.00 126.75 131.25 nlsv2 173.25 173.25 174.75 xsalsa20 204.00 207.75 209.25 dragon 327.75 342.75 347.25 aes128ctr 343.50 354.75 362.25 aes192ctr 357.00 363.00 376.50 aes256ctr 375.00 375.75 375.75 tpy6 384.00 384.75 390.75 sosemanuk 463.50 467.25 473.25 panama 794.25 814.50 825.75 tpy 891.75 936.75 939.75 tpypy 2397.00 2399.25 2401.50 hc128 6726.75 6732.75 6753.75 hc256

amd64, 1833MHz, Intel Core 2 Duo E6300 (6f2), nmi0247, supercop-20100821

Cycles/byte for long messages quartile median quartile stream 1.86 1.89 1.91 salsa208 1.86 1.91 1.94 chacha8 2.24 2.31 2.37 cryptmtv3 2.19? 2.37? 2.58? hc128 2.53 2.55 2.62 chacha12 2.54 2.56 2.56 salsa2012 2.68 2.79 2.85 tpy 3.24 3.30 3.36 tpy6 3.59 3.60 3.62 trivium 3.78 3.86 3.99 hc256 3.90 3.93 3.95 salsa20 3.92 3.93 3.93 xsalsa20 3.95 3.97 4.00 chacha20 4.04 4.08 4.15 nlsv2 4.05 4.11 4.14 snow20 4.60 4.68 4.78 tpypy 5.34 5.51 5.65 sosemanuk 5.60 5.62 5.69 rabbit 6.76 6.77 6.78 lexv2 13.86 13.86 13.87 aes128estream 18.82 18.91 18.97 dragon 19.42 19.44 19.48 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 1.91 1.91 1.92 salsa208 1.93 1.94 1.96 chacha8 2.58 2.58 2.58 salsa2012 2.60 2.61 2.63 chacha12 3.77 3.80 3.83 cryptmtv3 3.80 3.80 3.81 trivium 3.95 3.95 3.96 salsa20 4.00 4.01 4.02 chacha20 4.10 4.10 4.10 xsalsa20 4.14 4.15 4.15 tpy6 4.27 4.29 4.30 snow20 4.37 4.37 4.40 nlsv2 4.44 4.48 4.50 tpy 5.83 5.84 5.87 rabbit 5.88 5.89 5.95 sosemanuk 6.50 6.54 6.57 tpypy 6.98 6.99 6.99 lexv2 7.30 7.30 7.40 hc128 13.91 13.91 13.91 aes128estream 17.02 17.03 17.06 hc256 19.22 19.24 19.27 dragon 19.51 19.52 19.53 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 1.96 1.97 1.98 salsa208 1.98 1.99 2.01 chacha8 2.64 2.64 2.64 salsa2012 2.66 2.68 2.70 chacha12 3.97 4.00 4.00 salsa20 4.07 4.09 4.10 chacha20 4.12 4.12 4.14 trivium 4.38 4.38 4.39 xsalsa20 4.55 4.59 4.61 snow20 4.95 4.95 4.97 nlsv2 5.26 5.26 5.30 cryptmtv3 5.44 5.44 5.51 tpy6 6.14 6.16 6.17 rabbit 6.70 6.70 6.84 sosemanuk 6.96 7.02 7.04 tpy 7.28 7.28 7.32 lexv2 9.18 9.20 9.25 tpypy 13.95 13.96 13.99 aes128estream 15.47 15.71 15.75 hc128 19.69 19.69 19.70 aes256estream 19.78 19.81 19.85 dragon 38.91 38.94 39.03 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.18 2.20 2.22 salsa208 2.23 2.25 2.29 chacha8 2.92 2.92 2.94 salsa2012 3.00 3.02 3.02 chacha12 4.39 4.39 4.39 salsa20 4.56 4.56 4.58 chacha20 4.93 4.95 4.97 trivium 5.33 5.40 5.48 snow20 5.42 5.42 5.44 xsalsa20 5.63 5.63 5.63 cryptmtv3 6.38 6.38 6.42 nlsv2 6.93 7.01 7.07 rabbit 8.15 8.15 8.19 lexv2 8.73 8.80 8.90 tpy6 8.75 8.80 8.90 sosemanuk 14.19 14.23 14.40 tpy 14.46 14.48 14.51 aes128estream 17.00 17.21 17.23 tpypy 20.24 20.26 20.28 aes256estream 21.35 21.43 21.50 dragon 37.20 37.93 38.02 hc128 97.28 97.51 97.82 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.64 4.64 4.81 salsa208 4.81 4.81 4.98 chacha8 5.67 5.84 5.84 salsa2012 6.02 6.19 6.19 chacha12 7.91 7.91 8.08 salsa20 8.94 8.94 8.94 chacha20 13.06 13.23 13.41 cryptmtv3 15.64 15.98 16.50 trivium 15.30 16.50 16.84 snow20 17.19 17.36 17.36 xsalsa20 17.53 17.53 17.70 rabbit 19.08 19.25 19.25 lexv2 20.80 20.97 21.14 aes128estream 26.64 27.16 27.50 nlsv2 27.67 27.84 27.84 aes256estream 30.25 30.25 30.77 sosemanuk 40.56 40.56 41.42 dragon 53.80 54.31 54.66 tpy6 102.27 102.61 102.95 tpy 111.72 111.89 112.23 tpypy 314.36 314.70 320.89 hc128 842.70 845.28 847.86 hc256

Cycles/byte for 8 bytes quartile median quartile stream 55.00 55.00 55.00 salsa208 60.50 60.50 60.50 chacha8 64.62 64.62 64.62 salsa2012 70.12 71.50 71.50 chacha12 78.38 78.38 79.75 cryptmtv3 82.50 82.50 82.50 salsa20 88.00 89.38 90.75 aes128estream 92.12 92.12 93.50 chacha20 100.38 101.75 104.50 trivium 107.25 107.25 108.62 lexv2 108.62 108.62 108.62 aes256estream 108.62 108.62 110.00 rabbit 121.00 121.00 122.38 snow20 154.00 158.12 159.50 xsalsa20 155.38 158.12 162.25 nlsv2 189.75 192.50 196.62 dragon 224.12 226.88 231.00 sosemanuk 382.25 383.62 390.50 tpy6 812.62 816.75 823.62 tpy 881.38 881.38 884.12 tpypy 2514.88 2521.75 2571.25 hc128 6756.75 6766.38 6780.12 hc256

amd64, 1867MHz, Intel Pentium Dual CPU T2390 (6fd), delllaptop, supercop-20090408

