FELICS Block Ciphers Brief Results

From CryptoLUX
Jump to: navigation, search

Note:

  • Block and key sizes are expressed in bits [b].
  • Code size (Code) and RAM consumption (RAM) are expressed in bytes [B].
  • Execution time (Time) is expressed in cycles [cyc.].
  • Security level (Sec.) is the ratio of the number of rounds broken in a single key setting to the total number of rounds.
  • For ciphers against which there is no attack (to the best of our knowledge) the security level is set to -1.
  • Details about cryptographic properties of each cipher are available here.
  • Results for assembly implementations are displayed in italic.
  • Cipher-r denotes the cipher Cipher with r rounds instead of the default number of rounds.


Scenario 1

A description of scenario 1 can be found here.

Results for scenario 1 - I: Encryption + Decryption (including key schedule). Encrypt 128 bytes of data using CBC mode. For each cipher, an optimal implementation on each architecture is selected.
Cipher Info Results
AVR MSP ARM
Cipher Block [b] Key [b] Sec. Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] FOM
Chaskey 128 128 0.87 1318 227 21349 900 222 19058 450 236 8740 4.0
Chaskey-LTS 128 128 0.43 1318 227 33829 904 222 29170 450 236 11556 4.6
Speck 64 96 0.73 956 292 40666 576 290 36698 328 304 16100 5.1
Speck 64 128 0.74 864 300 45686 592 298 37850 402 312 17084 5.3
Simon 64 96 0.71 1074 361 64440 758 362 50932 466 376 24591 7.0
Simon 64 128 0.70 1112 373 67404 780 374 53112 530 388 23404 7.2
RECTANGLE 64 128 0.72 1108 351 65604 846 406 54564 627 432 36313 8.2
RECTANGLE 64 80 0.72 1142 350 67513 832 400 54431 631 426 37336 8.3
LEA 128 128 0.63 1650 629 61755 1154 630 51582 496 664 17410 8.3
SPARX 64 128 0.62 1188 390 66330 986 394 43437 1158 424 39680 8.9
SPARX 128 128 0.68 1726 751 84390 1118 760 67042 1118 788 67430 13.5
SKINNY 64 128 -1 1086 337 92891 1006 342 112402 788 372 95924 13.9
HIGHT 64 128 0.81 1404 331 95348 1258 330 129188 1440 380 89382 14.8
SKINNY 128 128 -1 1124 545 77451 1158 546 142974 866 572 95658 15.5
AES 128 128 0.70 3000 406 58973 2684 408 87850 3052 452 72828 15.7
Fantomas 128 128 -1 3524 229 141269 4164 234 57430 2926 280 95629 18.0
Robin 128 128 1 2484 229 183957 3170 238 76878 3700 1292 66398 18.5
Lilliput 64 80 -1 1884 474 82138 1940 470 132945 2322 572 117500 18.8
Robin* 128 128 -1 4458 239 153685 3312 238 88838 3864 1296 80046 20.2
RoadRunneR 64 128 0.58 2176 206 131430 3218 218 224521 2344 424 122499 21.8
RC5-20 64 128 0.80 3630 363 252858 4094 372 409826 568 384 30948 22.0
RoadRunneR 64 80 0.5 2200 329 152373 3088 338 252491 2584 394 103621 22.1
PRIDE 64 128 -1 2128 366 125036 2566 212 282041 1280 428 168659 24.8
LBlock 64 80 0.72 2666 480 196797 1632 324 316539 2232 534 160926 27.5
PRESENT 64 80 0.84 2150 446 246023 1838 450 205430 2116 478 274107 32.9
PRINCE 64 128 0.83 1930 365 300799 2028 236 451509 1660 444 232538 35.8
TWINE 64 80 0.64 3724 615 273413 3796 564 393320 2563 469 228923 37.5
Piccolo 64 80 0.56 1936 314 412551 1354 310 354195 1212 382 335247 41.2
LED 64 80 -1 4882 560 2213031 7004 252 2505640 3908 638 580575 144.7


