This is an implementation of ROCCA-S: an efficient AES-based encryption scheme for beyond 5G, a fast authenticated encryption scheme optimized for platforms with AES-NI or ARM crypto extensions.
ROCCA-S has a 256 bit key size, a 128 bit nonce, processes 256 bit message blocks and outputs a 256 bit authentication tag.
ROCCA-S demonstrates high encryption performance. However, it's important to note that ROCCA-S is designed with asymmetric performance characteristics - decryption is expected to be slower than encryption.
Running on modern hardware with AES acceleration (Apple Silicon M4):
| Message Size | Encryption Speed | Decryption Speed | Asymmetry Factor |
|---|---|---|---|
| 64 bytes | 4.67 Gbps | 5.45 Gbps | 0.86x |
| 256 bytes | 23.91 Gbps | 24.01 Gbps | 1.00x |
| 1 KB | 70.34 Gbps | 60.62 Gbps | 1.16x |
| 4 KB | 140.54 Gbps | 89.47 Gbps | 1.57x |
| 16 KB | 169.52 Gbps | 107.31 Gbps | 1.58x |
| 64 KB | 189.78 Gbps | 111.82 Gbps | 1.70x |
As shown in the results, the performance asymmetry becomes more pronounced with larger message sizes, with decryption being up to 1.7x slower than encryption for 64 KB messages.
If your application requires consistent performance for both encryption and decryption operations, consider using another symmetric AEAD scheme.