Cycles/byte for long messages quartile median quartile stream 1.97 1.98 1.98 salsa208 2.01 2.01 2.02 chacha8 1.99 2.02 2.11 panama 2.26 2.26 2.27 cryptmtv3 2.34 2.37 2.41 sosemanuk 2.39 2.44 2.48 hc128 2.47? 2.54? 2.75? tpy 2.62 2.63 2.63 salsa2012 2.73 2.75 2.77 chacha12 3.01 3.08 3.17 tpy6 3.62 3.63 3.64 trivium 3.69 3.73 3.77 hc256 3.93 3.94 3.94 nlsv2 3.96 3.96 3.97 salsa20 4.00 4.02 4.02 xsalsa20 4.02? 4.07? 4.61? tpypy 4.12 4.12 4.12 chacha20 4.27 4.29 4.31 snow20 5.30 5.32 5.32 rabbit 5.78 5.78 5.80 lexv2 10.50 10.57 10.58 aes128estream 11.90 12.00 12.13 aes128ctr 14.65 14.72 14.97 aes192ctr 16.62 16.67 16.71 dragon 17.19 17.20 17.25 aes256estream 17.45 17.52 17.61 aes256ctr

Cycles/byte for 4096 bytes quartile median quartile stream 2.01 2.01 2.01 salsa208 2.05 2.05 2.05 chacha8 2.67 2.68 2.68 salsa2012 2.77 2.77 2.78 chacha12 2.93 2.94 2.97 panama 3.11 3.12 3.13 sosemanuk 3.61 3.61 3.62 cryptmtv3 3.82 3.82 3.83 trivium 3.86 3.88 3.90 tpy6 4.02 4.02 4.02 salsa20 4.15 4.15 4.15 chacha20 4.19 4.19 4.19 xsalsa20 4.26 4.26 4.26 nlsv2 4.29 4.30 4.33 tpy 4.43 4.43 4.44 snow20 5.53 5.53 5.53 rabbit 6.00 6.00 6.01 lexv2 5.98 6.01 6.17 tpypy 7.08 7.09 7.11 hc128 10.64 10.65 10.65 aes128estream 12.65 12.68 12.69 aes128ctr 15.38 15.39 15.47 aes192ctr 15.72 15.72 15.74 hc256 17.01 17.02 17.03 dragon 17.34 17.34 17.35 aes256estream 18.04 18.06 18.09 aes256ctr

Cycles/byte for 1536 bytes quartile median quartile stream 2.05 2.05 2.06 salsa208 2.11 2.11 2.11 chacha8 2.75 2.75 2.76 salsa2012 2.82 2.82 2.83 chacha12 4.11 4.11 4.11 salsa20 4.15 4.15 4.16 trivium 4.19 4.19 4.19 chacha20 4.44 4.45 4.47 sosemanuk 4.46 4.48 4.61 panama 4.48 4.49 4.50 xsalsa20 4.68 4.68 4.69 snow20 4.88 4.88 4.89 nlsv2 5.05 5.05 5.06 cryptmtv3 5.15 5.18 5.23 tpy6 5.86 5.86 5.86 rabbit 6.33 6.33 6.35 lexv2 6.88 7.07 7.12 tpy 8.87 8.88 9.60 tpypy 10.77 10.78 10.79 aes128estream 13.55 13.65 13.87 aes128ctr 14.84 14.87 14.90 hc128 16.40 16.50 16.58 aes192ctr 17.55 17.56 17.59 aes256estream 17.56 17.62 17.63 dragon 18.99 19.06 19.20 aes256ctr 35.69 35.71 35.74 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.28 2.28 2.31 salsa208 2.33 2.33 2.36 chacha8 2.99 3.04 3.04 salsa2012 3.14 3.14 3.14 chacha12 4.50 4.50 4.50 salsa20 4.62 4.62 4.62 chacha20 4.96 4.96 4.98 trivium 5.35 5.35 5.37 snow20 5.37 5.37 5.40 cryptmtv3 5.57 5.57 5.61 xsalsa20 6.39 6.42 6.44 nlsv2 6.54 6.56 6.66 rabbit 7.24 7.24 7.24 lexv2 7.80 7.83 7.88 sosemanuk 8.31 8.39 8.58 tpy6 8.58 8.68 8.87 panama 11.13 11.16 11.18 aes128estream 14.05 14.07 14.24 tpy 16.48 16.55 16.80 aes128ctr 16.31 16.62 16.65 tpypy 18.11 18.13 18.13 aes256estream 19.03 19.06 19.08 dragon 19.10 19.20 19.35 aes192ctr 21.88 22.12 22.24 aes256ctr 35.53 35.58 35.73 hc128 88.96 89.01 89.06 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.81 4.81 5.03 chacha8 4.81 5.03 5.03 salsa208 5.91 6.12 6.12 salsa2012 6.12 6.34 6.34 chacha12 8.09 8.31 8.31 salsa20 8.97 8.97 9.19 chacha20 11.16 11.38 11.38 cryptmtv3 13.78 13.78 14.00 snow20 15.53 15.53 15.75 trivium 15.97 16.19 16.41 aes128estream 16.41 16.62 16.84 rabbit 17.50 17.50 18.16 lexv2 17.72 17.94 18.16 xsalsa20 23.19 23.41 23.62 nlsv2 25.81 25.81 26.03 aes256estream 36.09 36.31 36.97 dragon 47.47 47.91 48.56 sosemanuk 49.44 50.75 53.16 tpy6 52.06 52.72 53.16 aes128ctr 54.69 54.91 56.00 aes192ctr 55.12 56.22 57.53 aes256ctr 60.59 61.25 63.44 panama 102.81 105.22 106.31 tpy 112.44 115.50 115.72 tpypy 300.34 300.56 301.44 hc128 770.22 770.66 770.88 hc256

Cycles/byte for 8 bytes quartile median quartile stream 56.00 59.50 61.25 salsa208 61.25 61.25 61.25 chacha8 61.25 63.00 63.00 cryptmtv3 64.75 68.25 70.00 salsa2012 73.50 73.50 73.50 chacha12 84.00 84.00 85.75 aes128estream 84.00 87.50 87.50 salsa20 92.75 94.50 94.50 chacha20 99.75 99.75 99.75 trivium 103.25 105.00 105.00 rabbit 105.00 105.00 108.50 lexv2 106.75 106.75 108.50 aes256estream 110.25 110.25 112.00 snow20 122.50 126.00 126.00 nlsv2 166.25 168.00 169.75 xsalsa20 173.25 176.75 176.75 dragon 343.00 348.25 353.50 aes192ctr 343.00 351.75 365.75 aes256ctr 350.00 353.50 358.75 aes128ctr 365.75 374.50 383.25 tpy6 383.25 385.00 386.75 sosemanuk 474.25 483.00 502.25 panama 806.75 815.50 819.00 tpy 896.00 897.75 911.75 tpypy 2404.50 2408.00 2416.75 hc128 6160.00 6160.00 6165.25 hc256

