b2KIT

Encryption Benchmark

Benchmark WebCrypto API encryption and hashing performance in your browser across different algorithms and key sizes.

Tested tool guide Tested browser tools Checked August 16, 2026

What Encryption Benchmark does and how it behaves

Encryption Benchmark provides a local performance check for the encryption and digest algorithms and key sizes exposed in its controls. It runs the chosen Web Crypto workload in the active browser and presents timing results for that environment. The result describes this device, browser version, and test configuration, not cryptography in general. The common mistake is treating the fastest result as the best security choice. Speed and suitability are separate questions, and hashing results are not directly comparable with encryption results.

How the result is produced

1

Running a workload

A benchmark run applies the selected Web Crypto operation to test data inside the current browser and records the resulting duration. Algorithm and key-size selections apply only where Web Crypto defines them; digest choices do not have encryption key sizes. Because the work remains local to the page, the test data used for the run is not uploaded.

2

Comparing measurements

Read each timing as a measurement of one configured workload on one browser and device. For a useful comparison, keep the operation, input length, run settings, and surrounding conditions unchanged while varying only the algorithm or key size of interest. Repeating the same configuration helps reveal normal timing spread caused by scheduling, warm-up, and other activity.

Good uses

  • Checking whether a browser and device combination handles a chosen Web Crypto encryption configuration quickly enough for an interactive client-side feature.
  • Comparing the relative timing of two supported key sizes under the same algorithm before establishing a browser-side performance budget.
  • Reproducing a reported front-end slowdown by running the same encryption or digest configuration across different browsers, versions, or devices.

Limits and checks

  • Timings vary with processor load, power-saving state, browser version, background tabs, and repeated-run warm-up, so a single result is not definitive.
  • Compare only equivalent workloads. Different input lengths, operation counts, or operation types can outweigh the performance difference between algorithms or key sizes.
  • The benchmark measures performance, not cryptographic correctness, protocol compatibility, key-management quality, resistance to misuse, or suitability for a particular threat model.

Common questions

Why does the same benchmark produce different timings?

Browser timing is affected by concurrent work, operating-system scheduling, power management, thermal conditions, and whether related code has already run during the session. Small differences between runs are therefore expected. Repeat an unchanged configuration several times and compare its overall range rather than treating the fastest isolated measurement as the normal result.

Does the fastest result identify the encryption or hash I should use?

No. The result answers a performance question for the measured environment only. Algorithm choice also depends on the protocol being implemented, required security properties, interoperability, key handling, and the distinction between encryption and hashing. Use the benchmark after identifying acceptable configurations, not as a substitute for that security decision.

References and verification

The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.

Related Tools