Authenticated-Encryption Software Performance:
Comparison of OCB1, OCB2, and OCB3

On this page we compare the relative performance of OCB1, OCB2, and OCB3.
Relative performance of CCM, GCM, and OCB is presented on a companion webpage.
The meaning of entries in this table are explained there.

Environment Time
(cpb vs. bytes)
Overhead
(subtract time for CTR)
Mode
 (clickable) 
Over
4096
Time
4096
IPI
(cpb)
Size
(bytes)
Init
(cycles)

Intel x86 i5-650
“Clarkdale”
64-bit
NI


 OCB1
 OCB2
 OCB3
 CTR
0.21  
0.53  
0.21  
1.48  
1.80  
1.48  
1.27  
2.08  
2.41  
1.87  
1.37  
672  
448  
624  
244  
296  
185  
295  
115  

Intel x86 i5-650
“Clarkdale”
32-bit
NI


 OCB1
 OCB2
 OCB3
 CTR
0.21  
0.40  
0.20  
1.60  
1.79  
1.59  
1.39  
2.22  
2.42  
2.04  
1.52  
672  
448  
624  
244  
327  
197  
318  
130  

Intel x86 i5-650
“Clarkdale”
64-bit
Käsper-Schwabe


 OCB1
 OCB2
 OCB3
 CTR
0.54  
0.81  
0.31  
8.28  
8.55  
8.05  
7.74  
13.4  
13.6  
9.24  
8.98  
3136  
2912  
3216  
1424  
3440  
3350  
3430  
1180  

ARM Cortex-A8
32-bit
OpenSSL


 OCB1
 OCB2
 OCB3
 CTR
3.90  
4.02  
3.49  
29.3  
29.5  
28.9  
25.4  
31.5  
31.8  
30.9  
25.9  
800  
576  
784  
244  
2070  
1810  
2060  
236  

PowerPC 970
64-bit
OpenSSL


 OCB1
 OCB2
 OCB3
 CTR
0.39  
0.31  
-0.02  
38.2  
38.1  
37.5  
37.5  
41.0  
41.1  
39.6  
37.8  
800  
576  
784  
244  
2290  
2110  
2300  
309  

UltraSPARC III
64-bit
OpenSSL


 OCB1
 OCB2
 OCB3
 CTR
1.14  
0.39  
0.64  
25.5  
24.8  
25.0  
24.1  
27.7  
27.0  
26.5  
24.4  
800  
576  
784  
244  
1760  
1700  
1770  
213  

Last updated: 2010.11.05