VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of stream ciphers on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20260330

[Page version: 20260925 12:53:05]

eBASC (ECRYPT Benchmarking of Stream Ciphers) is a project to measure the performance of stream ciphers. This page presents benchmark results collected in eBASC:

• Speed (cycles/byte) of encrypting an 8-byte message.
• Speed of encrypting a 64-byte message.
• Speed of encrypting a 576-byte message.
• Speed of encrypting a 1536-byte message.
• Speed of encrypting a 4096-byte message.
• Speed of encrypting a long message. This is computed as 1/3072 of the difference in cycle counts between encrypting 4096-byte messages and encrypting 1024-byte messages.

Graphs show timings for all message lengths between 0 and 4096 bytes. The stair-step shape of a typical curve on the graphs reflects the fact that these stream ciphers handle messages in blocks, such as 64-byte blocks.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% stream 3.21 3.21 3.25 chacha8 3.59 3.59 3.62 salsa208 3.64 3.65 3.85 tango642 4.21 4.21 4.22 chacha12 4.83 4.83 4.83 salsa2012 5.12 5.13 5.14 T:tpy 5.24 5.25 5.27 T:tpy6 6.20 6.21 6.23 chacha20 6.39 6.39 6.40 T:cryptmtv3 6.39 6.41 6.67 T:hc128 7.01 7.02 7.02 xsalsa20 7.01 7.02 7.02 salsa20 7.20 7.28 7.42 T:panama 7.92 7.98 8.26 T:tpypy 7.83? 8.23? 8.75? T:hc256 8.27? 8.37? 12.24? T:snow20 9.70 9.70 10.19 T:sosemanuk 11.66 11.67 11.76 T:nlsv2 11.92 11.95 11.98 T:speck6496ctr 12.56 12.57 12.62 T:speck64128ctr 12.89 12.94 13.07 T:rabbit 17.23 17.25 17.42 T:lexv2 17.56? 17.91? 19.76? T:speck128192ctr 17.36? 19.26? 26.70? T:speck128128ctr 19.31 19.32 19.71 T:simon6496ctr 19.24 19.50 19.63 T:trivium 20.32 20.48 20.66 T:speck128256ctr 21.84 21.92 22.54 T:simon64128ctr 28.24 28.29 28.44 T:aes128estream 29.60 29.65 30.64 T:simon128128ctr 34.33 34.42 35.89 T:simon128256ctr 41.04 41.13 41.44 T:aes256estream 59.69 60.25 60.59 T:ocelot1 61.10 61.54 61.93 T:ocelot2 65.24 66.70 67.47 T:aes128ctr 75.29 76.85 77.46 T:aes192ctr 86.47 87.91 88.39 T:aes256ctr 121.10 125.85 126.81 T:amastrid

Cycles/byte for 4096 bytes 25% 50% 75% stream 3.26 3.26 3.29 chacha8 3.66 3.66 3.68 salsa208 4.26 4.26 4.27 chacha12 4.34 4.34 4.49 tango642 4.87 4.87 4.87 salsa2012 6.26 6.26 6.27 chacha20 6.73 6.74 6.75 T:tpy6 7.06 7.06 7.06 salsa20 7.19 7.19 7.20 T:cryptmtv3 7.31 7.31 7.31 xsalsa20 8.56? 8.64? 11.53? T:snow20 8.64 8.64 8.65 T:tpy 9.91 9.92 10.01 T:panama 10.11 10.11 10.48 T:sosemanuk 11.19 11.21 11.41 T:tpypy 12.06 12.06 12.08 T:speck6496ctr 12.17 12.17 12.24 T:nlsv2 12.69 12.69 12.72 T:speck64128ctr 13.35 13.38 13.47 T:rabbit 15.83 15.85 16.03 T:hc128 17.64 17.66 17.78 T:lexv2 19.19? 19.38? 24.90? T:speck128128ctr 20.17 20.17 20.26 T:speck128192ctr 20.17 20.18 20.47 T:simon6496ctr 20.23 20.23 20.33 T:trivium 20.60 20.60 20.73 T:speck128256ctr 22.88 22.88 23.34 T:simon64128ctr 28.37 28.39 28.51 T:aes128estream 31.01 31.02 31.76 T:simon128128ctr 31.30 31.32 31.70 T:hc256 37.43 37.49 38.59 T:simon128256ctr 41.31 41.34 41.55 T:aes256estream 64.05 64.22 64.47 T:ocelot1 65.00 65.27 65.54 T:ocelot2 67.49 68.22 68.77 T:aes128ctr 77.71 78.35 78.80 T:aes192ctr 89.18 89.65 89.91 T:aes256ctr 127.31 130.61 130.98 T:amastrid