Results for scenario 1 - II: Encryption (without key schedule). Encrypt 128 bytes of data using CBC mode. For each cipher, an optimal implementation on each architecture is selected.
Cipher Info Results
AVR MSP ARM
Cipher Block [b] Key [b] Sec. Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.]
Chaskey 128 128 0.87 568 25 10590 400 26 8144 192 32 3599
Chaskey-LTS 128 128 0.43 568 25 16990 402 26 13072 192 32 4687
Speck 64 96 0.73 302 12 18614 186 18 15007 116 28 7315
Speck 64 128 0.74 244 12 20710 186 18 15471 140 28 6159
Simon 64 96 0.71 332 16 30566 254 26 22415 144 32 10911
Simon 64 128 0.70 332 16 31846 254 26 23327 178 32 10382
RECTANGLE 64 128 0.72 344 15 31622 234 24 26543 202 44 18072
RECTANGLE 64 80 0.72 348 15 32038 234 24 26543 202 44 17233
LEA 128 128 0.63 484 25 28246 366 34 24240 164 64 7568
SPARX 64 128 0.62 362 10 31078 342 22 16863 432 48 18537
SPARX 128 128 0.68 618 19 38734 404 36 26896 428 60 30098
SKINNY 64 128 -1 278 13 43270 290 26 51727 274 52 45547
HIGHT 64 128 0.81 400 15 46774 462 22 59039 504 68 42001
SKINNY 128 128 -1 374 21 36958 442 30 60840 360 52 44381
AES 128 128 0.70 1032 26 24990 1022 36 34518 1200 76 31087
Fantomas 128 128 -1 1656 23 69574 1954 42 29038 1412 72 48709
Robin 128 128 1 1656 25 90950 1976 44 39350 2352 1116 37404
Lilliput 64 80 -1 506 26 35926 438 24 56312 640 128 52989
Robin* 128 128 -1 2464 35 73593 2014 44 42014 2408 1112 39353
RoadRunneR 64 128 0.58 952 28 64529 1534 50 111175 1516 108 61025
RC5-20 64 128 0.80 1222 15 75532 1282 24 140402 156 28 11871
RoadRunneR 64 80 0.5 1134 33 60113 1372 54 110967 1516 108 50961
PRIDE 64 128 -1 980 20 57953 1830 48 133399 776 84 80937
LBlock 64 80 0.72 1064 148 95297 638 28 152399 1040 212 80765
PRESENT 64 80 0.84 874 15 121606 778 28 98303 948 44 134614
PRINCE 64 128 0.83 1236 161 149385 1510 40 224495 1284 236 115245
TWINE 64 80 0.64 1528 105 133841 1594 114 191063 1044 108 111533
Piccolo 64 80 0.56 888 33 204534 632 38 172954 536 88 162169
LED 64 80 -1 2410 224 1072353 4362 82 1186231 2124 304 266565


Results for scenario 1 - III: Decryption (without key schedule). Encrypt 128 bytes of data using CBC mode. For each cipher, an optimal implementation on each architecture is selected.
Cipher Info Results
AVR MSP ARM
Cipher Block [b] Key [b] Sec. Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.]
Chaskey 128 128 0.87 750 67 10759 500 62 10914 258 76 5141
Chaskey-LTS 128 128 0.43 750 67 16839 502 62 16098 258 76 6869
Speck 64 96 0.73 504 40 20775 280 38 20483 172 52 8207
Speck 64 128 0.74 442 40 23575 280 38 21059 218 52 10448
Simon 64 96 0.71 526 45 31367 352 46 26323 220 60 12827
Simon 64 128 0.70 526 45 32647 352 46 27299 244 60 11819
RECTANGLE 64 128 0.72 528 41 32583 340 46 25219 268 72 17059
RECTANGLE 64 80 0.72 552 46 33703 340 46 25219 268 72 18852
LEA 128 128 0.63 678 69 29743 466 70 24082 220 104 9095
SPARX 64 128 0.62 564 38 34071 452 42 25635 540 72 20459
SPARX 128 128 0.68 838 63 42383 520 72 37682 522 100 35446
SKINNY 64 128 -1 470 41 45159 386 46 55443 330 76 48393
HIGHT 64 128 0.81 586 43 47383 578 42 67747 584 92 46644
SKINNY 128 128 -1 572 65 38487 512 66 78290 414 92 49850
AES 128 128 0.70 1416 70 32455 1432 72 52150 1698 116 40921
Fantomas 128 128 -1 2380 69 71695 2722 74 28392 2026 120 46920
Robin 128 128 1 1852 69 93007 2218 78 37528 2372 1132 28994
Lilliput 64 80 -1 698 70 36479 542 60 59322 714 168 55076
Robin* 128 128 -1 3018 79 80092 2322 78 46824 2480 1136 40693
RoadRunneR 64 128 0.58 1224 54 66901 1684 66 113346 1596 124 60279
RC5-20 64 128 0.80 1408 43 76331 1406 48 144466 224 64 13197
RoadRunneR 64 80 0.5 1398 59 62245 1514 68 111794 1592 124 50359
PRIDE 64 128 -1 1210 46 61381 1972 60 148642 828 108 84838
LBlock 64 80 0.72 1334 174 96517 736 50 157523 1100 228 78094
PRESENT 64 80 0.84 1064 44 121847 886 48 103395 1072 76 138099
PRINCE 64 128 0.83 1442 189 151163 1598 60 226867 1356 268 117246
TWINE 64 80 0.64 1756 129 135461 1736 130 195186 1112 132 112923
Piccolo 64 80 0.56 1124 60 206439 756 56 179953 664 128 172230
LED 64 80 -1 2980 266 1140309 3022 86 1318658 2284 344 313559


Scenario 2

A description of scenario 2 can be found here.

