VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers	Arch

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	xof	scalarmult

Measurements of stream ciphers on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; `hunsnivy`, `supercop-20261004`

[Page version: 20261009 01:12:07]

eBASC (ECRYPT Benchmarking of Stream Ciphers) is a project to measure the performance of stream ciphers. This page presents benchmark results collected in eBASC:

Speed (cycles/byte) of encrypting an 8-byte message.
Speed of encrypting a 64-byte message.
Speed of encrypting a 576-byte message.
Speed of encrypting a 1536-byte message.
Speed of encrypting a 4096-byte message.
Speed of encrypting a long message. This is computed as 1/3072 of the difference in cycle counts between encrypting 4096-byte messages and encrypting 1024-byte messages.

Graphs show timings for all message lengths between 0 and 4096 bytes. The stair-step shape of a typical curve on the graphs reflects the fact that these stream ciphers handle messages in blocks, such as 64-byte blocks.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages

25% 50% 75% stream

0.87 0.88 0.89 tango642

0.90 0.91 0.92 T:aes128ctr

1.06 1.07 1.08 chacha8

1.17 1.19 1.20 aes256ctr

1.24 1.25 1.26 salsa208

1.47 1.47 1.49 chacha12

1.45 1.48 1.56 T:aes192ctr

1.63 1.63 1.64 T:trivium

1.75 1.76 1.77 salsa2012

1.86 1.99 2.06 T:tpy

2.07 2.08 2.12 T:hc128

2.07 2.09 2.10 T:speck6496ctr

2.16 2.17 2.18 T:speck64128ctr

2.28 2.29 2.30 T:sosemanuk

2.29 2.32 2.33 T:nlsv2

2.32 2.34 2.35 chacha20

2.32 2.43 2.56 T:tpy6

2.64 2.65 2.66 T:speck128128ctr

2.65 2.66 2.68 T:cryptmtv3

2.71 2.72 2.73 T:speck128192ctr

2.79 2.80 2.81 T:speck128256ctr

2.83 2.84 2.86 salsa20

2.83 2.85 2.87 xsalsa20

2.98 2.99 3.00 T:simon6496ctr

3.00 3.03 3.06 T:hc256

3.00 3.09 3.16 T:tpypy

3.09 3.11 3.12 T:simon64128ctr

3.47 3.52 3.56 T:panama

3.51 3.52 3.53 T:snow20

3.60 3.61 3.63 T:rabbit

4.50 4.52 4.53 T:simon128128ctr

4.89 4.91 4.93 T:lexv2

5.05? 5.21? 5.86? T:simon128256ctr

9.73 9.75 9.77 T:aes128estream

15.71 15.74 15.78 T:aes256estream

20.50 20.59 20.71 T:ocelot1

21.58 21.74 21.96 T:ocelot2

36.10 36.50 37.16 T:amastrid

Cycles/byte for 4096 bytes

25% 50% 75% stream

0.95 0.95 0.96 T:aes128ctr

1.06 1.06 1.07 tango642

1.08 1.09 1.09 chacha8

1.24 1.24 1.24 aes256ctr

1.27 1.27 1.28 salsa208

1.50 1.50 1.51 chacha12

1.72 1.72 1.72 T:trivium

1.79 1.79 1.79 salsa2012

1.91 1.92 1.94 T:aes192ctr

2.13 2.13 2.14 T:speck6496ctr

2.21 2.21 2.22 T:speck64128ctr

2.35 2.36 2.37 chacha20

2.46 2.47 2.48 T:nlsv2

2.69 2.69 2.69 T:speck128128ctr

2.76 2.77 2.77 T:speck128192ctr

2.84 2.84 2.85 T:sosemanuk

2.84 2.85 2.85 T:speck128256ctr

2.87 2.87 2.88 salsa20

