VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of stream ciphers on one machine: armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

[Page version: 20240719 07:49:00]

eBASC (ECRYPT Benchmarking of Stream Ciphers) is a project to measure the performance of stream ciphers. This page presents benchmark results collected in eBASC:

Graphs show timings for all message lengths between 0 and 4096 bytes. The stair-step shape of a typical curve on the graphs reflects the fact that these stream ciphers handle messages in blocks, such as 64-byte blocks.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each stream cipher and each implementation. Designers and implementors interested in submitting new stream ciphers and new implementations should read the call for submissions.


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%stream
2.73?3.00?3.26?chacha8
4.174.304.30chacha12
4.82?6.25?6.25?salsa208
5.07?6.51?8.78?salsa2012
6.64?6.64?8.72?T:nlsv2
6.64?6.77?7.94?T:tpy
6.51?6.90?8.33?chacha20
5.99?7.16?9.51?T:sosemanuk
7.01?7.16?10.04?tango642
7.21?7.32?11.51?T:panama
6.77?7.42?9.12?T:tpy6
8.07?8.46?10.81?T:cryptmtv3
8.07?9.51?10.42?xsalsa20
8.07?10.29?10.55?salsa20
12.11?12.37?14.58?T:tpypy
12.11?13.93?16.80?T:speck64128ctr
25.5225.6527.74T:aes128ctr
29.1731.3431.56T:aes128estream
23.57?32.16?32.42?T:aes192ctr
27.40?37.37?37.61?T:aes256ctr
46.13?58.47?58.75?T:aes256estream
65.00?90.11?90.22?T:ocelot1
66.02?91.28?92.59?T:ocelot2
70.70?96.49?108.81?T:amastrid
Cycles/byte for 4096 bytes
25%50%75%stream
3.423.423.52chacha8
4.594.594.59chacha12
5.18?6.25?6.25?salsa208
5.76?6.84?8.20?salsa2012
6.84?7.13?8.20?chacha20
7.42?7.42?8.89?T:nlsv2
8.19?8.30?9.96?tango642
8.50?8.69?10.45?T:sosemanuk
8.50?8.99?10.25?T:tpy6
8.69?9.77?10.45?xsalsa20
9.86?10.06?11.82?T:cryptmtv3
8.50?10.16?10.25?salsa20
10.5510.6511.43T:tpy
11.27?11.35?13.58?T:panama
13.48?14.16?16.21?T:speck64128ctr
16.4116.5116.99T:tpypy
26.8626.9627.25T:aes128ctr
26.66?31.64?31.74?T:aes192ctr
31.8431.8631.94T:aes128estream
30.80?36.62?36.72?T:aes256ctr
46.61?55.86?56.06?T:aes256estream
73.36?88.09?88.09?T:ocelot1
75.30?89.95?90.83?T:ocelot2
90.63?109.29?112.90?T:amastrid
Cycles/byte for 1536 bytes
25%50%75%stream
3.914.174.17chacha8
5.735.735.73salsa208
5.21?6.25?6.25?chacha12
7.297.357.55salsa2012
8.858.858.86chacha20
8.859.129.12salsa20
10.6810.9410.94T:nlsv2
11.2011.4611.46T:sosemanuk
9.64?11.46?11.46?xsalsa20
8.43?12.24?12.24?tango642
11.46?13.54?13.80?T:tpy6
12.76?14.85?14.85?T:cryptmtv3
13.19?15.89?15.89?T:panama
14.32?16.93?16.93?T:speck64128ctr
16.93?17.19?20.31?T:tpy
19.5319.5319.53T:tpypy
29.1729.1729.17T:aes128ctr
27.24?32.55?32.55?T:aes128estream
32.43?32.64?39.07?T:aes256ctr
34.1234.1236.46T:aes192ctr
39.34?57.04?57.04?T:aes256estream
64.85?93.76?94.02?T:ocelot1
81.00?97.40?97.40?T:ocelot2
116.16?116.42?142.98?T:amastrid
Cycles/byte for 576 bytes
25%50%75%stream
5.56?6.25?6.94?chacha8
6.946.956.95chacha12
6.957.647.64salsa208
8.07?9.03?9.03?salsa2012
10.42?10.42?12.50?salsa20
9.72?11.11?11.11?chacha20
13.8914.5814.59xsalsa20
12.68?15.28?15.28?tango642
13.20?15.28?15.28?T:nlsv2
15.28?15.97?18.75?T:speck64128ctr
16.6717.3617.36T:cryptmtv3
18.7518.7518.75T:sosemanuk
19.44?19.45?22.92?T:tpy6
23.64?27.78?33.34?T:panama
28.82?34.59?41.67?T:aes128estream
34.03?34.72?40.97?T:tpy
35.4235.4236.11T:tpypy
34.59?41.67?49.31?T:aes256ctr
36.81?43.06?43.75?T:aes192ctr
38.20?44.45?58.34?T:aes128ctr
41.50?59.73?59.73?T:aes256estream
75.51?109.04?109.73?T:ocelot1
97.23?116.68?116.68?T:ocelot2
136.62?164.60?165.29?T:amastrid
Cycles/byte for 64 bytes
25%50%75%stream
25.00?25.02?31.25?salsa208
31.1231.2331.25salsa2012
25.00?31.25?31.25?chacha12
25.00?31.25?31.25?chacha8
31.2531.2531.27chacha20
31.2531.2531.27salsa20
31.25?37.50?37.50?T:speck64128ctr
43.75?43.77?49.98?xsalsa20
56.2556.2556.27T:cryptmtv3
57.0862.2562.48T:aes128estream
68.7568.7775.00T:nlsv2
75.0075.0277.83T:aes256estream
77.8381.2781.27tango642
81.2781.2787.50T:aes128ctr
87.5087.5287.52T:aes192ctr
93.7393.77100.00T:aes256ctr
100.02100.02106.28T:sosemanuk
118.75118.77118.77T:tpy6
181.27181.58187.52T:panama
237.52237.53256.28T:tpypy
250.02256.25256.28T:tpy
254.22256.27256.28T:ocelot1
300.05306.27306.28T:ocelot2
368.78375.03381.28T:amastrid
Cycles/byte for 8 bytes
25%50%75%stream
199.88200.00200.12T:speck64128ctr
200.00?200.12?250.00?chacha8
249.88250.00250.12chacha12
249.88?250.00?300.00?salsa2012
250.00?250.00?350.12?salsa208
250.00?250.12?300.00?chacha20
250.00?250.12?300.00?salsa20
290.50290.62300.00T:aes128estream
332.00350.00350.12T:aes256estream
350.00?350.12?400.00?xsalsa20
350.12?399.88?400.00?T:cryptmtv3
400.00400.00400.12T:nlsv2
500.00500.12550.12T:aes128ctr
500.00550.00550.12T:aes192ctr
539.62550.00550.12T:aes256ctr
581.12600.00600.12tango642
800.00800.12850.12T:sosemanuk
900.00900.00900.12T:tpy6
1450.001452.621500.12T:panama
1550.001550.121550.25T:ocelot1
1850.12?1850.25?2350.25?T:tpypy
1950.121950.121950.25T:ocelot2
1950.122000.122000.25T:tpy
2448.622450.122450.25T:amastrid