VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of stream ciphers on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240425

[Page version: 20240719 07:49:00]

eBASC (ECRYPT Benchmarking of Stream Ciphers) is a project to measure the performance of stream ciphers. This page presents benchmark results collected in eBASC:

Graphs show timings for all message lengths between 0 and 4096 bytes. The stair-step shape of a typical curve on the graphs reflects the fact that these stream ciphers handle messages in blocks, such as 64-byte blocks.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%stream
6.366.476.51T:tpy
6.636.656.69T:tpy6
8.178.238.42T:chacha8
9.259.259.26salsa208
9.359.359.36T:nlsv2
9.969.9710.00tango642
10.7410.8110.83T:tpypy
10.8310.8911.00T:sosemanuk
11.1911.1911.19chacha8
11.2911.4411.77T:cryptmtv3
11.4011.4511.57T:chacha12
12.2412.2412.24salsa2012
15.1115.2615.44T:panama
15.3115.3115.37chacha12
17.9818.0218.12T:chacha20
18.2818.3018.32salsa20
18.2918.3118.32xsalsa20
18.8818.9018.91chacha20
44.5044.5044.57T:aes128estream
47.4047.6847.93T:aes128ctr
54.8755.0055.46T:aes192ctr
56.7656.8357.08T:aes256estream
61.7861.8462.38T:aes256ctr
79.8879.9580.13T:ocelot1
84.3484.4584.55T:ocelot2
123.56?138.19?140.52?T:amastrid
Cycles/byte for 4096 bytes
25%50%75%stream
8.018.028.04T:tpy6
9.239.269.28T:chacha8
9.359.359.35salsa208
9.799.869.89T:tpy
9.939.939.93T:nlsv2
11.2311.2411.24tango642
11.2811.2811.29chacha8
12.3312.3312.34salsa2012
12.4912.5112.56T:chacha12
12.7112.7312.80T:sosemanuk
12.9813.0413.22T:cryptmtv3
14.2314.2514.26T:tpypy
15.4115.4115.45chacha12
18.3918.3918.41salsa20
18.6818.6818.69xsalsa20
18.9018.9118.97T:chacha20
19.1119.1519.27T:panama
19.5319.5319.54chacha20
44.6944.7044.74T:aes128estream
48.5148.6248.78T:aes128ctr
56.0256.0656.28T:aes192ctr
57.0657.0957.27T:aes256estream
62.7062.7263.11T:aes256ctr
83.4783.4883.62T:ocelot1
88.0088.0388.09T:ocelot2
132.53143.24144.82T:amastrid
Cycles/byte for 1536 bytes
25%50%75%stream
9.519.519.51salsa208
10.2910.2910.29T:tpy6
10.9510.9911.05T:chacha8
11.3011.3011.31T:nlsv2
11.4411.4411.46chacha8
12.4912.4912.50salsa2012
13.3213.3213.33tango642
14.2614.3014.34T:chacha12
15.4715.4915.60T:tpy
15.5715.5715.57chacha12
15.9816.0116.09T:sosemanuk
16.1216.2816.61T:cryptmtv3
18.5518.5718.62salsa20
19.2919.2919.33xsalsa20
19.9619.9920.03T:tpypy
20.3320.4220.51T:chacha20
20.5820.6120.93chacha20
25.5925.6825.72T:panama
45.0145.0245.05T:aes128estream
50.0450.0750.17T:aes128ctr
57.4757.5857.58T:aes256estream
57.5357.6358.26T:aes192ctr
64.0964.2764.75T:aes256ctr
89.3589.3589.36T:ocelot1
93.9693.9794.03T:ocelot2
131.53?150.75?153.67?T:amastrid
Cycles/byte for 576 bytes
25%50%75%stream
9.939.939.93salsa208
11.8711.8711.87chacha8
12.9312.9312.93salsa2012
14.8314.8314.83T:nlsv2
15.7815.9916.24T:chacha8
16.0016.0016.02chacha12
16.3716.3816.38T:tpy6
18.8418.9018.93tango642
18.9718.9719.09salsa20
19.6519.6720.06T:cryptmtv3
19.5619.8019.90T:chacha12
20.9620.9621.04xsalsa20
23.4223.4523.47chacha20
24.6824.7524.98T:sosemanuk
24.8025.0725.18T:chacha20
30.6130.6130.65T:tpy
35.3035.3035.31T:tpypy
42.7842.8943.46T:panama
45.8745.8845.88T:aes128estream
54.2354.3254.69T:aes128ctr
58.6858.6858.68T:aes256estream
61.3461.6662.59T:aes192ctr
68.1468.1968.91T:aes256ctr
105.05105.05105.27T:ocelot1
109.82109.83109.84T:ocelot2
173.27174.45176.49T:amastrid
Cycles/byte for 64 bytes
25%50%75%stream
15.2515.2515.25salsa208
17.1917.1917.19chacha8
18.2518.2518.25salsa2012
21.3121.3121.31chacha12
24.2824.2825.03salsa20
42.0942.0942.78xsalsa20
48.3148.3448.58T:cryptmtv3
56.8156.8156.91T:aes128estream
58.6659.0359.61chacha20
71.5071.5071.66T:nlsv2
73.9773.9874.03T:aes256estream
77.4278.8880.81T:chacha8
79.7082.6283.75T:chacha20
83.7384.5385.56T:chacha12
89.1790.4190.62tango642
94.2394.2894.44T:tpy6
104.11106.47107.34T:aes128ctr
109.81113.33114.91T:aes192ctr
118.06118.80119.48T:aes256ctr
123.64124.77126.30T:sosemanuk
224.34224.38224.69T:tpy
231.66231.66231.72T:tpypy
265.69266.28267.58T:panama
305.98306.00306.31T:ocelot1
312.23312.30312.38T:ocelot2
447.25448.28452.33T:amastrid
Cycles/byte for 8 bytes
25%50%75%stream
114.00114.00114.00salsa208
129.25129.25129.25chacha8
137.75137.75137.75salsa2012
162.25162.25162.25chacha12
186.00186.00191.50salsa20
194.75195.00199.00T:aes128estream
251.00251.00252.75T:aes256estream
327.50327.88335.50xsalsa20
357.00357.00357.12T:nlsv2
291.00?374.25?403.50?T:cryptmtv3
484.38486.88488.50chacha20
556.12559.25565.50T:aes128ctr
539.25568.38577.75T:aes192ctr
574.00574.88578.25T:aes256ctr
623.75650.25660.88T:chacha8
652.00659.50661.88tango642
668.75684.75693.50T:chacha20
695.00702.50710.50T:chacha12
705.25706.62726.88T:tpy6
980.12986.38994.00T:sosemanuk
1746.751747.001784.50T:tpy
1774.251774.251774.75T:tpypy
1891.251891.251892.00T:ocelot1
1900.751901.501903.75T:ocelot2
2078.752081.622099.75T:panama
2805.002810.622853.25T:amastrid