VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: aarch64; Cortex-A76 (414fd0b1); 2023 Broadcom BCM2712; 4 x 1500MHz; pi5, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.032.032.03sha256
6.226.236.23shake128
6.236.236.26sha512
9.379.389.38asconhashav12
9.479.519.52asconxofav12
13.9813.9914.00asconhashv12
13.9813.9914.00asconxofv12
16.8616.8716.91T:xoodyakv1
21.2021.2321.28asconhashabi32v12
32.0932.1132.17asconhashbi32v12
32.7432.7632.79T:esch256v2
49.0449.0849.11T:esch384v2
66.2166.2366.25T:romulush
217.75217.90218.75T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.072.072.07sha256
6.376.376.38shake128
6.466.476.50sha512
9.479.479.48asconhashav12
9.579.599.59asconxofav12
14.1114.1214.13asconhashv12
14.1114.1214.13asconxofv12
16.9216.9616.98T:xoodyakv1
21.4821.5121.54asconhashabi32v12
32.3932.4132.45asconhashbi32v12
32.9432.9733.00T:esch256v2
49.5449.5749.60T:esch384v2
66.7066.7166.73T:romulush
217.41217.47218.22T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
6.816.816.81shake128
6.846.856.86sha512
9.639.639.64asconhashav12
9.619.739.74asconxofav12
14.3214.3314.34asconhashv12
14.3214.3314.34asconxofv12
17.0717.1117.11T:xoodyakv1
21.9221.9521.99asconhashabi32v12
32.9032.9232.95asconhashbi32v12
33.3233.3533.41T:esch256v2
50.3350.3750.40T:esch384v2
67.5267.5467.58T:romulush
216.66216.79217.58T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.282.292.30sha256
7.287.297.32shake128
7.347.367.38sha512
10.0310.0610.08asconhashav12
9.9610.1110.14asconxofav12
14.8514.8814.90asconhashv12
14.8714.8914.91asconxofv12
17.3717.4117.46T:xoodyakv1
23.0723.1023.14asconhashabi32v12
34.2034.2334.28asconhashbi32v12
34.2434.2934.37T:esch256v2
52.4552.5452.60T:esch384v2
69.6469.7069.74T:romulush
214.93215.05215.75T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.164.254.37sha256
15.0715.1815.34asconxofav12
15.3015.3815.56asconhashav12
15.8215.9115.97sha512
16.7416.8017.07shake128
21.6221.6721.82T:xoodyakv1
21.6721.7321.89asconxofv12
21.6721.7321.89asconhashv12
37.8537.9038.04asconhashabi32v12
46.1246.4746.72T:esch256v2
50.9651.0351.15asconhashbi32v12
79.9480.1580.31T:esch384v2
97.0097.1897.34T:romulush
191.51191.82192.25T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
20.8821.4321.58sha256
54.3854.6555.47asconxofav12
54.7054.9155.93asconhashav12
71.8972.5874.74T:xoodyakv1
73.1273.4774.34asconhashv12
73.0573.5974.73asconxofv12
110.63111.51113.41sha512
133.53134.41136.95shake128
154.29154.83155.31asconhashabi32v12
172.16173.52176.04T:esch256v2
183.03183.90185.12asconhashbi32v12
221.40222.33223.88T:photonbeetlehash256rate32v1
247.09247.98249.93T:romulush
343.95345.06346.95T:esch384v2