2.99 2.99 3.00 xsalsa20

3.03 3.09 3.17 T:tpy6

3.15 3.16 3.17 T:cryptmtv3

3.20 3.21 3.21 T:simon6496ctr

3.45 3.46 3.46 T:simon64128ctr

3.63 3.63 3.63 T:snow20

3.59 3.65 3.67 T:tpy

3.71 3.71 3.72 T:rabbit

4.57 4.59 4.61 T:panama

4.62 4.68 4.70 T:tpypy

4.83 4.84 4.85 T:simon128128ctr

5.07 5.07 5.08 T:lexv2

5.45 5.45 5.47 T:hc128

5.65 5.67 6.13 T:simon128256ctr

9.80 9.81 9.82 T:aes128estream

12.17 12.19 12.21 T:hc256

15.86 15.88 15.90 T:aes256estream

21.74 21.79 21.84 T:ocelot1

22.91 22.99 23.09 T:ocelot2

37.74 37.85 38.20 T:amastrid

Cycles/byte for 1536 bytes

25% 50% 75% stream

1.01 1.01 1.02 T:aes128ctr

1.11 1.12 1.12 chacha8

1.31 1.31 1.32 salsa208

1.31 1.32 1.33 aes256ctr

1.36 1.36 1.37 tango642

1.53 1.55 1.56 chacha12

1.83 1.84 1.84 salsa2012

1.87 1.88 1.88 T:trivium

2.19 2.20 2.22 T:speck6496ctr

2.28 2.28 2.29 T:speck64128ctr

2.38 2.39 2.40 chacha20

2.61 2.70 2.81 T:aes192ctr

2.75 2.75 2.77 T:speck128128ctr

2.80 2.81 2.85 T:nlsv2

2.84 2.85 2.86 T:speck128192ctr

2.91 2.91 2.92 salsa20

2.91 2.91 2.92 T:speck128256ctr

3.25 3.25 3.26 xsalsa20

3.57 3.57 3.58 T:simon6496ctr

3.81 3.82 3.83 T:snow20

3.81 3.82 3.84 T:sosemanuk

3.87 3.88 3.90 T:rabbit

4.04 4.04 4.05 T:simon64128ctr

4.20 4.23 4.26 T:tpy6

4.63 4.64 4.67 T:cryptmtv3

5.34 5.37 5.40 T:lexv2

5.36 5.37 5.40 T:simon128128ctr

6.21 6.29 6.39 T:tpy

6.37 6.39 6.43 T:panama

6.37 6.47 6.86 T:simon128256ctr

7.18 7.24 7.45 T:tpypy

9.90 9.91 9.93 T:aes128estream

11.03 11.06 11.09 T:hc128

16.06 16.09 16.09 T:aes256estream

23.58 23.67 23.80 T:ocelot1

25.02 25.19 25.36 T:ocelot2

27.43 27.45 27.48 T:hc256

39.80 39.99 40.88 T:amastrid

Cycles/byte for 576 bytes

25% 50% 75% stream

1.28 1.29 1.32 T:aes128ctr

1.32 1.33 1.34 chacha8

1.57 1.58 1.60 salsa208

1.72 1.76 1.78 aes256ctr

1.79 1.82 1.84 chacha12

2.17 2.17 2.18 salsa2012

2.19 2.20 2.22 tango642

2.23 2.24 2.27 T:trivium

2.43 2.44 2.45 T:speck6496ctr

2.52 2.52 2.53 T:speck64128ctr

2.76 2.77 2.80 chacha20

2.98 2.99 3.01 T:speck128128ctr

3.07 3.08 3.11 T:speck128192ctr

3.15 3.17 3.19 T:speck128256ctr

3.37 3.38 3.40 salsa20

3.61 3.63 3.76 T:nlsv2

4.21 4.24 4.26 xsalsa20

4.23 4.24 4.27 T:snow20

4.31 4.32 4.33 T:rabbit

4.33 4.60 4.66 T:aes192ctr

5.03 5.05 5.11 T:cryptmtv3

5.27 5.28 5.29 T:simon6496ctr

6.04 6.07 6.15 T:lexv2

6.42 6.44 6.46 T:sosemanuk

7.70 7.81 7.88 T:tpy6

7.73 7.81 8.22 T:simon64128ctr

9.41 9.42 9.43 T:simon128256ctr

10.21 10.24 10.26 T:aes128estream

9.72? 10.33? 11.19? T:simon128128ctr

11.09 11.13 11.21 T:panama

13.56 13.70 13.93 T:tpy

14.13 14.25 14.36 T:tpypy

16.54 16.58 16.62 T:aes256estream

25.96 25.99 26.09 T:hc128

28.78 29.03 29.26 T:ocelot1

30.13 30.44 30.77 T:ocelot2

