VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20251114

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.877.918.03sha512
8.918.939.36shake128
11.3311.3411.88sha256
13.0213.2914.10asconhashav12
13.2913.5113.57asconxofav12
21.2221.3821.86asconhashv12
20.8321.6921.86asconxofv12
25.5225.5425.64T:xoodyakv1
30.4930.5531.04asconhashabi32v12
41.4541.5241.69asconhashbi32v12
48.1248.3748.56T:esch256v2
71.4471.5171.61T:esch384v2
94.8995.3195.35T:romulush
318.90319.19319.78T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.188.198.31sha512
9.109.109.11shake128
11.5311.5311.53sha256
13.6713.6713.88asconxofav12
13.6713.8813.88asconhashav12
20.8320.8321.70asconxofv12
21.4921.4921.70asconhashv12
25.2525.2625.32T:xoodyakv1
30.8230.8231.24asconhashabi32v12
41.4441.4643.02asconhashbi32v12
47.9447.9649.57T:esch256v2
71.3371.4273.07T:esch384v2
94.7896.2696.63T:romulush
317.81318.18318.79T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
8.728.738.85sha512
9.729.739.73shake128
11.8711.8711.89sha256
13.8913.8913.89asconxofav12
9.26?13.89?18.51?asconhashav12
18.51?21.99?27.77?asconxofv12
21.4121.9921.99asconhashv12
25.4625.4625.47T:xoodyakv1
31.2531.2531.25asconhashabi32v12
42.1642.1642.20asconhashbi32v12
48.4548.4648.49T:esch256v2
72.4972.5072.63T:esch384v2
95.8095.8496.62T:romulush
317.41317.96318.41T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
9.519.519.65sha512
10.4110.4210.45shake128
12.7712.7712.77sha256
13.8913.8915.43asconxofav12
0.00?15.43?24.68?asconhashav12
23.1523.1524.68asconhashv12
23.1524.6824.68asconxofv12
26.0226.0226.02T:xoodyakv1
32.4132.4132.41asconhashabi32v12
44.1144.1144.11asconhashbi32v12
49.8149.8149.84T:esch256v2
75.5975.6175.61T:esch384v2
98.8198.8498.87T:romulush
310.88310.93321.32T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
0.00?0.00?27.78?asconhashav12
0.00?0.00?27.78?asconxofv12
0.00?13.89?27.78?asconxofav12
20.7320.8321.00sha512
23.9723.9724.00shake128
24.0524.0524.08sha256
0.00?27.78?41.67?asconhashv12
32.8632.8632.86T:xoodyakv1
0.00?41.67?55.56?asconhashabi32v12
67.2867.2867.28T:esch256v2
68.1968.1968.19asconhashbi32v12
115.55115.55115.55T:esch384v2
136.83136.84137.52T:romulush
277.19277.28277.41T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
0.00?0.00?111.12?asconhashav12
0.00?0.00?111.12?asconxofv12
103.25103.25103.25sha256
110.62110.62110.62T:xoodyakv1
0.00?111.12?111.12?asconhashv12
0.00?111.12?111.12?asconxofav12
0.00?111.12?222.25?asconhashabi32v12
151.00151.25153.38sha512
189.62189.62189.62shake128
245.88245.88245.88T:esch256v2
258.88260.62260.62asconhashbi32v12
319.75322.00322.50T:photonbeetlehash256rate32v1
342.25342.25342.25T:romulush
499.75499.75502.12T:esch384v2