VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20251114

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
10.4610.5210.79sha512
11.1511.1611.52shake128
14.7614.7715.08asconhashav12
14.7614.7815.10asconxofav12
15.8515.9416.20sha256
22.1522.4622.50asconhashv12
22.1522.4722.49asconxofv12
30.1130.7430.77T:xoodyakv1
32.8332.8632.89asconhashabi32v12
50.0350.1050.31asconhashbi32v12
100.40100.73101.17T:esch256v2
118.85119.22120.02T:esch384v2
127.41128.17128.44T:romulush
492.57493.58494.48T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.8810.8910.89sha512
11.3811.3911.40shake128
14.9114.9114.92asconxofav12
14.9114.9114.93asconhashav12
16.1216.1316.14sha256
22.3322.3322.35asconhashv12
22.3322.3322.35asconxofv12
29.9829.9830.30T:xoodyakv1
32.9332.9433.01asconhashabi32v12
50.2750.2851.60asconhashbi32v12
100.39101.61101.64T:esch256v2
120.58120.61120.68T:esch384v2
128.67128.74129.46T:romulush
490.79490.94494.37T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.6011.6111.61sha512
12.1512.1512.17shake128
15.1715.1715.18asconxofav12
15.1715.1715.17asconhashav12
16.6016.6216.62sha256
22.6622.6622.68asconxofv12
22.6722.6722.68asconhashv12
30.2530.2630.80T:xoodyakv1
33.6633.6633.67asconhashabi32v12
51.1551.1551.16asconhashbi32v12
101.43101.43104.84T:esch256v2
121.30121.31124.60T:esch384v2
128.92129.01132.51T:romulush
488.82488.93491.12T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.3812.4112.41sha512
13.0313.0313.05shake128
15.8615.8615.86asconhashav12
15.8615.8615.86asconxofav12
17.8917.8917.91sha256
23.5623.5623.56asconhashv12
23.5623.5623.58asconxofv12
30.9831.0031.51T:xoodyakv1
35.5935.5935.62asconhashabi32v12
53.4853.4853.49asconhashbi32v12
104.18104.20104.20T:esch256v2
126.46126.48126.49T:esch384v2
132.98133.01134.15T:romulush
481.29481.39490.40T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
24.5524.5524.55asconxofav12
24.5524.5524.72asconhashav12
25.4725.4825.67sha512
29.5829.5829.58shake128
34.3034.3034.33sha256
35.0835.0835.19asconhashv12
35.0835.1735.19asconxofv12
40.3340.3440.80T:xoodyakv1
60.1460.1460.28asconhashabi32v12
83.1983.1983.31asconhashbi32v12
139.44139.44139.66T:esch256v2
187.16187.52187.88T:romulush
192.42192.64192.64T:esch384v2
427.59427.75427.84T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
92.1292.1292.12asconxofav12
92.1292.1293.00asconhashav12
123.38123.38123.62asconhashv12
123.38123.38124.88asconxofv12
137.62137.62137.62T:xoodyakv1
150.25151.12151.12sha256
205.12205.25207.38sha512
231.75231.75232.12shake128
253.62253.62253.62asconhashabi32v12
317.25317.25317.25asconhashbi32v12
478.25478.50480.00T:romulush
489.25489.25491.00T:photonbeetlehash256rate32v1
515.88517.88518.50T:esch256v2
830.62830.62832.38T:esch384v2