As I understand it, ChaCha20 is slower than AES-CTR in hardware. Are there any hardware-optimized stream ciphers?

  • $\begingroup$ Generally stream ciphers are used when hardware based encryption is not available. Stream ciphers may have a large(-ish) state, which makes them less advantageous for hardware implementations. According to Wikipedia (about the eSTREAM competition): "but was not advanced to Phase 3 for Profile 2 because eSTREAM felt that it was probably not a good candidate for extremely resource constrained hardware environments.". $\endgroup$ – Maarten Bodewes Feb 20 '16 at 23:37
  • $\begingroup$ That same page mentions Grain, MICKEY and Trivium as candidates for hardware implementations. Note that these stream ciphers are almost 10 years old (and commercial crypto is around for less than 50 years). $\endgroup$ – Maarten Bodewes Feb 20 '16 at 23:46
  • $\begingroup$ How about AES-CTR? But yes, the eSTREAM portfolio has three hardware ciphers. Note that the eSTREAM portfolio version is Salsa20/12. So similarly ChaCha12 might be the one to compare to AES-256, if interested in speed. $\endgroup$ – otus Feb 21 '16 at 15:50

eSTREAM competition has 2 profile:software and hardware,and the goal of hardware profile was to design a stream cipher that it should be hardware-optimized,and the final candidates were grain v1 and Trivium and MICKEY v2.a comparison of hardware performance of Grain,trivium and MICHEY is on the below image:

enter image description here

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.