VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20250922

[Page version: 20251103 11:56:34]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 7.87 7.91 8.03 sha512 8.91 8.93 9.36 shake128 11.33 11.34 11.88 sha256 13.02 13.29 14.10 asconhashav12 13.29 13.51 13.57 asconxofav12 21.22 21.38 21.86 asconhashv12 20.83 21.69 21.86 asconxofv12 25.52 25.54 25.64 T:xoodyakv1 30.49 30.55 31.04 asconhashabi32v12 41.45 41.52 41.69 asconhashbi32v12 48.12 48.37 48.56 T:esch256v2 71.44 71.51 71.61 T:esch384v2 94.89 95.31 95.35 T:romulush 318.90 319.19 319.78 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 8.18 8.19 8.31 sha512 9.10 9.10 9.11 shake128 11.53 11.53 11.53 sha256 13.67 13.67 13.88 asconxofav12 13.67 13.88 13.88 asconhashav12 20.83 20.83 21.70 asconxofv12 21.49 21.49 21.70 asconhashv12 25.25 25.26 25.32 T:xoodyakv1 30.82 30.82 31.24 asconhashabi32v12 41.44 41.46 43.02 asconhashbi32v12 47.94 47.96 49.57 T:esch256v2 71.33 71.42 73.07 T:esch384v2 94.78 96.26 96.63 T:romulush 317.81 318.18 318.79 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 8.72 8.73 8.85 sha512 9.72 9.73 9.73 shake128 11.87 11.87 11.89 sha256 13.89 13.89 13.89 asconxofav12 9.26? 13.89? 18.51? asconhashav12 18.51? 21.99? 27.77? asconxofv12 21.41 21.99 21.99 asconhashv12 25.46 25.46 25.47 T:xoodyakv1 31.25 31.25 31.25 asconhashabi32v12 42.16 42.16 42.20 asconhashbi32v12 48.45 48.46 48.49 T:esch256v2 72.49 72.50 72.63 T:esch384v2 95.80 95.84 96.62 T:romulush 317.41 317.96 318.41 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 9.51 9.51 9.65 sha512 10.41 10.42 10.45 shake128 12.77 12.77 12.77 sha256 13.89 13.89 15.43 asconxofav12 0.00? 15.43? 24.68? asconhashav12 23.15 23.15 24.68 asconhashv12 23.15 24.68 24.68 asconxofv12 26.02 26.02 26.02 T:xoodyakv1 32.41 32.41 32.41 asconhashabi32v12 44.11 44.11 44.11 asconhashbi32v12 49.81 49.81 49.84 T:esch256v2 75.59 75.61 75.61 T:esch384v2 98.81 98.84 98.87 T:romulush 310.88 310.93 321.32 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 0.00? 0.00? 27.78? asconhashav12 0.00? 0.00? 27.78? asconxofv12 0.00? 13.89? 27.78? asconxofav12 20.73 20.83 21.00 sha512 23.97 23.97 24.00 shake128 24.05 24.05 24.08 sha256 0.00? 27.78? 41.67? asconhashv12 32.86 32.86 32.86 T:xoodyakv1 0.00? 41.67? 55.56? asconhashabi32v12 67.28 67.28 67.28 T:esch256v2 68.19 68.19 68.19 asconhashbi32v12 115.55 115.55 115.55 T:esch384v2 136.83 136.84 137.52 T:romulush 277.19 277.28 277.41 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 0.00? 0.00? 111.12? asconhashav12 0.00? 0.00? 111.12? asconxofv12 103.25 103.25 103.25 sha256 110.62 110.62 110.62 T:xoodyakv1 0.00? 111.12? 111.12? asconhashv12 0.00? 111.12? 111.12? asconxofav12 0.00? 111.12? 222.25? asconhashabi32v12 151.00 151.25 153.38 sha512 189.62 189.62 189.62 shake128 245.88 245.88 245.88 T:esch256v2 258.88 260.62 260.62 asconhashbi32v12 319.75 322.00 322.50 T:photonbeetlehash256rate32v1 342.25 342.25 342.25 T:romulush 499.75 499.75 502.12 T:esch384v2