amd64, 1995MHz, Intel Xeon 5130 (6f6), motyka, supercop-20100712

Cycles/byte for long messages quartile median quartile stream 1.97 2.00 2.02 salsa208 2.01 2.02 2.03 chacha8 2.34 2.35 2.36 cryptmtv3 2.27? 2.45? 2.59? hc128 2.52 2.56 2.59 tpy 2.61 2.65 2.69 salsa2012 2.70 2.74 2.76 chacha12 3.66 3.67 3.68 trivium 3.66 3.69 3.76 snow20 3.61 3.71 3.79 hc256 3.66? 3.91? 4.17? tpy6 3.98 3.98 4.03 salsa20 4.00 4.02 4.05 xsalsa20 4.00 4.07 4.18 nlsv2 4.08 4.11 4.17 chacha20 4.47 4.65 4.85 sosemanuk 4.73 4.76 4.85 tpypy 5.31 5.40 5.42 rabbit 5.79 5.80 5.82 lexv2 10.51 10.52 10.54 aes128estream 14.97 15.00 15.04 dragon 17.32 17.33 17.35 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.01 2.02 2.02 salsa208 2.06 2.06 2.06 chacha8 2.67 2.69 2.70 salsa2012 2.75 2.77 2.77 chacha12 3.72 3.72 3.73 cryptmtv3 3.84 3.84 3.84 trivium 3.90 3.90 3.93 snow20 4.02 4.03 4.04 salsa20 4.15 4.16 4.17 chacha20 4.19 4.20 4.21 xsalsa20 4.25 4.28 4.33 nlsv2 4.21 4.31 4.41 tpy6 4.40 4.42 4.42 tpy 4.98 5.06 5.12 sosemanuk 5.55 5.56 5.56 rabbit 6.00 6.01 6.01 lexv2 6.75 6.76 6.83 hc128 6.78 6.79 6.83 tpypy 10.64 10.64 10.65 aes128estream 15.16 15.17 15.19 hc256 15.35 15.35 15.36 dragon 17.46 17.46 17.46 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.04 2.05 2.07 salsa208 2.12 2.12 2.12 chacha8 2.72 2.75 2.78 salsa2012 2.80 2.82 2.84 chacha12 4.09 4.10 4.10 salsa20 4.12 4.12 4.12 trivium 4.18 4.21 4.23 chacha20 4.24 4.25 4.26 snow20 4.48 4.50 4.51 xsalsa20 4.77 4.79 4.80 nlsv2 5.04 5.04 5.04 cryptmtv3 5.64 5.65 5.66 sosemanuk 5.78 5.83 5.84 rabbit 5.72 5.93 6.01 tpy6 6.33 6.33 6.34 lexv2 7.16 7.19 7.21 tpy 9.00 9.03 9.10 tpypy 10.77 10.77 10.78 aes128estream 13.94 13.98 14.16 hc128 15.88 15.91 15.93 dragon 17.61 17.68 17.69 aes256estream 34.22 34.27 34.29 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.26 2.27 2.35 salsa208 2.33 2.35 2.38 chacha8 3.02 3.04 3.07 salsa2012 3.09 3.10 3.15 chacha12 4.49 4.56 4.58 salsa20 4.62 4.69 4.74 chacha20 4.83 4.83 4.83 trivium 5.01 5.01 5.04 snow20 5.51 5.51 5.54 cryptmtv3 5.55 5.56 5.57 xsalsa20 5.96 5.98 6.04 nlsv2 6.57 6.62 6.76 rabbit 7.23 7.23 7.24 lexv2 7.25 7.35 7.39 sosemanuk 8.36 8.44 8.52 tpy6 11.12 11.12 11.14 aes128estream 15.02 15.20 15.26 tpy 16.88 16.90 16.94 tpypy 17.34 17.38 17.49 dragon 18.28 18.31 18.34 aes256estream 33.18 33.19 33.68 hc128 85.26 85.30 85.44 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.78 4.78 4.78 salsa208 4.78 4.88 4.88 chacha8 5.81 5.91 6.00 salsa2012 6.19 6.28 6.38 chacha12 8.16 8.16 8.25 salsa20 8.81 8.81 8.81 chacha20 11.53 11.53 11.62 cryptmtv3 14.06 14.06 14.25 trivium 15.28 15.56 16.03 snow20 15.94 15.94 16.03 aes128estream 16.97 17.06 17.25 rabbit 17.34 17.34 17.34 lexv2 17.72 17.72 17.81 xsalsa20 24.47 24.66 24.75 nlsv2 25.41 25.50 25.59 sosemanuk 26.44 26.62 26.62 aes256estream 35.91 36.00 36.09 dragon 51.00 51.38 53.44 tpy6 109.12 109.41 110.62 tpy 116.62 117.09 117.38 tpypy 279.47 279.47 282.84 hc128 736.50 737.06 738.47 hc256

Cycles/byte for 8 bytes quartile median quartile stream 60.00 60.00 60.00 salsa208 60.75 60.75 61.50 chacha8 65.25 67.50 69.00 salsa2012 69.00 69.00 69.75 cryptmtv3 71.25 71.25 71.25 chacha12 83.25 84.00 84.00 aes128estream 84.00 86.25 88.50 salsa20 87.00 87.00 87.75 trivium 92.25 93.00 93.00 chacha20 102.75 102.75 103.50 rabbit 103.50 104.25 105.75 lexv2 110.25 110.25 111.00 aes256estream 126.00 126.00 129.75 snow20 129.00 129.75 131.25 nlsv2 164.25 165.75 167.25 xsalsa20 180.00 180.00 181.50 dragon 195.75 195.75 196.50 sosemanuk 387.75 391.50 414.75 tpy6 870.75 877.50 878.25 tpy 907.50 908.25 913.50 tpypy 2233.50 2236.50 2259.75 hc128 5895.00 5906.25 5911.50 hc256