Results for scenario 2 - I: Balanced (globally efficient). Encrypt 128 bits of data using CTR mode. For each cipher, an optimal implementation on each architecture is selected.
Cipher Info Results
AVR MSP ARM
Cipher Block [b] Key [b] Sec. Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] FOM
Chaskey 128 128 0.87 616 78 1488 388 70 1332 240 84 275 4.1
Chaskey-LTS 128 128 0.43 616 78 2288 390 70 1948 240 84 399 4.7
Speck 64 96 0.73 538 57 2702 372 48 2068 320 64 712 4.9
Speck 64 128 0.74 484 57 2972 332 48 2256 324 64 738 5.0
Simon 64 96 0.71 632 61 4324 460 56 3124 484 72 1167 7.0
Simon 64 128 0.70 640 61 4500 468 56 3238 456 72 1300 7.2
LEA 128 128 0.63 898 78 4046 722 78 3344 544 120 913 7.8
SPARX 64 128 0.62 694 55 4452 580 52 2430 728 80 2121 8.7
RECTANGLE 64 128 0.72 634 60 4436 480 54 3640 508 84 2135 8.7
RECTANGLE 64 80 0.72 638 60 4488 480 54 3640 508 84 2135 8.7
SPARX 128 128 0.68 1176 72 5501 1188 78 2932 1488 112 2539 12.6
AES 128 128 0.70 1238 79 3431 1170 80 4617 1372 132 3786 14.5
RC5-20 64 128 0.80 1522 62 8471 1494 56 15670 420 68 1559 15.0
SKINNY 64 128 -1 560 58 6080 472 56 6788 516 92 5863 15.6
HIGHT 64 128 0.81 668 60 6286 636 52 7702 740 108 5289 15.9
SKINNY 128 128 -1 732 74 5231 734 74 7919 676 108 5442 16.3
Lilliput 64 80 -1 776 79 4622 998 90 5647 1488 180 6340 18.9
Fantomas 128 128 -1 1714 78 9341 1920 78 3646 1836 132 4862 19.0
Robin 128 128 1 2488 112 8380 1942 80 4935 1844 132 6351 22.2
Robin* 128 128 -1 2486 110 8766 1980 80 5268 1992 140 6532 23.0
RoadRunneR 64 80 0.5 1452 74 7847 1536 76 13798 1404 124 6429 23.4
RoadRunneR 64 128 0.58 1214 67 6305 1724 74 13340 1428 124 7653 24.5
PRIDE 64 128 -1 1932 72 5709 1842 68 15480 2184 120 7099 26.4
LBlock 64 80 0.72 1402 59 10881 804 58 19372 932 228 10395 30.7
PRESENT 64 80 0.84 1326 60 16904 1072 58 12610 1300 84 16864 38.7
TWINE 64 80 0.64 1502 60 22167 1922 136 23938 952 124 13336 40.6
PRINCE 64 128 0.83 1394 78 19930 1576 76 28306 1364 284 14817 44.8
Piccolo 64 80 0.56 1142 78 26052 798 76 21754 700 136 21090 49.6
LED 64 80 -1 2590 265 134921 4422 104 148334 1908 320 34137 153.3


Results for scenario 2 - II: Small code size & RAM. Encrypt 128 bits of data using CTR mode. For each cipher, an optimal implementation on each architecture is selected.
Cipher Info Results
AVR MSP ARM
Cipher Block [b] Key [b] Sec. Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.]
AES 128 128 0.70 1238 79 3431 1170 80 4617 980 156 35250
Chaskey 128 128 0.87 616 78 1488 388 70 1332 184 80 723
Chaskey-LTS 128 128 0.43 616 78 2288 390 70 1948 184 80 859
Fantomas 128 128 -1 1718 76 9544 1412 74 6234 1400 100 7761
HIGHT 64 128 0.81 822 54 6157 636 52 7702 526 96 13593
LBlock 64 80 0.72 908 60 17860 804 58 19372 602 84 14685
LEA 128 128 0.63 898 78 4046 722 78 3344 540 88 1744
LED 64 80 -1 1284 101 237014 950 102 207590 746 128 85159
Lilliput 64 80 -1 776 79 4622 650 68 7353 824 124 26858
Piccolo 64 80 0.56 1296 72 25923 784 70 21916 656 108 22139
PRESENT 64 80 0.84 1480 54 16775 802 62 617154 596 80 244598
PRIDE 64 128 -1 910 70 16790 944 68 26224 688 116 15849
PRINCE 64 128 0.83 1370 76 20754 1518 70 32558 1208 132 17079
RC5-20 64 128 0.80 938 62 20917 524 54 28331 352 60 1795
RECTANGLE 64 128 0.72 834 52 4591 480 54 3640 440 76 2369
RECTANGLE 64 80 0.72 834 52 4591 480 54 3640 440 76 2369
RoadRunneR 64 80 0.5 1452 74 7847 628 88 79370 588 140 21328
RoadRunneR 64 128 0.58 954 70 17714 620 82 28270 724 88 14582
Robin 128 128 1 1714 80 12169 1406 72 7951 1388 112 10174
Robin* 128 128 -1 1758 78 15028 1452 76 9997 1432 112 11838
Simon 64 96 0.71 720 55 4447 416 56 3502 320 60 2171
Simon 64 128 0.70 728 55 4635 424 56 3634 336 64 2562
SKINNY 64 128 -1 714 52 5951 472 56 6788 448 84 8384
SKINNY 128 128 -1 732 74 5231 734 74 7919 656 100 8165
SPARX 64 128 0.62 848 49 4323 496 54 2984 486 76 3392
SPARX 128 128 0.68 1204 71 5625 904 80 3676 932 108 4021
Speck 64 96 0.73 634 51 2755 328 48 2198 250 60 1660
Speck 64 128 0.74 638 51 2843 332 48 2256 254 60 1036
TWINE 64 80 0.64 850 64 42350 850 56 56294 560 80 28192


