VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

General information:	Introduction	eBASH	eBASC	eBAEAD	eBATS	SUPERCOP	XBX	Computers	Arch

How to submit new software:	Tips	hash	stream	aead	dh	kem	encrypt	sign

List of primitives measured:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

Measurements:	lwc	sha3	hash	stream	lwc	caesar	aead	dh	kem	encrypt	sign

List of subroutines:	verify	decode	encode	sort	core	hashblocks	xof	scalarmult

List of NISTLWC hash candidates measured

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt from the full list of hash functions covered by SUPERCOP; the excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists. The page then lists implementations of these hash functions.

There is a separate page that lists machines and, for each machine, the measurements of these hash functions.

Which hash functions are measured? (NISTLWC excerpt)

Primitive	Description	Designers
`asconhashabi32v12`
`asconhashav12`
`asconhashbi32v12`
`asconhashv12`
`asconxofav12`
`asconxofv12`
`esch256v2`
`esch384v2`
`photonbeetlehash256rate32v1`
`romulush`
`sha256`	SHA-256 with 256-bit output	NSA
`sha512`	SHA-512 with 512-bit output	NSA
`shake128`
`xoodyakv1`	Xoodyak LWC-default hash: Cyclist(ε, ε, ε); Absorb(input); hash = Squeeze()	Joan Daemen Seth Hoffert Michaël Peeters Gilles Van Assche Ronny Van Keer

Implementations

Primitive	Implementation	Authors
`asconhashabi32v12`	`bi32`	Christoph Dobraunig Martin Schläffer
`asconhashabi32v12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`asconhashabi32v12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`asconhashabi32v12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`asconhashabi32v12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconhashabi32v12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`asconhashabi32v12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashabi32v12`	`ref`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`armv6`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`armv6_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`armv6m`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`armv6m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`armv7m`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`armv7m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`asm_esp32`	Ferdinand Bachmann
`asconhashav12`	`avr`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconhashav12`	`avr_lowsize`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi32`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`bi8`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`esp32`	Christoph Dobraunig Martin Schläffer Ferdinand Bachmann
`asconhashav12`	`opt32`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`opt32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`opt64`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`opt8`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`opt8_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashav12`	`ref`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`bi32`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashbi32v12`	`ref`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`armv6`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`armv6_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`armv6m`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`armv6m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`armv7m`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`armv7m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`asm_esp32`	Ferdinand Bachmann
`asconhashv12`	`avr`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconhashv12`	`avr_lowsize`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi32`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`bi8`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`esp32`	Christoph Dobraunig Martin Schläffer Ferdinand Bachmann
`asconhashv12`	`opt32`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`opt32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`opt64`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`opt8`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`opt8_lowsize`	Christoph Dobraunig Martin Schläffer
`asconhashv12`	`ref`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`armv6`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`armv6_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`armv6m`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`armv6m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`armv7m`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`armv7m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`asm_esp32`	Ferdinand Bachmann
`asconxofav12`	`avr`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconxofav12`	`avr_lowsize`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi32`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`bi8`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`esp32`	Christoph Dobraunig Martin Schläffer Ferdinand Bachmann
`asconxofav12`	`opt32`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`opt32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`opt64`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`opt8`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`opt8_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofav12`	`ref`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`armv6`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`armv6_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`armv6m`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`armv6m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`armv7m`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`armv7m_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`asm_esp32`	Ferdinand Bachmann
`asconxofv12`	`avr`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconxofv12`	`avr_lowsize`	Luan Cardoso dos Santos Johann Großschädl Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi32`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi32_armv6`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi32_armv6m`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi32_armv7m`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi32_armv7m_small`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi32_lowreg`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`bi8`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`esp32`	Christoph Dobraunig Martin Schläffer Ferdinand Bachmann
`asconxofv12`	`opt32`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`opt32_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`opt64`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`opt64_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`opt8`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`opt8_lowsize`	Christoph Dobraunig Martin Schläffer
`asconxofv12`	`ref`	Christoph Dobraunig Martin Schläffer
`esch256v2`	`add_armv6m`
`esch256v2`	`add_armv7m_fast`
`esch256v2`	`add_armv7m_small`
`esch256v2`	`add_avr`
`esch256v2`	`opt`
`esch256v2`	`ref`
`esch384v2`	`add_armv7m_fast`
`esch384v2`	`add_armv7m_small`
`esch384v2`	`add_avr`
`esch384v2`	`opt`
`esch384v2`	`ref`
`photonbeetlehash256rate32v1`	`avr8_lowrom`
`photonbeetlehash256rate32v1`	`avr8_speed`
`photonbeetlehash256rate32v1`	`bitslice_sb32`
`photonbeetlehash256rate32v1`	`bitslice_sb64`
`photonbeetlehash256rate32v1`	`bitslice_sb8`
`photonbeetlehash256rate32v1`	`ref`
`photonbeetlehash256rate32v1`	`table2`
`photonbeetlehash256rate32v1`	`table3`
`romulush`	`armv7a`
`romulush`	`armv7m`
`romulush`	`armv8a-onthefly`
`romulush`	`armv8a-precalculate`
`romulush`	`opt32`
`romulush`	`opt32t`
`romulush`	`ref`
`romulush`	`x86`
`sha256`	`cryptopp`	Wei Dai (wrapper around Crypto++)
`sha256`	`openssl`	Daniel J. Bernstein (wrapper around OpenSSL)
`sha256`	`ref`	Daniel J. Bernstein (wrapper around crypto_hashblocks/sha256)
`sha256`	`rust_crypto`
`sha256`	`rust_sha2`
`sha256`	`sphlib`	Thomas Pornin
`sha256`	`sphlib-small`	Thomas Pornin
`sha512`	`blocksplusavx`	Daniel J. Bernstein (wrapper around crypto_hashblocks/sha512)
`sha512`	`compact`
`sha512`	`cryptopp`	Wei Dai (wrapper around Crypto++)
`sha512`	`openssl`	Daniel J. Bernstein (wrapper around OpenSSL)
`sha512`	`ref`	Daniel J. Bernstein (wrapper around crypto_hashblocks/sha512)
`sha512`	`rust_crypto`
`sha512`	`rust_sha2`
`sha512`	`sphlib`	Thomas Pornin
`sha512`	`sphlib-small`	Thomas Pornin
`shake128`	`cryptopp`	D. J. Bernstein (imitating sha512/cryptopp)
`shake128`	`kcp/compact1600AVR8`
`shake128`	`kcp/optimized1600ARMv7A`
`shake128`	`kcp/optimized1600ARMv8A`
`shake128`	`kcp/optimized1600AVR8`
`shake128`	`kcp/optimized1600AVX2`
`shake128`	`kcp/optimized1600AVX512`
`shake128`	`oncore32bits`
`shake128`	`oncore64bits`
`shake128`	`openssl`
`xoodyakv1`	`ref`
`xoodyakv1`	`refcpp`
`xoodyakv1`	`xkcp/ARMv6`
`xoodyakv1`	`xkcp/ARMv6M`
`xoodyakv1`	`xkcp/ARMv7M`
`xoodyakv1`	`xkcp/AVR8`
`xoodyakv1`	`xkcp/AVX512`
`xoodyakv1`	`xkcp/plain-ua`
`xoodyakv1`	`xkcp/SSE2`

Version

This is version 2024.12.15 of the primitives-nistlwc-hash.html web page. This web page is in the public domain.

eBACS: ECRYPT Benchmarking of Cryptographic Systems

List of NISTLWC hash candidates measured

Which hash functions are measured? (NISTLWC excerpt)

Implementations

Version