amd64, 2000MHz, AMD Athlon 64 X2 (40fb2), mace, supercop-20100821

Cycles/byte for long messages quartile median quartile stream 3.01 3.10 3.31 hc128 3.27 3.28 3.29 chacha8 3.44 3.45 3.45 salsa208 3.60 3.68 3.71 panama 3.91 3.92 3.92 trivium 3.92 3.93 3.94 nlsv2 4.05 4.07 4.09 snow20 4.24 4.30 4.49 hc256 4.41 4.41 4.42 cryptmtv3 4.55 4.56 4.66 tpy 4.37 4.58 4.66 tpy6 4.59 4.59 4.60 chacha12 4.82 4.83 4.84 rabbit 4.83 4.83 4.85 salsa2012 4.60? 5.19? 5.38? sosemanuk 5.23 5.23 5.23 lexv2 7.21 7.22 7.23 chacha20 7.24 7.38 7.51 tpypy 7.62 7.63 7.63 salsa20 7.62 7.63 7.64 xsalsa20 10.42 10.43 10.44 aes128estream 10.64 10.69 10.71 aes128ctr 12.67 12.74 12.81 aes192ctr 15.02 15.10 15.20 aes256ctr 16.46 16.47 16.47 dragon 18.59 18.75 18.92 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 3.30 3.30 3.31 chacha8 3.48 3.48 3.48 salsa208 4.09 4.09 4.09 trivium 4.23 4.23 4.24 nlsv2 4.25 4.25 4.26 snow20 4.62 4.62 4.62 chacha12 4.87 4.87 4.87 salsa2012 4.97 4.97 4.98 rabbit 4.95 4.98 4.98 panama 5.08 5.27 5.36 sosemanuk 5.42 5.42 5.42 lexv2 5.55 5.55 5.56 cryptmtv3 5.50 5.60 5.60 tpy6 6.52 6.52 6.56 tpy 7.24 7.24 7.24 chacha20 7.65 7.65 7.75 hc128 7.65 7.66 7.66 salsa20 7.81 7.81 7.81 xsalsa20 9.38 9.39 9.44 tpypy 10.47 10.47 10.47 aes128estream 11.24 11.26 11.26 aes128ctr 13.44 13.47 13.47 aes192ctr 15.65 15.67 15.69 aes256ctr 16.86 16.86 16.87 dragon 17.43 17.43 17.52 hc256 18.86 18.91 18.97 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 3.34 3.34 3.35 chacha8 3.53 3.53 3.53 salsa208 4.37 4.37 4.38 trivium 4.51 4.52 4.53 snow20 4.65 4.65 4.66 chacha12 4.92 4.92 4.92 salsa2012 4.99 5.00 5.01 nlsv2 5.20 5.21 5.22 rabbit 5.73 5.73 5.73 lexv2 5.64 5.85 5.95 sosemanuk 7.04 7.04 7.04 cryptmtv3 7.13 7.14 7.17 panama 7.27 7.28 7.28 chacha20 7.25 7.31 7.33 tpy6 7.70 7.70 7.71 salsa20 8.10 8.10 8.13 xsalsa20 9.74 9.78 9.79 tpy 10.60 10.61 10.62 aes128estream 12.21 12.28 12.29 aes128ctr 12.70 12.71 12.89 tpypy 14.43 14.48 14.51 aes192ctr 15.20 15.21 15.29 hc128 16.61 16.67 16.73 aes256ctr 17.51 17.52 17.52 dragon 19.14 19.14 19.23 aes256estream 39.26 39.26 39.30 hc256

Cycles/byte for 576 bytes quartile median quartile stream 3.43 3.43 3.44 chacha8 3.62 3.65 3.65 salsa208 4.74 4.74 4.74 chacha12 5.01 5.04 5.05 salsa2012 5.13 5.13 5.13 trivium 5.25 5.26 5.28 snow20 5.81 5.83 5.86 rabbit 6.52 6.52 6.52 lexv2 6.59 6.62 6.67 nlsv2 7.15 7.16 7.72 sosemanuk 7.37 7.37 7.37 chacha20 7.81 7.81 7.82 salsa20 8.07 8.10 8.13 cryptmtv3 8.90 8.90 8.91 xsalsa20 10.88 10.94 10.94 aes128estream 11.88 11.91 11.93 tpy6 12.95 12.98 13.02 panama 15.01 15.11 15.13 aes128ctr 17.16 17.25 17.42 aes192ctr 18.19 18.48 18.50 tpy 19.23 19.23 19.24 dragon 19.89 19.94 20.03 aes256estream 20.04 20.15 20.33 aes256ctr 21.64 21.66 22.17 tpypy 35.29 35.29 35.37 hc128 97.41 97.49 97.50 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.36 4.36 4.38 chacha8 4.67 4.67 4.69 salsa208 5.67 5.69 5.69 chacha12 6.08 6.08 6.08 salsa2012 8.30 8.31 8.31 chacha20 8.84 8.84 8.86 salsa20 13.45 13.47 13.78 rabbit 14.42 14.52 14.88 cryptmtv3 14.59 14.61 14.89 trivium 14.62 14.66 14.67 aes128estream 14.72 14.80 14.80 snow20 15.94 15.94 15.94 lexv2 18.83 18.83 18.94 xsalsa20 22.53 22.53 23.66 sosemanuk 29.09 29.33 30.16 aes256estream 33.94 34.47 34.88 nlsv2 40.84 40.86 41.41 dragon 49.33 51.20 51.78 aes128ctr 52.34 53.23 54.34 aes192ctr 55.52 56.69 58.55 aes256ctr 70.11 70.59 70.89 tpy6 84.92 86.16 86.97 panama 125.83 126.44 129.55 tpy 135.67 135.69 140.78 tpypy 292.86 292.94 292.97 hc128 841.97 843.61 843.66 hc256

Cycles/byte for 8 bytes quartile median quartile stream 40.88 40.88 40.88 chacha8 43.25 43.50 43.50 salsa208 51.38 51.38 51.38 chacha12 54.38 54.38 54.38 salsa2012 56.25 56.50 56.88 aes128estream 70.62 70.62 72.75 cryptmtv3 72.38 72.38 73.00 chacha20 76.62 76.75 76.88 salsa20 80.62 82.38 87.00 rabbit 87.50 87.62 87.62 trivium 92.38 92.38 92.38 lexv2 116.00 116.12 117.38 snow20 121.12 122.75 130.75 aes256estream 156.62 156.62 157.12 xsalsa20 159.50 164.12 164.38 nlsv2 178.50 178.50 178.75 sosemanuk 210.00 210.00 212.50 dragon 332.62 359.75 362.25 aes128ctr 360.00 364.12 383.25 aes192ctr 373.25 380.50 388.38 aes256ctr 529.75 533.00 535.50 tpy6 678.25 685.00 688.12 panama 975.50 976.50 977.50 tpy 1033.38 1047.88 1067.88 tpypy 2344.25 2344.38 2365.88 hc128 6727.75 6743.50 6812.12 hc256

