Result table

The table hereafter is the result of all benchmarks with our development environment. It is given to help you to select the appropriate algorithms for your application.

The use of the algorithm ECDH-ES with curves P-256, P-384 or P-521 is not recommended on PHP7.1 or 7.2. The cryptographic operations with those curves are done using a pure PHP function and hence very slow.

The use of the RSA algorithms with a very long key (more that 4096 bits) is quite slow, but offers a good protection.

The PBES2* algorithms are quite slow, but also offer a good protection (see https://en.wikipedia.org/wiki/PBKDF2). Default salt size (512 bits) and iterations (4096) and custom values (256/1024) used for the tests. Those values can be configured if needed.

subject

groups

mean

sign

JWS,EdDSA,Ed25519

139.323μs

verify

JWS,EdDSA,Ed25519

169.125μs

sign

JWS,ECDSA,ES256

139.144μs

verify

JWS,ECDSA,ES256

223.170μs

sign

JWS,ECDSA,ES384

941.535μs

verify

JWS,ECDSA,ES384

1,075.417μs

sign

JWS,ECDSA,ES512

504.271μs

verify

JWS,ECDSA,ES512

826.615μs

sign

JWS,hmac,HS256

19.593μs

verify

JWS,hmac,HS256

24.045μs

sign

JWS,hmac,HS384

20.061μs

verify

JWS,hmac,HS384

24.672μs

sign

JWS,hmac,HS512

19.838μs

verify

JWS,hmac,HS512

24.935μs

sign

JWS,none

14.021μs

verify

JWS,none

17.317μs

sign

JWS,RSASign,PS256

1,310.264μs

verify

JWS,RSASign,PS256

121.113μs

sign

JWS,RSASign,PS384

1,300.622μs

verify

JWS,RSASign,PS384

119.065μs

sign

JWS,RSASign,PS512

1,302.404μs

verify

JWS,RSASign,PS512

117.445μs

sign

JWS,RSASign,RS256

1,280.885μs

verify

JWS,RSASign,RS256

106.382μs

sign

JWS,RSASign,RS384

1,280.652μs

verify

JWS,RSASign,RS384

297.263μs

sign

JWS,RSASign,RS512

1,659.753μs

verify

JWS,RSASign,RS512

119.476μs

encryption/decryption

JWE,GCMKW,A128GCMKW

63.022μs, 60.639μs, 58.909μs (with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 respectively)

encryption/decryption

JWE,GCMKW,A128GCMKW

48.335μs, 50.021μs, 49.393μs (with A128GCM, A192GCM, A256GCM respectively)

encryption/decryption

JWE,GCMKW,A192GCMKW

59.719μs, 59.396μs, 60.329μs (with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 respectively)

encryption/decryption

JWE,GCMKW,A192GCMKW

48.432μs, 49.295μs, 50.244μs (with A128GCM, A192GCM, A256GCM respectively)

encryption/decryption

JWE,GCMKW,A256GCMKW

60.966μs, 60.621μs, 59.821μs (with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 respectively)

encryption/decryption

JWE,GCMKW,A256GCMKW

48.894μs, 49.165μs, 49.224μs (with A128GCM, A192GCM, A256GCM respectively)

encryption/decryption

JWE,KW,A128KW

159.758μs, 176.995μs, 210.580μs (with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 respectively)

encryption/decryption

JWE,KW,A128KW

93.752μs, 117.309μs, 162.917μs (with A128GCM, A192GCM, A256GCM respectively)

encryption/decryption

JWE,KW,A192KW

137.808μs, 176.636μs, 214.446μs (with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 respectively)

encryption/decryption

JWE,KW,A192KW

104.048μs, 122.472μs, 138.150μs (with A128GCM, A192GCM, A256GCM respectively)

encryption/decryption

JWE,KW,A256KW

139.867μs, 176.727μs, 208.664μs (with A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 respectively)

encryption/decryption

JWE,KW,A256KW

93.840μs, 115.313μs, 140.135μs (with A128GCM, A192GCM, A256GCM respectively)

encryption

JWE,RSAEnc,RSA1_5

from 178.368μs to 373.941μs (depending on the Content Encryption Algorithm and the key size)

decryption

JWE,RSAEnc,RSA1_5

from 354.921μs to 10,148.146μs (depending on the Content Encryption Algorithm and the key size)

encryption

JWE,RSAEnc,RSA-OAEP

from 188.228μs to 428.624μs (depending on the Content Encryption Algorithm and the key size)

decryption

JWE,RSAEnc,RSA-OAEP

from 381.853μs to 13,079.733μs (depending on the Content Encryption Algorithm and the key size)

encryption

JWE,RSAEnc,RSA-OAEP-256

from 195.231μs to 410.868μs (depending on the Content Encryption Algorithm and the key size)

decryption

JWE,RSAEnc,RSA-OAEP-256

from 354.090μs to 11,238.001μs (depending on the Content Encryption Algorithm and the key size)

encryption/decryption

JWE,PBES2,PBES2HS256A128KW

from 2,109.175μs (256 bit salt / 1024 counts) to 7,943.047μs (512 bit salt / 4096 counts)

encryption/decryption

JWE,PBES2,PBES2HS384A192KW

from 2,719.313μs (256 bit salt / 1024 counts) to 10,466.043μs (512 bit salt / 4096 counts)

encryption/decryption

JWE,PBES2,PBES2HS256A128KW

from 2,746.634μs (256 bit salt / 1024 counts) to 10,600.124μs (512 bit salt / 4096 counts)

encryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~45,198.922μs (with curve P-256)

encryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~77,320.816μs (with curve P-384)

encryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~120,709.648μs (with curve P-521)

encryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~453.445μs (with curve X25519)

decryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~21,249.059μs (with curve P-256)

decryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~37,207.750μs (with curve P-384)

decryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~57,072.871μs (with curve P-521)

decryption

JWE,ECDHES,ECDHESKW,ECDHESA128KW

~387.441μs (with curve X25519)

encryption