VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers	Arch

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	xof	scalarmult

Measurements of stream ciphers on one machine: armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; `novena`, `supercop-20220506`

[Page version: 20240828 00:45:52]

eBASC (ECRYPT Benchmarking of Stream Ciphers) is a project to measure the performance of stream ciphers. This page presents benchmark results collected in eBASC:

Speed (cycles/byte) of encrypting an 8-byte message.
Speed of encrypting a 64-byte message.
Speed of encrypting a 576-byte message.
Speed of encrypting a 1536-byte message.
Speed of encrypting a 4096-byte message.
Speed of encrypting a long message. This is computed as 1/3072 of the difference in cycle counts between encrypting 4096-byte messages and encrypting 1024-byte messages.

Graphs show timings for all message lengths between 0 and 4096 bytes. The stair-step shape of a typical curve on the graphs reflects the fact that these stream ciphers handle messages in blocks, such as 64-byte blocks.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages

25% 50% 75% stream

2.73? 3.00? 3.26? chacha8

4.17 4.30 4.30 chacha12

4.82? 6.25? 6.25? salsa208

5.07? 6.51? 8.78? salsa2012

6.64? 6.64? 8.72? T:nlsv2

6.64? 6.77? 7.94? T:tpy

6.51? 6.90? 8.33? chacha20

5.99? 7.16? 9.51? T:sosemanuk

7.01? 7.16? 10.04? tango642

7.21? 7.32? 11.51? T:panama

6.77? 7.42? 9.12? T:tpy6

8.07? 8.46? 10.81? T:cryptmtv3

8.07? 9.51? 10.42? xsalsa20

8.07? 10.29? 10.55? salsa20

12.11? 12.37? 14.58? T:tpypy

12.11? 13.93? 16.80? T:speck64128ctr

25.52 25.65 27.74 T:aes128ctr

29.17 31.34 31.56 T:aes128estream

23.57? 32.16? 32.42? T:aes192ctr

27.40? 37.37? 37.61? T:aes256ctr

46.13? 58.47? 58.75? T:aes256estream

65.00? 90.11? 90.22? T:ocelot1

66.02? 91.28? 92.59? T:ocelot2

70.70? 96.49? 108.81? T:amastrid

Cycles/byte for 4096 bytes

25% 50% 75% stream

3.42 3.42 3.52 chacha8

4.59 4.59 4.59 chacha12

5.18? 6.25? 6.25? salsa208

5.76? 6.84? 8.20? salsa2012

6.84? 7.13? 8.20? chacha20

7.42? 7.42? 8.89? T:nlsv2

8.19? 8.30? 9.96? tango642

8.50? 8.69? 10.45? T:sosemanuk

8.50? 8.99? 10.25? T:tpy6

8.69? 9.77? 10.45? xsalsa20

9.86? 10.06? 11.82? T:cryptmtv3

8.50? 10.16? 10.25? salsa20

10.55 10.65 11.43 T:tpy

11.27? 11.35? 13.58? T:panama

13.48? 14.16? 16.21? T:speck64128ctr

16.41 16.51 16.99 T:tpypy

26.86 26.96 27.25 T:aes128ctr

26.66? 31.64? 31.74? T:aes192ctr

31.84 31.86 31.94 T:aes128estream

30.80? 36.62? 36.72? T:aes256ctr

46.61? 55.86? 56.06? T:aes256estream

73.36? 88.09? 88.09? T:ocelot1

75.30? 89.95? 90.83? T:ocelot2

90.63? 109.29? 112.90? T:amastrid

Cycles/byte for 1536 bytes

25% 50% 75% stream

3.91 4.17 4.17 chacha8

5.73 5.73 5.73 salsa208

5.21? 6.25? 6.25? chacha12

7.29 7.35 7.55 salsa2012

8.85 8.85 8.86 chacha20

8.85 9.12 9.12 salsa20

10.68 10.94 10.94 T:nlsv2

11.20 11.46 11.46 T:sosemanuk

9.64? 11.46? 11.46? xsalsa20

8.43? 12.24? 12.24? tango642

11.46? 13.54? 13.80? T:tpy6

12.76? 14.85? 14.85? T:cryptmtv3

13.19? 15.89? 15.89? T:panama