amd64, 2000MHz, Intel Core 2 Duo T7300 (6fb), trident, supercop-20100821

Cycles/byte for long messages quartile median quartile stream 1.83 1.86 1.89 salsa208 1.88 1.88 1.88 chacha8 2.17 2.25 2.35 cryptmtv3 2.30 2.39 2.47 hc128 2.54 2.56 2.59 salsa2012 2.59 2.62 2.66 chacha12 2.71 2.82 2.90 tpy 3.26 3.31 3.38 tpy6 3.61 3.62 3.62 trivium 3.75 3.89 3.99 hc256 3.88 3.91 3.95 salsa20 3.89 3.91 3.93 xsalsa20 3.95 3.97 4.04 chacha20 4.10 4.12 4.13 snow20 4.14 4.15 4.17 nlsv2 4.72 4.80 4.90 tpypy 5.51 5.52 5.64 sosemanuk 5.68 5.75 5.76 rabbit 6.79 6.79 6.82 lexv2 13.73 13.75 13.77 aes128estream 18.68 18.82 18.92 dragon 19.33 19.37 19.40 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 1.90 1.90 1.91 salsa208 1.92 1.92 1.92 chacha8 2.58 2.59 2.60 salsa2012 2.62 2.64 2.65 chacha12 3.76 3.77 3.82 cryptmtv3 3.80 3.80 3.80 trivium 3.94 3.95 3.96 salsa20 3.99 4.00 4.03 chacha20 4.07 4.08 4.09 xsalsa20 4.14 4.15 4.17 tpy6 4.27 4.27 4.28 snow20 4.39 4.39 4.40 nlsv2 4.46 4.52 4.55 tpy 5.89 5.89 5.89 sosemanuk 5.90 5.92 5.92 rabbit 6.52 6.56 6.57 tpypy 7.00 7.00 7.00 lexv2 7.28 7.31 7.32 hc128 13.85 13.86 13.86 aes128estream 17.01 17.04 17.07 hc256 19.15 19.18 19.19 dragon 19.49 19.49 19.50 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 1.96 1.97 1.99 salsa208 1.98 1.99 2.01 chacha8 2.64 2.64 2.66 salsa2012 2.68 2.68 2.68 chacha12 3.99 4.00 4.00 salsa20 4.06 4.06 4.09 chacha20 4.11 4.12 4.12 trivium 4.36 4.37 4.37 xsalsa20 4.54 4.55 4.56 snow20 4.93 4.93 4.94 nlsv2 5.24 5.25 5.26 cryptmtv3 5.44 5.44 5.46 tpy6 6.18 6.19 6.21 rabbit 6.58 6.58 6.59 sosemanuk 6.99 7.01 7.03 tpy 7.31 7.33 7.34 lexv2 9.15 9.19 9.23 tpypy 13.96 13.96 13.96 aes128estream 15.46 15.53 15.58 hc128 19.67 19.69 19.71 aes256estream 19.73 19.76 19.85 dragon 38.89 38.96 39.05 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.22 2.22 2.26 salsa208 2.22 2.24 2.26 chacha8 2.95 2.95 2.97 salsa2012 3.02 3.04 3.06 chacha12 4.41 4.43 4.44 salsa20 4.55 4.57 4.58 chacha20 4.93 4.93 4.95 trivium 5.26 5.30 5.33 snow20 5.40 5.40 5.42 xsalsa20 5.59 5.61 5.62 cryptmtv3 6.15 6.16 6.18 nlsv2 7.05 7.14 7.14 rabbit 8.16 8.18 8.19 lexv2 8.47 8.58 8.61 sosemanuk 8.77 8.89 8.99 tpy6 14.43 14.48 14.50 tpy 14.48 14.50 14.51 aes128estream 16.89 16.93 17.05 tpypy 20.26 20.30 20.31 aes256estream 21.25 21.30 21.44 dragon 36.84 37.27 37.47 hc128 97.26 97.55 97.85 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.84 4.84 4.84 chacha8 4.84 4.84 5.00 salsa208 5.94 5.94 6.09 salsa2012 6.25 6.25 6.25 chacha12 8.12 8.12 8.28 salsa20 8.91 9.06 9.06 chacha20 12.97 12.97 12.97 cryptmtv3 14.84 15.00 15.16 snow20 15.62 16.09 16.25 trivium 17.34 17.34 17.50 xsalsa20 17.50 17.66 17.81 rabbit 19.22 19.22 19.38 lexv2 20.94 20.94 21.09 aes128estream 26.09 26.41 27.34 nlsv2 27.81 27.81 27.97 aes256estream 29.69 29.84 30.00 sosemanuk 42.03 42.19 42.34 dragon 53.75 54.06 54.22 tpy6 101.25 101.41 102.50 tpy 111.41 111.56 111.88 tpypy 315.16 318.44 319.38 hc128 843.44 845.47 847.97 hc256

Cycles/byte for 8 bytes quartile median quartile stream 56.25 56.25 57.50 salsa208 60.00 60.00 61.25 chacha8 66.25 66.25 66.25 salsa2012 71.25 71.25 72.50 chacha12 76.25 76.25 77.50 cryptmtv3 83.75 86.25 87.50 salsa20 88.75 90.00 90.00 aes128estream 92.50 93.75 93.75 chacha20 98.75 100.00 103.75 trivium 103.75 103.75 105.00 lexv2 108.75 110.00 110.00 rabbit 108.75 110.00 111.25 aes256estream 117.50 118.75 118.75 snow20 136.25 137.50 142.50 nlsv2 161.25 162.50 163.75 xsalsa20 195.00 196.25 197.50 dragon 220.00 220.00 222.50 sosemanuk 380.00 386.25 398.75 tpy6 811.25 822.50 831.25 tpy 877.50 878.75 880.00 tpypy 2520.00 2543.75 2556.25 hc128 6750.00 6765.00 6781.25 hc256

amd64, 2137MHz, Intel Core 2 Duo (6f6), katana, supercop-20100821

Cycles/byte for long messages quartile median quartile stream 1.95 1.98 2.00 salsa208 2.00 2.02 2.04 chacha8 1.93 2.02 2.10 panama 2.32 2.34 2.34 cryptmtv3 2.29 2.36 2.39 sosemanuk 2.43 2.47 2.50 hc128 2.49 2.53 2.55 tpy 2.65 2.66 2.70 salsa2012 2.72 2.73 2.75 chacha12 2.73 2.77 2.86 tpy6 3.25 3.27 3.29 snow20 3.69 3.72 3.78 hc256 3.80 3.82 3.90 trivium 3.85 3.95 4.04 nlsv2 3.98 4.01 4.07 xsalsa20 4.01 4.01 4.02 salsa20 4.02 4.05 4.05 chacha20 4.41 4.43 4.54 tpypy 4.44 4.46 4.48 rabbit 5.78 5.79 5.79 lexv2 10.52 10.52 10.56 aes128estream 12.07 12.12 12.15 aes128ctr 13.64 13.67 13.72 dragon 14.58 14.64 14.70 aes192ctr 17.32 17.36 17.43 aes256estream 17.48 17.54 17.57 aes256ctr

