A comprehensive performance empirical study of the symmetric algorithms:AES, 3DES, Blowfish and Twofish
Abstract
Developing software applications that provide services in all business fields such as finance, health, education, real estate and social media etc., must maintain various quality attributes, such as security, performance, availability, reliability, scalability, maintainability, usability and so on. If we talk about security for example, then we must take care of couple of properties like confidentiality, integrity, availability, non-repudiation and accountability. To achieve these targets there are different ways, one of them is using cryptographic mechanism. Cryptography has two basic types of algorithms, symmetric and asymmetric. Each of them provides encryption and decryption processes. In this paper, we conducted a performance evaluation between four of the symmetric algorithms AES, 3DES, Blowfish and Twofish. We evaluated the execution time, memory utilization and ciphertext size on the encryption and decryption processes. We performed the comparison against different files size by building a .NET application using C#. By analyzing the result, we noticed that AES has the lowest execution time in encryption and decryption processes, while Twofish has the highest execution time. In the encryption process, AES and 3DES consumes less memory than the blowfish and Twofish and they used very close amount of memory. While AES utilized less memory in the decryption. Finally, Blowfish and Twofish have the biggest ciphertext size.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
3DES is a symmetric block cipher that operates on 64-bit blocks of plaintext and applies the DES algorithm three consecutive times.
“Triple DES, commonly referred to as 3DES, was introduced as an enhancement to the original DES algorithm 46. It is a symmetric block cipher that operates on 64-bit blocks of plaintext. To strengthen the security of standard DES, the encryption process in 3DES involves applying the DES algorithm three consecutive times”
From A novel memristor-based hyperchaotic hybrid encryption system with DNA for image encryption on the Jetson TX2 (2025) · cites this paper as [46]
Cited by
Sorted by citations
Ulutas, H. (2025) · Scientific Reports · doi:10.1038/s41598-025-21604-3 · Cited by 17 · see citing works
- Authors
- Dibas, H., & Sabri, K. E.
- Affiliations
- University of Jordan (JO)
- ORCID
- Sabri, Khair Eddin
- Venue
- 2021 International Conference on Information Technology (ICIT)
- Publisher
- IEEE
- Published
- 2021-07-14
- Pages
- 344-349
- OpenAlex
- W3184693917
- Cited by
- 33
- References
- 0
- Citations by year
- 2026: 5 · 2025: 6 · 2024: 5 · 2023: 12 · 2022: 5
- FWCI
- 2.54
- Type
- conference paper
- Language
- en
- Open access
- closed
- Licence
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Physical Sciences › Computer Science › Artificial Intelligence › Computer Science and Engineering
- Physical Sciences › Computer Science › Computer Vision and Pattern Recognition › Chaos-based Image/Signal Encryption
- Keywords
- symmetric encryption algorithms, AES, 3DES, Blowfish, Twofish, encryption performance, decryption performance, execution time, memory usage, ciphertext size, file encryption
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review