The Software Performance of Authenticated-Encryption Modes

  • Ted Krovetz
  • Phillip Rogaway
Conference paper

DOI: 10.1007/978-3-642-21702-9_18

Part of the Lecture Notes in Computer Science book series (LNCS, volume 6733)
Cite this paper as:
Krovetz T., Rogaway P. (2011) The Software Performance of Authenticated-Encryption Modes. In: Joux A. (eds) Fast Software Encryption. FSE 2011. Lecture Notes in Computer Science, vol 6733. Springer, Berlin, Heidelberg


We study software performance of authenticated-encryption modes CCM, GCM, and OCB. Across a variety of platforms, we find OCB to be substantially faster than either alternative. For example, on an Intel i5 (“Clarkdale”) processor, good implementations of CCM, GCM, and OCB encrypt at around 4.2 cpb, 3.7 cpb, and 1.5 cpb, while CTR mode requires about 1.3 cpb. Still we find room for algorithmic improvements to OCB, showing how to trim one blockcipher call (most of the time, assuming a counter-based nonce) and reduce latency. Our findings contrast with those of McGrew and Viega (2004), who claimed similar performance for GCM and OCB.


authenticated encryption cryptographic standards encryption speed modes of operation CCM GCM OCB 

Copyright information

© Springer-Verlag Berlin Heidelberg 2011

Authors and Affiliations

  • Ted Krovetz
    • 1
  • Phillip Rogaway
    • 2
  1. 1.Computer ScienceCalifornia State UniversitySacramentoUSA
  2. 2.Computer ScienceUniversity of CaliforniaDavisUSA

Personalised recommendations