Cycles/byte for 4096 bytes quartile median quartile stream 2.00 2.01 2.02 salsa208 2.04 2.05 2.06 chacha8 2.68 2.69 2.70 salsa2012 2.75 2.76 2.76 chacha12 2.95 2.98 3.01 panama 3.15 3.17 3.17 sosemanuk 3.39 3.40 3.41 snow20 3.60 3.60 3.60 cryptmtv3 3.60 3.61 3.64 tpy6 3.97 3.98 4.02 trivium 4.04 4.04 4.04 salsa20 4.07 4.08 4.08 tpy 4.07 4.08 4.08 chacha20 4.18 4.18 4.21 xsalsa20 4.19 4.20 4.23 nlsv2 4.60 4.60 4.61 rabbit 5.99 5.99 6.00 lexv2 6.01 6.01 6.05 tpypy 6.68 6.70 6.71 hc128 10.64 10.65 10.65 aes128estream 12.59 12.60 12.61 aes128ctr 14.01 14.02 14.04 dragon 14.45 14.46 14.47 hc256 15.27 15.29 15.30 aes192ctr 17.46 17.47 17.49 aes256estream 18.00 18.01 18.02 aes256ctr

Cycles/byte for 1536 bytes quartile median quartile stream 2.06 2.06 2.07 salsa208 2.10 2.11 2.12 chacha8 2.73 2.74 2.74 salsa2012 2.80 2.81 2.81 chacha12 3.61 3.61 3.62 snow20 4.09 4.10 4.11 salsa20 4.12 4.12 4.13 chacha20 4.28 4.28 4.28 trivium 4.46 4.47 4.53 xsalsa20 4.52 4.59 4.60 sosemanuk 4.55 4.59 4.67 panama 4.67 4.67 4.69 cryptmtv3 4.76 4.77 4.84 nlsv2 4.84 4.85 4.86 rabbit 4.89 4.90 4.91 tpy6 6.32 6.33 6.34 lexv2 6.48 6.49 6.53 tpy 8.42 8.45 8.47 tpypy 10.76 10.77 10.78 aes128estream 13.41 13.43 13.47 aes128ctr 13.75 13.76 13.77 hc128 14.60 14.60 14.62 dragon 16.13 16.14 16.17 aes192ctr 17.64 17.65 17.68 aes256estream 18.86 18.87 18.88 aes256ctr 32.31 32.32 32.34 hc256

Cycles/byte for 576 bytes quartile median quartile stream 2.29 2.31 2.33 salsa208 2.33 2.35 2.36 chacha8 3.00 3.00 3.03 salsa2012 3.06 3.07 3.08 chacha12 4.21 4.22 4.22 snow20 4.50 4.51 4.54 salsa20 4.57 4.57 4.57 chacha20 5.04 5.04 5.08 trivium 5.24 5.24 5.25 cryptmtv3 5.47 5.50 5.51 rabbit 5.49 5.50 5.53 xsalsa20 6.01 6.03 6.08 nlsv2 7.22 7.22 7.24 lexv2 7.83 7.96 8.21 tpy6 8.14 8.21 8.32 sosemanuk 8.71 8.99 9.07 panama 11.14 11.14 11.15 aes128estream 13.51 13.53 13.79 tpy 15.64 15.68 15.74 tpypy 15.79 15.83 15.88 aes128ctr 16.07 16.12 16.19 dragon 18.22 18.24 18.25 aes256estream 18.51 18.54 18.61 aes192ctr 21.85 21.89 21.92 aes256ctr 32.60 32.62 32.62 hc128 79.90 79.93 79.96 hc256

Cycles/byte for 64 bytes quartile median quartile stream 4.75 4.88 4.88 salsa208 4.88 4.88 4.88 chacha8 5.75 5.88 5.88 salsa2012 6.12 6.12 6.12 chacha12 8.12 8.12 8.25 salsa20 8.75 8.75 8.88 chacha20 11.62 11.62 11.62 cryptmtv3 11.75 11.75 11.75 snow20 13.88 13.88 14.00 rabbit 15.12 15.12 15.12 trivium 15.75 15.75 15.75 aes128estream 17.12 17.12 17.25 xsalsa20 17.25 17.25 17.25 lexv2 25.38 25.50 25.50 aes256estream 25.88 25.88 26.00 nlsv2 35.25 35.50 35.50 dragon 46.00 46.50 46.62 aes128ctr 48.62 48.75 49.38 tpy6 47.88 48.88 49.12 sosemanuk 48.88 49.75 50.38 aes192ctr 53.12 53.12 53.25 aes256ctr 60.88 62.38 63.00 panama 99.62 100.12 100.50 tpy 107.50 107.75 108.25 tpypy 274.00 274.00 275.00 hc128 689.25 689.88 690.25 hc256

Cycles/byte for 8 bytes quartile median quartile stream 57.00 60.00 61.00 salsa208 60.00 60.00 60.00 chacha8 68.00 68.00 68.00 cryptmtv3 68.00 69.00 69.00 salsa2012 71.00 71.00 72.00 chacha12 81.00 81.00 82.00 aes128estream 86.00 86.00 86.00 salsa20 88.00 89.00 89.00 rabbit 91.00 91.00 92.00 snow20 92.00 92.00 93.00 chacha20 94.00 94.00 94.00 trivium 101.00 102.00 103.00 aes256estream 104.00 104.00 104.00 lexv2 136.00 138.00 139.00 nlsv2 160.00 161.00 162.00 xsalsa20 189.00 190.00 190.00 dragon 301.00 304.00 306.00 aes128ctr 307.00 309.00 320.00 aes192ctr 323.00 328.00 328.00 aes256ctr 368.00 369.00 370.00 tpy6 382.00 387.00 393.00 sosemanuk 490.00 499.00 507.00 panama 822.00 823.00 826.00 tpy 881.00 882.00 884.00 tpypy 2190.00 2191.00 2191.00 hc128 5514.00 5521.00 5524.00 hc256

amd64, 2200MHz, AMD Phenom 9550 (100f23), ranger, supercop-20100821

Cycles/byte for long messages quartile median quartile stream 2.60 2.61 2.62 salsa208 2.65 2.67 2.68 sosemanuk 2.90 2.92 2.94 chacha8 2.88 2.94 3.04 hc128 3.02 3.03 3.04 panama 3.54 3.55 3.61 cryptmtv3 3.55 3.57 3.58 salsa2012 3.60 3.60 3.62 tpy6 3.74 3.75 3.78 tpy 3.91 3.92 3.92 trivium 4.01 4.03 4.05 chacha12 4.06 4.08 4.11 nlsv2 4.14 4.17 4.21 hc256 4.08 4.23 4.25 snow20 4.80 4.81 4.85 rabbit 5.11 5.12 5.15 lexv2 5.48 5.49 5.50 xsalsa20 5.49 5.50 5.52 salsa20 6.00 6.06 6.08 tpypy 6.26 6.27 6.28 chacha20 10.39 10.43 10.46 aes128ctr 10.68 10.69 10.70 aes128estream 12.40 12.44 12.44 aes192ctr 14.70 14.72 14.74 aes256ctr 15.01 15.07 15.21 dragon 18.56 18.57 18.64 aes256estream

