Measurements of stream ciphers on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20250307
[Page version: 20250419 12:17:14]
eBASC
(ECRYPT Benchmarking
of Stream Ciphers)
is a project
to measure the performance of stream ciphers.
This page presents benchmark results collected in eBASC:
- Speed (cycles/byte) of encrypting an 8-byte message.
- Speed of encrypting a 64-byte message.
- Speed of encrypting a 576-byte message.
- Speed of encrypting a 1536-byte message.
- Speed of encrypting a 4096-byte message.
- Speed of encrypting a long message.
This is computed as 1/3072 of the difference in cycle counts
between encrypting 4096-byte messages and encrypting 1024-byte messages.
Graphs show timings for all message lengths between 0 and 4096 bytes.
The stair-step shape of a typical curve on the graphs
reflects the fact that these stream ciphers handle messages in blocks,
such as 64-byte blocks.
Each table row lists
the first quartile of many speed measurements,
the median of many speed measurements,
the third quartile of many speed measurements, and
the name of the primitive.
Measurements with large variance are indicated in red with question marks.
The symbol
T:
(starting with supercop-20200816)
means that the SUPERCOP database
at the time of benchmarking did not list constant time
as a goal for this implementation.
The symbol
T!!!
means that constant time was listed as a goal for this implementation,
but that the implementation failed TIMECOP.
(TIMECOP failures are not necessarily security issues;
they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)
There is a
separate page
with more information about each stream cipher and each implementation.
Designers and implementors
interested in submitting new stream ciphers and new implementations
should read the call for submissions.
Test results
Graphs:
old
(bytes,cycles)
| Cycles/byte for long messages |
|---|
| 25% | 50% | 75% | stream |
|---|
| 1.06 | 1.07 | 1.11 | tango642 |
| 1.74 | 1.74 | 1.75 | chacha8 |
| 1.87 | 1.88 | 1.90 | salsa208 |
| 2.45 | 2.46 | 2.47 | chacha12 |
| 2.66 | 2.66 | 2.67 | salsa2012 |
| 2.79 | 2.80 | 2.81 | T:hc128 |
| 3.69 | 3.70 | 3.75 | T:tpy |
| 3.72 | 3.73 | 3.74 | T:cryptmtv3 |
| 3.74 | 3.74 | 3.75 | T:tpy6 |
| 3.84 | 3.85 | 3.85 | T:nlsv2 |
| 3.87 | 3.88 | 3.89 | chacha20 |
| 3.89 | 3.90 | 3.91 | T:sosemanuk |
| 3.95 | 3.95 | 3.99 | T:hc256 |
| 4.00 | 4.00 | 4.00 | T:trivium |
| 4.14 | 4.16 | 4.23 | T:snow20 |
| 4.23 | 4.24 | 4.24 | T:rabbit |
| 4.24 | 4.24 | 4.27 | xsalsa20 |
| 4.24 | 4.25 | 4.27 | salsa20 |
| 4.25 | 4.26 | 4.28 | T:panama |
| 4.69 | 4.69 | 4.70 | T:lexv2 |
| 5.22 | 5.24 | 5.25 | T:tpypy |
| 9.67 | 9.69 | 9.70 | T:aes128estream |
| 18.02 | 18.03 | 18.07 | T:aes256estream |
| 21.72? | 24.75? | 24.80? | T:aes128ctr |
| 24.11? | 25.34? | 46.07? | T:aes192ctr |
| 28.55 | 29.32 | 30.13 | T:ocelot1 |
| 30.19 | 30.38 | 30.85 | T:ocelot2 |
| 28.59 | 31.42 | 31.76 | T:aes256ctr |