Results for scenario 2 - III: Best execution time. Encrypt 128 bits of data using CTR mode. For each cipher, an optimal implementation on each architecture is selected.
Cipher Info Results
AVR MSP ARM
Cipher Block [b] Key [b] Sec. Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.] Code [B] RAM [B] Time [cyc.]
AES 128 128 0.70 2944 86 2971 8844 92 2862 6612 368 2262
Chaskey 128 128 0.87 2034 77 1372 1542 68 858 424 84 234
Chaskey-LTS 128 128 0.43 3474 77 2140 2566 68 1434 680 84 314
Fantomas 128 128 -1 2440 114 6596 1920 78 3646 1824 1144 3676
HIGHT 64 128 0.81 822 54 6157 808 52 7318 740 108 5289
LBlock 64 80 0.72 8562 64 10447 10556 64 15212 7240 236 8117
LEA 128 128 0.63 5128 80 3401 4340 78 2202 1272 112 586
LED 64 80 -1 2590 265 134921 4422 104 148334 1908 320 34137
Lilliput 64 80 -1 948 79 4542 1234 88 5373 1488 180 6340
Piccolo 64 80 0.56 1296 72 25923 966 70 21448 700 136 21090
PRESENT 64 80 0.84 1480 54 16775 1244 58 12226 1300 84 16864
PRIDE 64 128 -1 1932 72 5709 1842 68 15480 2184 120 7099
PRINCE 64 128 0.83 12056 78 14367 15728 76 21124 11176 284 11487
RC5-20 64 128 0.80 1676 56 8342 2978 50 14410 1112 64 1185
RECTANGLE 64 128 0.72 788 54 4307 2272 52 2992 800 100 1707
RECTANGLE 64 80 0.72 792 54 4359 2272 52 2992 800 100 1707
RoadRunneR 64 80 0.5 1452 74 7847 1536 76 13798 1404 124 6429
RoadRunneR 64 128 0.58 1214 67 6305 1724 74 13340 1428 124 7653
Robin 128 128 1 2488 112 8380 1942 80 4935 1848 1148 4806
Robin* 128 128 -1 2486 110 8766 1980 80 5268 1920 1156 5097
Simon 64 96 0.71 1058 55 4083 824 56 2600 484 72 1167
Simon 64 128 0.70 930 55 4283 736 56 2744 456 72 1300
SKINNY 64 128 -1 714 52 5951 644 56 6404 516 92 5863
SKINNY 128 128 -1 904 74 5151 1002 74 7492 676 108 5442
SPARX 64 128 0.62 3170 47 3763 1916 46 1868 1024 80 2044
SPARX 128 128 0.68 7546 70 4806 4518 68 2274 2296 108 2470
Speck 64 96 0.73 1326 52 2475 1026 48 1574 612 60 549
Speck 64 128 0.74 1050 52 2555 856 48 1632 628 60 570
TWINE 64 80 0.64 2014 145 18771 1922 136 23938 952 124 13336


Note:

  • Block and key sizes are expressed in bits [b].
  • Code size (Code) and RAM consumption (RAM) are expressed in bytes [B].
  • Execution time (Time) is expressed in cycles [cyc.].
  • Security level (Sec.) is the ratio of the number of rounds broken in a single key setting to the total number of rounds.
  • For ciphers against which there is no attack (to the best of our knowledge) the security level is set to -1.
  • Details about cryptographic properties of each cipher are available here.
  • Results for assembly implementations are displayed in italic.
  • Cipher-r denotes the cipher Cipher with r rounds instead of the default number of rounds.