Cycles/byte for 4096 bytes quartile median quartile stream 2.65 2.65 2.66 salsa208 2.95 2.95 2.96 chacha8 3.41 3.41 3.42 sosemanuk 3.61 3.61 3.62 salsa2012 4.06 4.07 4.08 chacha12 4.10 4.10 4.10 trivium 4.11 4.12 4.12 panama 4.34 4.34 4.35 nlsv2 4.30 4.36 4.36 snow20 4.53 4.53 4.54 tpy6 4.91 4.91 4.94 cryptmtv3 4.94 4.95 4.96 rabbit 5.33 5.33 5.35 lexv2 5.54 5.54 5.54 salsa20 5.55 5.55 5.56 tpy 5.69 5.69 5.69 xsalsa20 6.31 6.31 6.31 chacha20 7.59 7.60 7.64 hc128 7.93 7.95 7.96 tpypy 10.78 10.78 10.79 aes128estream 10.87 10.88 10.89 aes128ctr 13.07 13.08 13.08 aes192ctr 15.24 15.25 15.25 aes256ctr 15.45 15.45 15.51 dragon 16.66 16.67 16.69 hc256 18.78 18.78 18.80 aes256estream

Cycles/byte for 1536 bytes quartile median quartile stream 2.71 2.71 2.72 salsa208 3.01 3.02 3.02 chacha8 3.67 3.68 3.69 salsa2012 4.13 4.14 4.14 chacha12 4.39 4.39 4.40 trivium 4.59 4.64 4.64 snow20 4.71 4.72 4.73 sosemanuk 4.98 4.98 4.99 nlsv2 5.17 5.19 5.20 rabbit 5.60 5.61 5.61 salsa20 5.64 5.64 5.64 lexv2 5.93 5.94 5.95 panama 6.00 6.01 6.02 xsalsa20 6.05 6.06 6.06 tpy6 6.37 6.38 6.38 chacha20 6.52 6.53 6.53 cryptmtv3 8.54 8.54 8.55 tpy 10.89 10.89 10.89 aes128estream 11.07 11.10 11.11 tpypy 11.68 11.69 11.69 aes128ctr 13.98 13.99 14.01 aes192ctr 15.36 15.38 15.41 hc128 16.04 16.04 16.12 dragon 16.13 16.15 16.16 aes256ctr 19.12 19.14 19.14 aes256estream 37.51 37.53 37.58 hc256

Cycles/byte for 576 bytes quartile median quartile stream 3.13 3.16 3.16 salsa208 3.45 3.45 3.46 chacha8 4.25 4.26 4.26 salsa2012 4.76 4.76 4.76 chacha12 5.19 5.19 5.21 trivium 5.35 5.35 5.38 snow20 5.83 5.84 5.85 rabbit 6.37 6.42 6.45 nlsv2 6.44 6.45 6.46 lexv2 6.47 6.49 6.50 salsa20 7.26 7.31 7.32 cryptmtv3 7.35 7.36 7.37 chacha20 7.54 7.57 7.61 xsalsa20 8.16 8.19 8.21 sosemanuk 10.08 10.12 10.14 tpy6 10.80 10.81 10.83 panama 11.23 11.23 11.24 aes128estream 14.14 14.17 14.21 aes128ctr 16.53 16.55 17.03 tpy 16.59 16.62 16.66 aes192ctr 17.62 17.68 17.73 dragon 19.10 19.10 19.16 aes256ctr 19.44 19.56 19.58 tpypy 19.96 19.99 20.01 aes256estream 35.98 36.11 36.13 hc128 93.05 93.11 93.12 hc256

Cycles/byte for 64 bytes quartile median quartile stream 7.02? 13.72? 13.73? salsa208 13.67? 14.22? 26.84? cryptmtv3 14.75 14.75 14.77 chacha8 15.77? 15.78? 31.25? chacha20 9.28? 18.22? 18.27? salsa2012 20.25 20.25 20.28 chacha12 22.95 23.00 23.11 xsalsa20 27.23 27.25 27.39 salsa20 14.70? 27.97? 28.05? rabbit 15.12? 29.48? 29.67? snow20 15.12? 30.00? 30.12? trivium 15.89? 30.94? 31.19? aes128estream 32.16 32.27 32.33 lexv2 44.80 44.92 45.44 aes128ctr 46.05 46.45 47.58 sosemanuk 49.31 49.64 49.86 aes192ctr 50.11 50.41 50.59 aes256ctr 59.77 60.50 61.56 aes256estream 60.50 60.75 61.20 nlsv2 72.45 72.61 72.75 panama 38.30? 75.62? 75.62? dragon 123.75 123.75 123.75 tpy6 237.25 237.47 237.59 tpy 126.50? 253.66? 253.72? tpypy 300.94 301.12 301.17 hc128 803.94 804.38 804.42 hc256

Cycles/byte for 8 bytes quartile median quartile stream 58.88? 59.12? 114.88? salsa208 70.88? 71.88? 138.00? cryptmtv3 122.75 122.88 124.12 chacha8 70.25? 128.12? 128.50? aes128estream 128.62? 128.75? 255.00? chacha20 77.00? 151.50? 152.00? salsa2012 166.75 167.00 167.50 chacha12 88.00? 170.50? 173.75? rabbit 94.12? 184.75? 185.75? trivium 186.88 187.00 187.88 xsalsa20 187.00 187.00 188.00 lexv2 223.38 223.50 223.50 salsa20 122.25? 237.00? 238.50? snow20 246.75 256.25 257.25 aes256estream 291.75 293.00 297.00 nlsv2 294.00 297.38 300.88 aes128ctr 318.12 319.00 319.25 aes256ctr 320.12? 328.38? 626.88? aes192ctr 365.38 366.12 367.38 sosemanuk 198.00? 392.50? 394.25? dragon 571.88 573.38 576.38 panama 935.00 935.00 935.00 tpy6 1848.00 1850.00 1851.12 tpy 1925.88 1933.75 1941.50 tpypy 4809.25 4812.50 4818.00 hc128 12848.00 12859.00 12859.00 hc256

amd64, 2200MHz, AMD Opteron 2354 (100f23), hlopt02, supercop-20100425

Cycles/byte for long messages quartile median quartile stream -3.92? -3.90? 5.90? tpypy -0.50? -0.45? 6.25? nlsv2 -0.08? -0.07? 1.50? salsa2012 -0.06? 0.46? 0.47? salsa208 -0.20? 1.74? 12.04? cryptmtv3 -1.89? 2.06? 3.55? tpy6 -1.61? 2.65? 2.71? sosemanuk 1.49? 2.74? 2.75? hc128 2.82? 2.84? 12.19? chacha12 2.91 2.91 2.91 chacha8 1.67? 3.00? 3.93? snow20 -0.61? 3.01? 3.80? tpy 3.04 3.04 3.06 panama 1.41? 3.36? 3.77? trivium 4.87 4.91 5.16 hc256 4.94 4.94 4.95 rabbit -0.41? 5.14? 5.17? lexv2 3.85? 5.50? 5.51? salsa20 -0.42? 5.50? 5.51? xsalsa20 5.62? 6.26? 6.29? chacha20 -1.45? 10.21? 10.39? aes128ctr 10.66 10.69 10.71 aes128estream -1.23? 12.37? 12.44? aes192ctr 14.67? 14.74? 16.78? aes256ctr 18.79 18.88 19.01 aes256estream 22.35 22.42 22.50 dragon