46.46 46.84 48.02 T:amastrid

68.11 68.15 68.19 T:hc256

Cycles/byte for 64 bytes

25% 50% 75% stream

3.19 3.22 3.28 chacha8

4.09 4.11 4.13 salsa208

4.22 4.25 4.26 chacha12

4.41 4.54 4.70 T:aes128ctr

4.86 4.86 4.88 T:speck6496ctr

4.86 5.02 5.16 T:speck64128ctr

5.15 5.19 5.20 salsa2012

5.45 5.61 5.88 aes256ctr

5.89 5.89 5.89 T:speck128128ctr

5.86 5.91 5.98 T:speck128256ctr

5.83 5.92 5.98 T:speck128192ctr

6.24 6.33 6.40 chacha20

7.07 7.10 7.19 T:trivium

7.47 7.49 7.52 salsa20

9.45 9.52 9.86 T:rabbit

9.89 9.99 10.18 T:snow20

10.45 10.48 10.55 T:simon6496ctr

11.82 11.92 12.02 T:simon64128ctr

12.41 12.48 13.12 T:cryptmtv3

12.71 12.78 12.84 tango642

14.17 14.24 14.36 T:aes128estream

14.83 15.03 15.37 xsalsa20

14.85 15.19 16.02 T:lexv2

15.81 16.15 17.27 T:nlsv2

16.62 16.64 16.66 T:simon128256ctr

16.71 16.84 17.09 T:simon128128ctr

22.89 22.98 23.11 T:aes256estream

26.40? 28.94? 29.47? T:aes192ctr

36.03 36.29 36.73 T:sosemanuk

45.27 46.65 47.45 T:tpy6

71.39 71.58 71.80 T:panama

95.18 98.22 99.56 T:ocelot1

96.78 98.36 100.77 T:ocelot2

100.64 101.52 102.19 T:tpypy

106.79 108.30 110.76 T:tpy

133.94 135.24 136.87 T:amastrid

216.55 216.94 217.51 T:hc128

588.98 589.57 590.39 T:hc256

Cycles/byte for 8 bytes

25% 50% 75% stream

23.02 23.12 23.22 T:speck64128ctr

23.28 23.45 24.29 T:speck6496ctr

25.28 25.62 25.91 T:speck128256ctr

25.85 26.00 27.64 T:speck128192ctr

26.95 27.14 28.24 chacha8

26.25 27.23 29.11 T:speck128128ctr

35.05 35.27 37.62 chacha12

35.65 36.78 38.42 T:aes128ctr

38.16 38.76 39.71 salsa208

44.21 44.50 44.77 T:trivium

44.06 45.38 47.18 aes256ctr

51.42 51.99 52.72 chacha20

55.00 56.71 58.81 T:rabbit

58.65 59.04 59.58 salsa2012

64.44 65.16 65.64 T:aes128estream

70.06 70.77 71.39 T:simon64128ctr

77.06 78.03 83.03 T:cryptmtv3

80.83 81.22 82.41 salsa20

80.22 81.46 84.51 T:snow20

81.19 81.64 82.17 T:simon6496ctr

84.72? 86.85? 94.32? T:nlsv2

90.40 91.02 91.34 T:aes256estream

90.50 92.72 98.60 T:lexv2

96.97 97.62 98.29 tango642

101.82 102.43 103.09 T:simon128128ctr

105.14 105.88 106.75 T:simon128256ctr

141.26 143.38 145.94 xsalsa20

204.47? 229.73? 233.52? T:aes192ctr

288.34 289.71 292.11 T:sosemanuk

342.34 354.10 363.05 T:tpy6

568.35 572.43 578.26 T:panama

618.64 634.65 652.17 T:ocelot2

622.46 634.86 647.48 T:ocelot1

796.86 802.42 817.95 T:tpypy

839.85 845.89 870.61 T:tpy

880.43 895.75 913.06 T:amastrid

1730.35 1735.35 1741.12 T:hc128

4708.59 4713.22 4717.64 T:hc256

eBACS: ECRYPT Benchmarking of Cryptographic Systems

Measurements of stream ciphers on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20261004

Measurements of stream ciphers on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; `hunsnivy`, `supercop-20261004`