aegis 0.6.4

AEGIS authenticated ciphers (AEGIS-128, AEGIS-256, AEGIS-128X, AEGIS-256X)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

# AEGIS for Rust

This is a Rust implementation of the
[AEGIS](https://datatracker.ietf.org/doc/draft-irtf-cfrg-aegis-aead/)
authenticated ciphers.

AEGIS is extremely fast on CPUs with AES acceleration, has a large nonce size,
and is key committing.

# [API documentation](https://docs.rs/aegis)

# Cargo flags

- `std`: allow dynamic allocations

`std` is the default.

- `pure-rust`: don't use the `cc` crate to take advantage of the implementations from [`libaegis`](https://github.com/jedisct1/libaegis). Setting this flag will substantially degrade performance, and parallel variants will not be available.

A benchmark can be run that way:

```sh
export RUSTFLAGS="-C target-cpu=native"
cargo bench
```

If `clang` or `zig cc` are present on your system, you can use with:

```sh
export CC="zig cc"
```
or
```sh
export CC="clang"
```

prior to running `cargo` commands.

# Benchmarks

Benchmarks take a 16384 bytes input block. Results are in bytes per second. `RUSTFLAGS` is set so that the Rust `aes-gcm` crate can take advantage of hardware acceleration.

## Rust implementations

Crates:

- `aes-gcm`
- `boring`
- `chacha20poly1305`
- `aegis`

## AMD Zen4

rust 1.73, zig cc 0.11

| cipher                       |     speed |
| ---------------------------- | --------: |
| aes128-gcm (`aes-gcm` crate) |  2.19 G/s |
| aes256-gcm (`aes-gcm` crate) |  2.03 G/s |
| chacha20-poly1305            |  2.00 G/s |
| aes256-gcm (`boring` crate)  |  5.93 G/s |
| aes128-gcm (`boring` crate)  |  6.33 G/s |
| aegis256                     | 15.40 G/s |
| aegis256x2                   | 30.60 G/s |
| aegis256x4                   | 46.17 G/s |
| aegis128l                    | 26.16 G/s |
| aegis128x2                   | 50.35 G/s |
| aegis128x4                   | 66.22 G/s |

## Macbook Pro - Apple M1

rust 1.73, Xcode

| cipher                       |     speed |
| ---------------------------- | --------: |
| aes256-gcm (`aes-gcm` crate) |  0.13 G/s |
| aes128-gcm (`aes-gcm` crate) |  0.17 G/s |
| chacha20-poly1305            |  0.26 G/s |
| aes256-gcm (`boring` crate)  |  5.14 G/s |
| aes128-gcm (`boring` crate)  |  6.08 G/s |
| aegis256                     |  7.94 G/s |
| aegis256x2                   | 10.56 G/s |
| aegis256x4                   | 11.20 G/s |
| aegis128l                    | 14.27 G/s |
| aegis128x2                   | 15.98 G/s |
| aegis128x4                   | 12.01 G/s |

## AWS t4g (aarch64, Graviton)

rust 1.74, clang 15

| cipher                       |    speed |
| ---------------------------- | -------: |
| aes256-gcm (`aes-gcm` crate) | 0.05 G/s |
| aes128-gcm (`aes-gcm` crate) | 0.06 G/s |
| chacha20-poly1305            | 0.10 G/s |
| aes256-gcm (`boring` crate)  | 1.79 G/s |
| aes128-gcm (`boring` crate)  | 2.12 G/s |
| aegis256                     | 3.14 G/s |
| aegis128l                    | 4.30 G/s |

## WebAssembly (Wasmtime, Zen4)

| cipher            |      speed |
| ----------------- | ---------: |
| aes256-gcm        |  62.97 M/s |
| aes128-gcm        |  73.83 M/s |
| chacha20-poly1305 |  88.92 M/s |
| aegis128l         | 537.49 M/s |

## WebAssembly (Wasmtime, Apple M1)

| cipher            |      speed |
| ----------------- | ---------: |
| aes256-gcm        |  49.43 M/s |
| aes128-gcm        |  59.37 M/s |
| chacha20-poly1305 | 177.85 M/s |
| aegis128l         | 533.85 M/s |