VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of stream ciphers on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20240808

[Page version: 20240828 00:45:52]

eBASC (ECRYPT Benchmarking of Stream Ciphers) is a project to measure the performance of stream ciphers. This page presents benchmark results collected in eBASC:

• Speed (cycles/byte) of encrypting an 8-byte message.
• Speed of encrypting a 64-byte message.
• Speed of encrypting a 576-byte message.
• Speed of encrypting a 1536-byte message.
• Speed of encrypting a 4096-byte message.
• Speed of encrypting a long message. This is computed as 1/3072 of the difference in cycle counts between encrypting 4096-byte messages and encrypting 1024-byte messages.

Graphs show timings for all message lengths between 0 and 4096 bytes. The stair-step shape of a typical curve on the graphs reflects the fact that these stream ciphers handle messages in blocks, such as 64-byte blocks.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% stream 3.20 3.21 3.22 chacha8 3.38 3.43 3.51 tango642 3.69 3.69 3.69 salsa208 4.21 4.22 4.22 chacha12 4.81 4.83 4.83 salsa2012 5.66 5.66 5.73 T:hc128 6.21 6.22 6.24 chacha20 6.44 6.45 6.45 T:cryptmtv3 7.02 7.02 7.07 xsalsa20 7.02 7.02 7.03 salsa20 7.01 7.05 7.05 T:nlsv2 7.37 7.38 7.38 T:tpy 7.37 7.38 7.38 T:trivium 7.50 7.50 7.51 T:tpy6 7.77 8.18 8.52 T:panama 8.92 8.95 9.38 T:snow20 9.36 9.36 9.37 T:sosemanuk 9.35 9.41 10.23 T:hc256 11.93 11.94 11.99 T:tpypy 12.02 12.02 12.02 T:speck6496ctr 12.51 12.52 12.53 T:speck64128ctr 14.06 14.07 14.07 T:rabbit 16.58 16.64 16.73 T:aes128ctr 17.60 17.66 17.66 T:lexv2 18.43 18.43 18.44 T:speck128128ctr 18.61 18.62 18.63 T:simon6496ctr 19.13 19.13 19.14 T:speck128192ctr 19.57 19.57 19.58 T:speck128256ctr 19.51 19.64 19.69 T:aes192ctr 20.03 20.05 20.05 T:simon64128ctr 22.44 22.51 22.62 T:aes256ctr 29.56 29.57 29.59 T:aes128estream 29.65 29.67 29.68 T:simon128128ctr 40.59 40.60 40.60 T:simon128256ctr 45.12 45.14 46.16 T:aes256estream 61.33 61.34 61.39 T:ocelot1 62.46 62.92 63.26 T:ocelot2 117.04 124.22 124.56 T:amastrid

Cycles/byte for 4096 bytes 25% 50% 75% stream 3.26 3.26 3.26 chacha8 3.73 3.73 3.73 salsa208 4.05 4.09 4.15 tango642 4.26 4.26 4.26 chacha12 4.87 4.87 4.87 salsa2012 6.26 6.26 6.28 chacha20 7.06 7.06 7.06 salsa20 7.37 7.37 7.40 xsalsa20 7.37 7.37 7.38 T:cryptmtv3 7.40 7.43 7.43 T:nlsv2 7.68 7.68 7.68 T:trivium 8.90 8.91 8.91 T:tpy6 9.25 9.27 9.59 T:snow20 9.78 9.78 9.78 T:sosemanuk 10.31 10.61 10.86 T:panama 10.73 10.73 10.73 T:tpy 12.11 12.11 12.12 T:speck6496ctr 12.62 12.62 12.63 T:speck64128ctr 14.51 14.51 14.52 T:rabbit 14.95 14.95 14.99 T:tpypy 16.45 16.45 16.50 T:hc128 18.01 18.05 18.05 T:lexv2 18.53 18.53 18.53 T:speck128128ctr 19.23 19.23 19.24 T:speck128192ctr 19.40 19.40 19.41 T:simon6496ctr 19.68 19.68 19.68 T:speck128256ctr 20.02 20.04 20.08 T:aes128ctr 21.11 21.11 21.12 T:simon64128ctr 23.07 23.15 23.17 T:aes192ctr 25.97 25.99 26.05 T:aes256ctr 29.67 29.68 29.69 T:aes128estream 30.84 30.84 30.85 T:simon128128ctr 33.38 33.41 34.03 T:hc256 42.69 42.69 42.70 T:simon128256ctr 45.33 45.34 46.10 T:aes256estream 65.25 65.25 65.28 T:ocelot1 66.51 66.84 67.06 T:ocelot2 123.18 127.26 127.45 T:amastrid