14.32? 16.93? 16.93? T:speck64128ctr

16.93? 17.19? 20.31? T:tpy

19.53 19.53 19.53 T:tpypy

29.17 29.17 29.17 T:aes128ctr

27.24? 32.55? 32.55? T:aes128estream

32.43? 32.64? 39.07? T:aes256ctr

34.12 34.12 36.46 T:aes192ctr

39.34? 57.04? 57.04? T:aes256estream

64.85? 93.76? 94.02? T:ocelot1

81.00? 97.40? 97.40? T:ocelot2

116.16? 116.42? 142.98? T:amastrid

Cycles/byte for 576 bytes

25% 50% 75% stream

5.56? 6.25? 6.94? chacha8

6.94 6.95 6.95 chacha12

6.95 7.64 7.64 salsa208

8.07? 9.03? 9.03? salsa2012

10.42? 10.42? 12.50? salsa20

9.72? 11.11? 11.11? chacha20

13.89 14.58 14.59 xsalsa20

12.68? 15.28? 15.28? tango642

13.20? 15.28? 15.28? T:nlsv2

15.28? 15.97? 18.75? T:speck64128ctr

16.67 17.36 17.36 T:cryptmtv3

18.75 18.75 18.75 T:sosemanuk

19.44? 19.45? 22.92? T:tpy6

23.64? 27.78? 33.34? T:panama

28.82? 34.59? 41.67? T:aes128estream

34.03? 34.72? 40.97? T:tpy

35.42 35.42 36.11 T:tpypy

34.59? 41.67? 49.31? T:aes256ctr

36.81? 43.06? 43.75? T:aes192ctr

38.20? 44.45? 58.34? T:aes128ctr

41.50? 59.73? 59.73? T:aes256estream

75.51? 109.04? 109.73? T:ocelot1

97.23? 116.68? 116.68? T:ocelot2

136.62? 164.60? 165.29? T:amastrid

Cycles/byte for 64 bytes

25% 50% 75% stream

25.00? 25.02? 31.25? salsa208

31.12 31.23 31.25 salsa2012

25.00? 31.25? 31.25? chacha12

25.00? 31.25? 31.25? chacha8

31.25 31.25 31.27 chacha20

31.25 31.25 31.27 salsa20

31.25? 37.50? 37.50? T:speck64128ctr

43.75? 43.77? 49.98? xsalsa20

56.25 56.25 56.27 T:cryptmtv3

57.08 62.25 62.48 T:aes128estream

68.75 68.77 75.00 T:nlsv2

75.00 75.02 77.83 T:aes256estream

77.83 81.27 81.27 tango642

81.27 81.27 87.50 T:aes128ctr

87.50 87.52 87.52 T:aes192ctr

93.73 93.77 100.00 T:aes256ctr

100.02 100.02 106.28 T:sosemanuk

118.75 118.77 118.77 T:tpy6

181.27 181.58 187.52 T:panama

237.52 237.53 256.28 T:tpypy

250.02 256.25 256.28 T:tpy

254.22 256.27 256.28 T:ocelot1

300.05 306.27 306.28 T:ocelot2

368.78 375.03 381.28 T:amastrid

Cycles/byte for 8 bytes

25% 50% 75% stream

199.88 200.00 200.12 T:speck64128ctr

200.00? 200.12? 250.00? chacha8

249.88 250.00 250.12 chacha12

249.88? 250.00? 300.00? salsa2012

250.00? 250.00? 350.12? salsa208

250.00? 250.12? 300.00? chacha20

250.00? 250.12? 300.00? salsa20

290.50 290.62 300.00 T:aes128estream

332.00 350.00 350.12 T:aes256estream

350.00? 350.12? 400.00? xsalsa20

350.12? 399.88? 400.00? T:cryptmtv3

400.00 400.00 400.12 T:nlsv2

500.00 500.12 550.12 T:aes128ctr

500.00 550.00 550.12 T:aes192ctr

539.62 550.00 550.12 T:aes256ctr

581.12 600.00 600.12 tango642

800.00 800.12 850.12 T:sosemanuk

900.00 900.00 900.12 T:tpy6

1450.00 1452.62 1500.12 T:panama

1550.00 1550.12 1550.25 T:ocelot1

1850.12? 1850.25? 2350.25? T:tpypy

1950.12 1950.12 1950.25 T:ocelot2

1950.12 2000.12 2000.25 T:tpy

2448.62 2450.12 2450.25 T:amastrid

eBACS: ECRYPT Benchmarking of Cryptographic Systems

Measurements of stream ciphers on one machine: armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

Measurements of stream ciphers on one machine: armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; `novena`, `supercop-20220506`