VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20241022

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
10.4510.8811.19sha512
10.75?11.77?11.99?shake128
12.75?15.18?15.67?asconhashav12
14.4415.2015.66asconxofav12
15.4816.7316.94sha256
21.4623.0423.35asconxofv12
22.1523.0923.40asconhashv12
29.6929.7830.43T:xoodyakv1
32.7932.8233.36asconhashabi32v12
49.7649.7950.50asconhashbi32v12
100.59100.77100.94T:esch256v2
119.49120.37124.82T:esch384v2
128.19133.59134.44T:romulush
493.66512.38515.21T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.94?11.60?19.77?sha512
11.39?12.15?13.01?shake128
15.5815.6716.31asconxofav12
15.57?15.72?17.81?asconhashav12
16.1416.8517.66sha256
23.04?23.63?25.64?asconhashv12
23.0323.6324.50asconxofv12
30.0130.4930.50T:xoodyakv1
32.9332.9433.32asconhashabi32v12
50.2750.2750.33asconhashbi32v12
100.39100.39100.45T:esch256v2
119.39122.06125.00T:esch384v2
131.51133.80136.48T:romulush
495.71511.54513.29T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.62?11.64?13.67?sha512
12.15?12.21?15.77?shake128
15.23?15.85?25.67?asconxofav12
16.65?16.68?18.80?sha256
15.25?17.25?26.12?asconhashav12
22.69?24.58?26.98?asconhashv12
22.92?24.81?45.12?asconxofv12
30.2030.4930.76T:xoodyakv1
33.6633.6633.67asconhashabi32v12
51.1551.1551.17asconhashbi32v12
101.43101.43101.54T:esch256v2
121.30121.80128.14T:esch384v2
130.83134.97137.76T:romulush
498.66507.27512.86T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.4112.4313.48sha512
13.0313.0413.15shake128
15.8615.8717.60asconhashav12
15.87?15.91?21.30?asconxofav12
17.9117.9819.26sha256
23.58?23.74?32.81?asconxofv12
23.57?23.77?33.77?asconhashv12
31.4531.4631.49T:xoodyakv1
35.5935.6135.83asconhashabi32v12
53.4853.4853.48asconhashbi32v12
104.18104.20104.24T:esch256v2
126.48126.49133.23T:esch384v2
135.05139.42148.01T:romulush
487.03500.98507.32T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
24.5824.6624.81asconxofav12
24.5824.6924.69asconhashav12
25.4725.4725.58sha512
29.5829.5829.95shake128
34.3034.3334.58sha256
34.9135.0835.81asconhashv12
35.0835.0935.66asconxofv12
40.4840.6440.83T:xoodyakv1
60.1460.1460.28asconhashabi32v12
83.1983.2083.31asconhashbi32v12
139.44139.66139.67T:esch256v2
186.56187.50200.47T:romulush
192.42192.64192.75T:esch384v2
432.64?440.75?692.41?T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
92.3892.3892.38asconhashav12
92.3893.2593.25asconxofav12
123.38123.38123.50asconxofv12
124.12124.25124.25asconhashv12
136.62136.75137.62T:xoodyakv1
150.25150.25152.00sha256
205.12205.12207.38sha512
231.75231.75237.25shake128
253.62253.62253.62asconhashabi32v12
317.38317.38317.38asconhashbi32v12
474.88476.50495.00T:romulush
492.88494.62498.00T:photonbeetlehash256rate32v1
516.00517.88519.12T:esch256v2
829.38830.88832.62T:esch384v2