Cycles/byte for 1536 bytes 25% 50% 75% stream 3.33 3.33 3.33 chacha8 3.80 3.80 3.80 salsa208 4.33 4.34 4.34 chacha12 4.93 4.94 4.94 salsa2012 5.17 5.17 5.21 tango642 6.33 6.33 6.34 chacha20 7.13 7.14 7.16 salsa20 7.95 7.95 7.95 xsalsa20 8.18 8.18 8.18 T:trivium 8.31 8.31 8.31 T:nlsv2 9.56 9.56 9.57 T:cryptmtv3 9.81 9.85 9.94 T:snow20 10.69 10.71 10.84 T:sosemanuk 11.24 11.24 11.25 T:tpy6 12.27 12.27 12.27 T:speck6496ctr 12.78 12.78 12.80 T:speck64128ctr 14.51 14.51 14.53 T:panama 15.26 15.26 15.26 T:rabbit 16.32 16.33 16.33 T:tpy 18.68 18.68 18.69 T:speck128128ctr 18.68 18.68 18.70 T:lexv2 19.40 19.40 19.40 T:speck128192ctr 19.85 19.85 19.85 T:speck128256ctr 19.91 19.91 19.92 T:tpypy 20.70 20.71 20.73 T:simon6496ctr 22.88 22.88 22.90 T:simon64128ctr 25.73 25.81 25.86 T:aes128ctr 28.97 29.00 29.08 T:aes192ctr 29.84 29.85 29.85 T:aes128estream 31.69 31.87 32.26 T:aes256ctr 32.79 32.80 32.82 T:simon128128ctr 34.39 34.39 34.41 T:hc128 45.74 45.75 47.03 T:aes256estream 46.18 46.18 46.18 T:simon128256ctr 71.76 71.78 71.80 T:ocelot1 73.05 73.07 73.28 T:ocelot2 73.39 73.40 73.46 T:hc256 134.68 134.80 142.24 T:amastrid

Cycles/byte for 576 bytes 25% 50% 75% stream 3.54 3.55 3.56 chacha8 4.07 4.07 4.07 salsa208 4.56 4.57 4.57 chacha12 5.09 5.10 5.14 salsa2012 6.60 6.61 6.61 chacha20 7.30 7.32 7.33 salsa20 8.15 8.15 8.15 tango642 9.50 9.50 9.52 xsalsa20 9.52 9.52 9.53 T:trivium 10.37 10.39 10.73 T:nlsv2 11.24 11.24 11.25 T:cryptmtv3 11.24 11.25 11.31 T:snow20 12.61 12.61 12.61 T:speck6496ctr 13.09 13.09 13.10 T:speck64128ctr 13.12 13.12 13.14 T:sosemanuk 17.24 17.34 17.57 T:rabbit 17.49 17.51 17.90 T:tpy6 19.20 19.21 19.21 T:speck128128ctr 19.94 19.95 19.95 T:speck128192ctr 20.38 20.38 20.39 T:speck128256ctr 20.49 20.50 20.50 T:lexv2 25.56 25.57 25.57 T:simon6496ctr 25.75 25.80 25.82 T:panama 30.31 30.31 30.32 T:aes128estream 31.21 31.22 31.24 T:tpy 33.48 33.51 33.53 T:tpypy 42.33 42.55 42.96 T:aes128ctr 46.47 46.56 46.70 T:aes192ctr 46.61 46.62 46.80 T:aes256estream 49.64 49.64 49.67 T:simon64128ctr 49.43 49.67 49.94 T:aes256ctr 60.45 60.45 60.45 T:simon128128ctr 69.66 69.66 69.67 T:simon128256ctr 82.44 82.46 82.51 T:hc128 89.15 89.16 89.26 T:ocelot1 90.05 90.26 90.34 T:ocelot2 154.01 155.79 158.56 T:amastrid 180.10 180.10 180.19 T:hc256