| 48.19 | 49.59 | 50.93 | T:amastrid |
|
| Cycles/byte for 4096 bytes |
|---|
| 25% | 50% | 75% | stream |
|---|
| 1.31 | 1.32 | 1.35 | tango642 |
| 1.78 | 1.78 | 1.78 | chacha8 |
| 1.90 | 1.91 | 1.92 | salsa208 |
| 2.49 | 2.49 | 2.49 | chacha12 |
| 2.69 | 2.69 | 2.69 | salsa2012 |
| 3.91 | 3.92 | 3.92 | chacha20 |
| 4.06 | 4.06 | 4.06 | T:nlsv2 |
| 4.15 | 4.15 | 4.15 | T:sosemanuk |
| 4.17 | 4.17 | 4.17 | T:trivium |
| 4.27 | 4.27 | 4.31 | T:snow20 |
| 4.27 | 4.27 | 4.29 | salsa20 |
| 4.36 | 4.36 | 4.36 | T:rabbit |
| 4.37 | 4.37 | 4.38 | T:cryptmtv3 |
| 4.39 | 4.39 | 4.40 | xsalsa20 |
| 4.70 | 4.70 | 4.71 | T:tpy6 |
| 4.85 | 4.85 | 4.85 | T:lexv2 |
| 5.55 | 5.55 | 5.56 | T:panama |
| 5.63 | 5.63 | 5.64 | T:tpy |
| 7.12 | 7.12 | 7.13 | T:tpypy |
| 7.30 | 7.30 | 7.31 | T:hc128 |
| 9.75 | 9.75 | 9.75 | T:aes128estream |
| 15.67 | 15.67 | 15.70 | T:hc256 |
| 18.15 | 18.15 | 18.17 | T:aes256estream |
| 25.19 | 25.23 | 25.26 | T:aes128ctr |
| 28.69? | 28.76? | 42.17? | T:aes192ctr |
| 30.80 | 31.33 | 31.81 | T:ocelot1 |
| 32.07 | 32.07 | 32.22 | T:aes256ctr |
| 32.32 | 32.43 | 32.74 | T:ocelot2 |
| 51.02 | 51.98 | 52.93 | T:amastrid |
|
| Cycles/byte for 1536 bytes |
|---|
| 25% | 50% | 75% | stream |
|---|
| 1.73 | 1.73 | 1.73 | tango642 |
| 1.82 | 1.82 | 1.84 | chacha8 |
| 1.95 | 1.95 | 1.96 | salsa208 |
| 2.52 | 2.53 | 2.55 | chacha12 |
| 2.73 | 2.74 | 2.74 | salsa2012 |
| 3.95 | 3.99 | 4.00 | chacha20 |
| 4.31 | 4.33 | 4.33 | salsa20 |
| 4.44 | 4.45 | 4.50 | T:snow20 |
| 4.45 | 4.45 | 4.45 | T:trivium |
| 4.54 | 4.55 | 4.57 | T:nlsv2 |
| 4.56 | 4.57 | 4.57 | T:rabbit |
| 4.61 | 4.61 | 4.63 | T:sosemanuk |
| 4.61 | 4.62 | 4.64 | xsalsa20 |
| 5.11 | 5.11 | 5.11 | T:lexv2 |
| 5.99 | 5.99 | 5.99 | T:cryptmtv3 |
| 6.30 | 6.32 | 6.34 | T:tpy6 |
| 7.68 | 7.68 | 7.71 | T:panama |
| 8.83 | 8.85 | 8.88 | T:tpy |
| 9.85 | 9.89 | 9.90 | T:aes128estream |
| 10.26 | 10.26 | 10.28 | T:tpypy |
| 14.78 | 14.79 | 14.80 | T:hc128 |
| 18.33 | 18.34 | 18.38 | T:aes256estream |
| 25.98? | 26.05? | 34.84? | T:aes128ctr |
| 32.95 | 32.95 | 33.27 | T:aes256ctr |
| 34.47 | 34.57 | 34.85 | T:ocelot1 |
| 35.18 | 35.18 | 35.23 | T:hc256 |
| 35.81 | 36.15 | 36.24 | T:ocelot2 |
| 38.34? | 38.41? | 48.42? | T:aes192ctr |
| 55.22 | 56.59 | 58.17 | T:amastrid |
|
| Cycles/byte for 576 bytes |
|---|
| 25% | 50% | 75% | stream |
|---|
| 2.11 | 2.11 | 2.11 | chacha8 |
| 2.20 | 2.23 | 2.23 | salsa208 |
| 2.83 | 2.83 | 2.83 | tango642 |
| 2.94 | 2.95 | 2.97 | chacha12 |
| 3.06 | 3.07 | 3.07 | salsa2012 |
| 4.62 | 4.64 | 4.65 | chacha20 |
| 4.79 | 4.82 | 4.83 | salsa20 |
| 4.91 | 4.98 | 5.01 | T:snow20 |
| 5.12 | 5.13 | 5.14 | T:rabbit |
| 5.19 | 5.19 | 5.20 | T:trivium |
| 5.64 | 5.64 | 5.66 | xsalsa20 |
| 5.59 | 5.64 | 5.64 | T:nlsv2 |
| 5.81 | 5.83 | 5.83 | T:lexv2 |
| 6.04 | 6.04 | 6.05 | T:sosemanuk |
| 6.87 | 6.87 | 6.88 | T:cryptmtv3 |
| 10.16 | 10.22 | 10.27 | T:aes128estream |