Cycles/byte for 4096 bytes quartile median quartile stream 2.66 2.91 2.91 salsa208 2.95 2.95 2.95 chacha8 3.46 3.48 3.50 sosemanuk 3.60 3.60 3.61 salsa2012 3.96 3.96 3.96 trivium 4.07? 4.08? 8.15? chacha12 4.22 4.22 4.23 panama 4.40? 4.42? 5.69? nlsv2 4.59 4.59 4.60 snow20 4.65 4.65 4.66 tpy6 5.11 5.11 5.12 rabbit 5.11? 5.16? 10.32? cryptmtv3 5.33 5.33 5.34 lexv2 5.53 5.54 5.54 salsa20 5.70 5.71 5.71 xsalsa20 5.75 5.75 5.75 tpy 6.30 6.31 6.32 chacha20 7.72 7.73 7.73 hc128 7.88 7.89 7.89 tpypy 10.77 10.77 10.77 aes128estream 10.93 10.93 10.94 aes128ctr 13.08 13.08 13.11 aes192ctr 15.30 15.34 16.34 aes256ctr 18.96 18.98 19.01 aes256estream 21.45 21.45 21.57 hc256 22.75 22.78 22.81 dragon

Cycles/byte for 1536 bytes quartile median quartile stream 3.03 3.03 3.32 chacha8 4.88? 5.35? 6.30? sosemanuk 5.39 5.39 5.40 salsa208 5.38 5.40 5.91 rabbit 5.60? 5.61? 7.24? salsa20 5.64 5.64 5.65 lexv2 6.18? 6.20? 9.71? panama 6.22 6.22 6.23 tpy6 6.39? 6.39? 8.23? chacha20 4.56? 6.50? 6.51? chacha12 5.53? 6.71? 8.53? trivium 3.66? 7.30? 7.32? salsa2012 6.05? 7.82? 12.07? xsalsa20 9.79 9.80 9.84 snow20 7.77? 9.82? 9.83? nlsv2 10.90 10.90 10.91 aes128estream 10.99 11.00 11.02 cryptmtv3 11.21? 11.22? 17.62? tpypy 12.03? 12.17? 15.49? aes128ctr 16.41? 16.62? 33.13? aes256ctr 11.69? 18.06? 18.09? tpy 18.37? 18.47? 28.25? aes192ctr 19.14 19.23 21.13 aes256estream 16.07? 20.64? 31.92? hc128 23.33 23.39 23.42 dragon 49.01 49.01 49.02 hc256

Cycles/byte for 576 bytes quartile median quartile stream 6.22 6.22 6.24 salsa208 6.90 6.91 6.91 chacha8 8.41 8.42 8.43 salsa2012 9.51 9.51 9.54 chacha12 10.18 10.18 10.19 trivium 8.84? 11.25? 17.50? sosemanuk 11.32 11.32 11.34 snow20 12.14 12.14 12.22 rabbit 12.15 12.21 12.24 nlsv2 6.45? 12.87? 12.97? lexv2 12.88 12.89 12.97 salsa20 14.77 14.78 14.81 chacha20 15.26 15.27 15.28 xsalsa20 15.88 15.97 15.97 cryptmtv3 20.71 20.73 20.76 tpy6 22.45 22.46 22.50 aes128estream 22.81 22.92 22.98 panama 24.29? 29.93? 30.14? aes128ctr 25.27? 31.29? 39.93? aes256ctr 20.29? 31.74? 40.40? tpypy 34.31 34.39 34.54 aes192ctr 36.00 36.02 36.05 tpy 31.07? 39.35? 39.50? aes256estream 27.60? 39.42? 50.16? dragon 37.90? 59.44? 75.53? hc128 122.40 122.42 122.47 hc256

Cycles/byte for 64 bytes quartile median quartile stream 13.69 13.69 13.72 salsa208 7.75? 14.80? 14.84? chacha8 15.22? 15.53? 28.16? cryptmtv3 15.72? 15.92? 31.05? aes128estream 10.38? 15.98? 20.67? chacha12 15.88? 16.08? 31.28? chacha20 16.22? 16.25? 32.27? lexv2 15.67? 16.42? 29.53? rabbit 18.19 18.22 18.50 salsa2012 26.84? 27.17? 53.91? aes256estream 14.02? 27.22? 27.67? salsa20 30.30 30.31 30.36 trivium 31.28 31.34 31.50 snow20 24.61? 38.44? 48.77? xsalsa20 46.53 46.59 46.61 dragon 46.66 46.91 47.09 nlsv2 52.42? 53.17? 105.66? sosemanuk 54.48? 54.55? 106.72? aes128ctr 59.80? 60.08? 119.16? aes256ctr 78.50? 78.77? 120.03? panama 57.03? 112.38? 112.86? aes192ctr 63.50? 125.66? 125.70? tpy6 171.02? 264.34? 264.88? tpy 268.30 268.34 269.45 tpypy 316.92 317.41 317.56 hc128 1062.66 1063.03 1064.73 hc256

Cycles/byte for 8 bytes quartile median quartile stream 63.25? 63.25? 123.25? chacha8 64.38? 65.50? 114.25? salsa208 67.12? 70.50? 130.00? aes128estream 74.12? 75.50? 148.12? cryptmtv3 77.00? 77.25? 150.75? salsa2012 92.00 94.88 100.50 rabbit 98.12? 98.62? 185.12? lexv2 99.12? 99.25? 191.12? trivium 105.12? 105.38? 209.00? aes256estream 113.25? 113.25? 223.25? salsa20 126.00? 127.38? 246.00? snow20 126.50? 127.75? 251.25? nlsv2 88.38? 131.62? 173.25? chacha12 129.62? 132.38? 255.75? chacha20 200.88 201.00 201.12 xsalsa20 215.38 215.50 216.75 dragon 380.88? 382.88? 759.25? aes128ctr 381.75? 385.00? 760.75? aes192ctr 400.12? 401.38? 791.50? aes256ctr 414.50? 421.88? 832.75? sosemanuk 476.25 478.38 481.25 tpy6 622.25? 624.00? 966.12? panama 1033.00 1033.88 1034.00 tpy 1033.62? 1035.00? 2063.75? tpypy 2533.38? 2533.62? 5067.75? hc128 8507.38? 8508.00? 11000.40? hc256