Cycles/byte for 1536 bytes 25% 50% 75% stream 3.34 3.34 3.35 chacha8 3.77 3.77 3.78 salsa208 4.34 4.34 4.34 chacha12 4.94 4.94 4.94 salsa2012 5.50 5.50 5.82 tango642 6.34 6.34 6.36 chacha20 7.13 7.13 7.13 salsa20 7.79 7.79 7.80 xsalsa20 9.02 9.03 9.05 T:snow20 9.07 9.08 9.08 T:cryptmtv3 9.20 9.21 9.23 T:tpy6 11.01 11.01 11.02 T:sosemanuk 12.25 12.25 12.27 T:speck6496ctr 12.88 12.88 12.95 T:speck64128ctr 13.36 13.37 13.44 T:nlsv2 14.08 14.11 14.12 T:rabbit 14.28 14.33 14.84 T:panama 14.50 14.50 14.55 T:tpy 16.54 16.55 16.57 T:tpypy 18.33 18.34 18.35 T:lexv2 19.37? 19.51? 24.76? T:speck128128ctr 20.44? 20.60? 25.96? T:speck128192ctr 20.78 20.79 22.29 T:speck128256ctr 21.44 21.44 21.48 T:trivium 21.59 21.59 21.61 T:simon6496ctr 24.47 24.48 25.56 T:simon64128ctr 28.55 28.56 29.13 T:aes128estream 31.55 31.55 31.71 T:hc128 33.30 33.30 33.87 T:simon128128ctr 41.61 41.67 41.88 T:aes256estream 42.58 42.58 43.31 T:simon128256ctr 69.77 69.78 70.23 T:hc256 70.23 70.31 72.19 T:aes128ctr 70.74 70.79 71.43 T:ocelot1 71.19 71.33 71.72 T:ocelot2 80.54 80.61 82.27 T:aes192ctr 91.85 92.24 94.62 T:aes256ctr 129.43 137.95 139.04 T:amastrid

Cycles/byte for 576 bytes 25% 50% 75% stream 3.56 3.56 3.58 chacha8 4.12 4.12 4.13 salsa208 4.58 4.58 4.59 chacha12 5.12 5.12 5.13 salsa2012 6.62 6.62 6.66 chacha20 7.31 7.31 7.32 salsa20 8.53 8.54 8.56 tango642 9.09 9.09 9.11 xsalsa20 10.28 10.31 10.31 T:snow20 10.70 10.71 10.71 T:cryptmtv3 12.58 12.58 12.61 T:speck6496ctr 13.20 13.20 13.21 T:speck64128ctr 13.43 13.43 13.43 T:sosemanuk 15.80 15.83 15.87 T:tpy6 16.02 16.02 16.02 T:nlsv2 16.01 16.05 16.07 T:rabbit 19.91 19.91 19.96 T:speck128128ctr 20.20 20.21 20.22 T:lexv2 20.96? 21.05? 28.37? T:speck128192ctr 21.35 21.35 21.37 T:speck128256ctr 24.68 24.68 24.71 T:trivium 25.88 25.99 26.15 T:panama 28.30 28.31 28.51 T:simon6496ctr 29.06 29.06 29.09 T:aes128estream 30.11 30.12 30.14 T:tpy 30.94 30.97 31.02 T:tpypy 35.06 35.19 35.42 T:simon64128ctr 42.52 42.54 42.62 T:aes256estream 68.05 68.06 68.26 T:simon128128ctr 73.50 73.50 73.63 T:hc128 75.74 75.75 75.77 T:simon128256ctr 78.18 78.32 80.92 T:aes128ctr 88.32 88.34 89.70 T:ocelot2 88.35 88.46 90.10 T:aes192ctr 88.59 88.63 89.24 T:ocelot1 100.07 100.30 101.34 T:aes256ctr 153.49 157.23 158.53 T:amastrid 172.41 172.43 174.26 T:hc256