Cycles/byte for 64 bytes 25% 50% 75% stream 5.47 5.58 5.80 chacha8 6.23 6.34 6.34 salsa208 6.67 6.67 6.89 chacha12 6.78 6.89 7.22 salsa2012 8.97 9.08 9.19 salsa20 9.08 9.08 9.30 chacha20 16.19 16.30 16.30 T:speck6496ctr 16.52 16.52 16.84 T:speck64128ctr 24.83 24.83 24.83 T:speck128128ctr 25.81 25.81 26.14 T:speck128192ctr 26.25 26.25 26.25 T:speck128256ctr 26.36 26.47 26.47 T:trivium 28.98 29.09 29.09 xsalsa20 29.97 30.08 30.73 T:snow20 30.95 30.95 31.17 T:cryptmtv3 31.94 32.05 32.48 T:simon6496ctr 34.34 34.34 34.67 T:simon64128ctr 36.31 36.31 36.31 T:aes128estream 37.84 37.84 37.95 T:sosemanuk 42.11 42.33 42.88 T:nlsv2 42.33 42.44 42.77 T:rabbit 42.88 42.88 42.98 T:lexv2 45.61 45.61 45.72 tango642 51.08 51.19 51.62 T:simon128128ctr 58.62 58.62 58.62 T:aes256estream 58.84 58.84 60.05 T:simon128256ctr 97.02 97.23 99.75 T:tpy6 169.64 169.64 170.08 T:panama 207.16 207.38 207.70 T:tpypy 221.48 221.59 221.59 T:tpy 253.42 254.62 255.94 T:aes128ctr 266.44 268.73 273.33 T:aes192ctr 286.12 287.44 288.53 T:aes256ctr 306.36 306.58 307.45 T:ocelot2 310.73 312.05 312.16 T:ocelot1 409.06 418.36 418.58 T:amastrid 697.05 697.16 697.48 T:hc128 1545.69 1545.80 1547.11 T:hc256

Cycles/byte for 8 bytes 25% 50% 75% stream 35.00 35.00 37.62 T:speck6496ctr 35.88 35.88 36.75 T:speck64128ctr 43.75 43.75 45.50 T:speck128256ctr 43.75 44.62 46.38 T:speck128192ctr 44.62 45.50 47.25 T:speck128128ctr 55.12 55.12 56.00 chacha8 64.75 64.75 64.75 chacha12 66.50 66.50 67.38 salsa2012 83.12 84.00 84.88 chacha20 84.00 84.00 84.88 salsa20 95.38 96.25 96.25 T:simon6496ctr 108.50 108.50 111.12 T:simon64128ctr 114.62 114.62 114.62 T:aes128estream 126.88 127.75 130.38 salsa208 155.75 156.62 158.38 T:simon128128ctr 157.50 157.50 158.38 T:trivium 198.62 199.50 201.25 T:cryptmtv3 200.38 200.38 201.25 T:aes256estream 201.25 202.12 204.75 T:simon128256ctr 209.12 210.88 219.62 T:nlsv2 222.25 222.25 223.12 T:lexv2 234.50 235.38 235.38 T:snow20 242.38 242.38 243.25 xsalsa20 259.00 260.75 264.25 T:rabbit 298.38 298.38 300.12 T:sosemanuk 341.25 341.25 345.62 tango642 732.38 736.75 749.88 T:tpy6 1407.88 1413.12 1421.88 T:panama 1585.50 1588.12 1589.00 T:tpypy 1666.00 1687.88 1706.25 T:aes128ctr 1716.75 1729.88 1749.12 T:aes192ctr 1738.62 1739.50 1740.38 T:tpy 1803.38 1813.88 1827.88 T:aes256ctr 2021.25 2026.50 2027.38 T:ocelot2 2065.00 2069.38 2069.38 T:ocelot1 2562.00 2687.12 2689.75 T:amastrid 5572.88 5574.62 5649.00 T:hc128 12364.62 12368.12 12385.62 T:hc256