| 10.57 | 10.57 | 10.63 | T:tpy6 |
| 13.39 | 13.42 | 13.47 | T:panama |
| 17.37 | 17.44 | 17.50 | T:tpy |
| 18.64 | 18.69 | 18.69 | T:tpypy |
| 18.90 | 18.90 | 18.92 | T:aes256estream |
| 28.06? | 28.16? | 37.08? | T:aes128ctr |
| 34.79 | 34.81 | 34.81 | T:hc128 |
| 35.34 | 35.40 | 35.64 | T:aes256ctr |
| 40.72? | 40.91? | 51.80? | T:aes192ctr |
| 43.28 | 43.65 | 43.96 | T:ocelot1 |
| 44.66 | 44.83 | 45.18 | T:ocelot2 |
| 64.33 | 65.40 | 66.06 | T:amastrid |
| 87.30 | 87.35 | 87.47 | T:hc256 |
|
| Cycles/byte for 64 bytes |
|---|
| 25% | 50% | 75% | stream |
|---|
| 4.50 | 4.56 | 4.56 | salsa208 |
| 4.77 | 4.77 | 4.77 | chacha8 |
| 5.95 | 5.95 | 5.98 | salsa2012 |
| 6.69 | 6.69 | 6.72 | chacha12 |
| 8.78 | 8.83 | 8.86 | salsa20 |
| 10.53 | 10.53 | 10.56 | chacha20 |
| 11.22 | 11.33 | 11.42 | T:snow20 |
| 11.97 | 12.02 | 12.08 | T:rabbit |
| 13.95 | 13.95 | 14.06 | T:aes128estream |
| 14.45 | 14.45 | 14.47 | T:trivium |
| 14.52 | 14.58 | 14.62 | T:lexv2 |
| 15.83 | 15.84 | 15.86 | xsalsa20 |
| 16.47 | 16.59 | 16.61 | tango642 |
| 17.30 | 17.53 | 17.75 | T:cryptmtv3 |
| 21.84 | 21.89 | 21.94 | T:sosemanuk |
| 22.39 | 22.61 | 22.64 | T:nlsv2 |
| 25.53 | 25.55 | 25.62 | T:aes256estream |
| 55.64 | 55.80 | 57.53 | T:aes128ctr |
| 64.45 | 64.52 | 64.84 | T:tpy6 |
| 65.52 | 66.39 | 67.11 | T:aes256ctr |
| 70.81 | 72.14 | 78.39 | T:aes192ctr |
| 86.06 | 86.66 | 87.17 | T:panama |
| 126.00 | 126.17 | 126.17 | T:tpypy |
| 125.80 | 127.02 | 127.11 | T:tpy |
| 159.83 | 159.86 | 160.27 | T:ocelot1 |
| 160.33 | 160.75 | 162.98 | T:ocelot2 |
| 190.45 | 192.58 | 197.05 | T:amastrid |
| 290.78 | 291.02 | 291.50 | T:hc128 |
| 754.05 | 754.05 | 754.41 | T:hc256 |
|
| Cycles/byte for 8 bytes |
|---|
| 25% | 50% | 75% | stream |
|---|
| 41.25 | 41.25 | 41.38 | chacha8 |
| 41.75 | 42.25 | 42.38 | salsa208 |
| 53.88 | 54.00 | 54.50 | salsa2012 |
| 55.12 | 55.38 | 60.50 | chacha12 |
| 58.25 | 58.62 | 59.88 | T:aes128estream |
| 72.50 | 72.50 | 72.50 | T:rabbit |
| 77.12 | 78.12 | 78.62 | salsa20 |
| 83.50 | 83.50 | 83.88 | T:lexv2 |
| 84.50 | 84.62 | 85.12 | chacha20 |
| 87.12 | 87.62 | 88.62 | T:snow20 |
| 89.38 | 89.38 | 89.38 | T:trivium |
| 96.12 | 96.62 | 98.12 | T:aes256estream |
| 101.12 | 102.12 | 103.88 | T:cryptmtv3 |
| 114.62 | 115.25 | 117.00 | T:nlsv2 |
| 125.38 | 125.38 | 125.50 | tango642 |
| 134.50 | 134.75 | 134.88 | xsalsa20 |
| 172.75 | 173.00 | 175.25 | T:sosemanuk |
| 298.25 | 302.75 | 328.50 | T:aes128ctr |
| 331.00 | 334.50 | 347.25 | T:aes256ctr |
| 333.38 | 345.00 | 369.88 | T:aes192ctr |
| 489.75 | 494.75 | 495.75 | T:tpy6 |
| 682.25 | 686.75 | 689.38 | T:panama |
| 974.00 | 976.75 | 976.88 | T:tpypy |
| 996.25 | 1003.38 | 1006.00 | T:tpy |
| 1071.38 | 1074.38 | 1088.75 | T:ocelot2 |
| 1070.50 | 1080.38 | 1086.88 | T:ocelot1 |
| 1320.62 | 1325.12 | 1329.38 | T:amastrid |
| 2317.50 | 2323.12 | 2325.88 | T:hc128 |
| 6025.62 | 6025.62 | 6026.12 | T:hc256 |
|
| 