Cycles/byte for 64 bytes 25% 50% 75% stream 5.67 5.67 5.87 chacha8 6.86 6.86 7.14 chacha12 6.91 6.91 7.18 salsa208 7.23 7.23 7.39 salsa2012 9.23 9.23 9.39 chacha20 9.42 9.44 9.55 salsa20 16.72 16.72 16.97 T:speck6496ctr 17.23 17.23 17.62 T:speck64128ctr 25.30 25.30 25.58 xsalsa20 25.88 25.88 26.24 T:speck128128ctr 26.38 26.38 26.88 T:snow20 27.56? 28.07? 39.33? T:speck128192ctr 27.66? 28.22? 34.76? T:speck128256ctr 30.53 30.64 30.64 T:cryptmtv3 32.75 32.75 32.92 T:simon6496ctr 33.57 33.60 33.93 T:simon64128ctr 35.27 35.27 35.70 T:aes128estream 37.80 37.80 37.87 T:sosemanuk 40.62 40.70 40.85 T:rabbit 43.33 43.36 43.51 T:lexv2 47.39 47.39 47.64 tango642 51.98? 52.38? 78.85? T:simon128128ctr 54.05 54.11 54.25 T:aes256estream 58.48? 58.55? 76.46? T:nlsv2 65.56 65.56 66.05 T:simon128256ctr 65.94 65.94 65.94 T:trivium 99.89 100.05 100.25 T:tpy6 174.21 175.44 176.57 T:panama 181.19 182.79 184.27 T:aes128ctr 190.52 191.39 192.98 T:aes192ctr 207.72 208.63 210.56 T:aes256ctr 215.23 215.37 216.18 T:tpypy 229.62 229.77 229.88 T:tpy 305.12 305.64 308.07 T:ocelot2 315.70 316.66 318.26 T:ocelot1 409.69 410.53 411.26 T:amastrid 610.06 610.12 616.62 T:hc128 1485.81 1485.96 1496.42 T:hc256

Cycles/byte for 8 bytes 25% 50% 75% stream 42.75 42.75 43.62 T:speck6496ctr 43.75 43.75 44.48 T:speck64128ctr 44.25 44.25 44.25 T:speck128256ctr 47.75 47.75 47.90 T:speck128128ctr 50.25? 52.12? 76.66? T:speck128192ctr 55.88 55.88 57.16 chacha8 65.38 65.38 66.66 chacha12 67.75 67.75 67.75 salsa2012 84.38 84.38 85.66 chacha20 85.25 85.25 86.12 salsa20 93.38 93.38 96.51 T:simon6496ctr 111.25 111.25 113.83 T:simon64128ctr 115.62 115.62 116.93 T:aes128estream 126.75 126.75 126.75 salsa208 144.00 144.00 145.27 T:simon128128ctr 180.12 180.12 181.47 T:simon128256ctr 190.12 190.12 191.11 T:aes256estream 199.82 200.62 202.86 T:cryptmtv3 209.50 209.50 210.14 T:snow20 213.38 213.38 213.38 xsalsa20 233.50 233.50 234.81 T:lexv2 249.92 250.17 251.00 T:rabbit 272.38 272.38 273.46 T:nlsv2 295.38 295.38 295.97 T:sosemanuk 352.88 352.88 354.91 tango642 391.25 391.25 395.21 T:trivium 760.92 763.04 765.59 T:tpy6 1086.99? 1099.03? 1464.76? T:aes128ctr 1092.53 1100.45 1110.38 T:aes192ctr 1153.07 1159.51 1170.55 T:aes256ctr 1403.81 1411.90 1424.78 T:panama 1659.24 1660.06 1661.10 T:tpypy 1797.43 1798.50 1798.67 T:tpy 2019.30 2021.20 2025.46 T:ocelot2 2107.99 2112.00 2113.88 T:ocelot1 2656.01 2665.65 2675.64 T:amastrid 4876.50 4876.50 4878.69 T:hc128 11884.38 11884.96 11991.42 T:hc256