VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20260330

[Page version: 20260713 22:20:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.897.958.06sha512
9.509.519.52shake128
11.3311.3411.35sha256
13.5113.5213.53asconxofav12
13.5113.5213.54asconhashav12
19.2619.2719.29asconxofv12
19.2719.2819.30asconhashv12
25.1525.1625.18T:xoodyakv1
27.0227.0327.05asconhashabi32v12
41.0341.0541.08asconhashbi32v12
47.5847.6047.61T:esch256v2
71.1371.1571.18T:esch384v2
94.0794.1294.16T:romulush
315.37315.58315.94T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.308.348.41sha512
9.779.789.79shake128
11.5911.5911.60sha256
13.6813.6913.69asconxofav12
13.6913.7013.71asconhashav12
19.4719.4819.49asconxofv12
19.4719.4919.52asconhashv12
25.3325.3325.36T:xoodyakv1
27.4227.4327.46asconhashabi32v12
41.5041.5141.54asconhashbi32v12
47.9147.9247.95T:esch256v2
71.8771.8971.97T:esch384v2
94.7594.7894.85T:romulush
314.89314.98315.61T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
8.929.009.02sha512
10.5910.6010.61shake128
12.0112.0212.03sha256
13.9914.0014.00asconxofav12
13.9914.0014.00asconhashav12
19.8219.8319.85asconhashv12
19.8319.8519.86asconxofv12
25.6425.6625.67T:xoodyakv1
28.1228.1328.14asconhashabi32v12
42.3442.3542.40asconhashbi32v12
48.5048.5148.53T:esch256v2
73.1173.1373.15T:esch384v2
96.0096.0196.08T:romulush
313.84314.21315.88T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
9.819.869.94sha512
11.6811.7011.74shake128
13.1413.1513.18sha256
14.8014.8114.84asconxofav12
14.8014.8214.84asconhashav12
20.7620.7720.81asconhashv12
20.7820.8020.84asconxofv12
26.5026.5226.54T:xoodyakv1
29.9930.0230.05asconhashabi32v12
44.5744.5944.61asconhashbi32v12
50.0250.0550.07T:esch256v2
76.4576.4876.51T:esch384v2
99.2999.3399.35T:romulush
311.39311.79313.78T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.8023.1123.47sha512
24.6124.7524.96asconxofav12
24.6524.7824.95asconhashav12
27.1527.3127.50sha256
30.8531.0631.39shake128
32.3932.4532.69asconhashv12
32.4432.6132.88asconxofv12
37.1737.2437.50T:xoodyakv1
53.3153.5153.67asconhashabi32v12
69.6069.6169.78T:esch256v2
72.1772.3272.55asconhashbi32v12
120.06120.29120.41T:esch384v2
140.74141.04141.67T:romulush
281.27281.53281.78T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
101.22102.61104.38asconhashav12
102.99104.38104.44asconxofav12
124.84125.84127.43asconhashv12
125.98126.57129.06asconxofv12
127.26128.07129.73sha256
144.45145.36145.84T:xoodyakv1
184.42187.31193.39sha512
238.21240.64241.93asconhashabi32v12
241.59243.62246.17shake128
271.05271.35273.60T:esch256v2
291.08291.79292.65asconhashbi32v12
355.28358.35363.40T:photonbeetlehash256rate32v1
376.21378.02380.03T:romulush
525.42527.68581.55T:esch384v2