AES Ciphers: speed

Summary (Sorted Table)

The current table contains the numbers (number of cycles it takes to encrypt one block (128 bits)) for the best known (that are usually not the best possible) implementations on Pentium II, Alpha 211(2)64, UltraSPARC (or UltraSPARC-II) and the IA-64 machines plus the average over the four. The table is given in as is basis, and relies mostly on the data people have submitted to me. I have had no possibility the correctness of it. The darker entries correspond to implementations done by myself.
Algorithm Pentium II Alpha 21164 UltraSPARC IA-64 (any)Average
Second Round Finalists
Rijndael 232 210 (21264) 270 124 209.00
Twofish 258 255 (21264) 354 181 262.00
MARS 306 375 (21264) 825 255 440.25
RC6 223 360 (21264) 1144 150 469.25
Serpent 759 535 (21264) 1003 419 679.00
First Round (Non-Finalists)*
Crypton 381 499 477 452.3
DFC 392 310 775 492.3
E2 355 587 711 551.0
CAST-256 668 749 694 703.7
HPC 1468 420 1465 1117.7
Safer+ 1746 1502 3002 2083.0
Frog 2572 2572 2337 2493.7
DEAL 2339 2752 2781 2624.0

*Non-finalists are not that uptodate, since they receive generally less attention.

Maintained by Helger Lipmaa. A part of the page AES Ciphers: Speed.