VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20251114

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
13.5613.7014.90sha256
22.5922.5922.66sha512
37.5037.5137.62asconhashabi32v12
39.0739.0839.40T:xoodyakv1
42.0042.0343.43asconhashav12
42.5142.5644.35asconxofav12
47.7447.7848.89shake128
54.1054.2055.83asconhashbi32v12
56.8856.9358.54asconhashv12
57.3857.4659.00asconxofv12
87.1187.2288.75T:esch256v2
127.12128.55128.67T:esch384v2
153.64155.13155.26T:romulush
1241.851242.271245.59T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
14.4414.4915.55sha256
23.8423.8423.85sha512
38.2138.2238.24asconhashabi32v12
39.6339.6439.65T:xoodyakv1
42.7442.7542.78asconhashav12
43.2443.2543.26asconxofav12
49.1949.1949.24shake128
54.9554.9955.18asconhashbi32v12
57.7057.7257.74asconhashv12
58.2158.2358.24asconxofv12
87.9587.9687.97T:esch256v2
128.64128.65128.77T:esch384v2
155.01155.03155.27T:romulush
1238.701239.701244.40T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
15.6815.7016.84sha256
25.9125.9325.96sha512
39.4139.4239.45asconhashabi32v12
40.5840.5840.61T:xoodyakv1
43.9844.0044.05asconhashav12
44.4844.4944.49asconxofav12
53.1453.1553.18shake128
56.3156.3256.94asconhashbi32v12
59.0859.0859.17asconhashv12
59.6259.6259.66asconxofv12
89.4489.4689.52T:esch256v2
131.27131.29131.30T:esch384v2
157.52157.55157.58T:romulush
1229.511235.901246.66T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
18.9318.9720.31sha256
29.0029.0029.03sha512
42.6142.6142.69asconhashabi32v12
43.1043.1243.21T:xoodyakv1
47.2547.3147.47asconhashav12
47.8147.8147.83asconxofav12
58.7558.7958.89shake128
59.9759.9760.06asconhashbi32v12
62.7862.8162.97asconhashv12
63.3663.3663.44asconxofv12
93.3993.4093.46T:esch256v2
138.31138.31138.38T:esch384v2
164.28164.28164.36T:romulush
1220.221220.291221.31T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
60.5061.2564.38sha256
75.3875.5075.75T:xoodyakv1
78.7578.8879.38sha512
83.2583.5084.00asconhashabi32v12
88.7589.2591.25asconhashav12
89.7589.7590.00asconxofav12
106.50106.75107.25asconhashbi32v12
109.50110.00111.25asconhashv12
111.25111.25111.50asconxofv12
143.88144.00144.62T:esch256v2
153.62153.62153.75shake128
228.00228.38228.62T:esch384v2
250.12250.50250.75T:romulush
1104.121104.251104.75T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
363.00365.00365.00T:xoodyakv1
371.00376.00391.00sha256
402.00406.00412.00asconhashabi32v12
416.00422.00432.00asconhashav12
420.00422.00424.00asconxofav12
472.00474.00478.00asconhashbi32v12
478.00480.00490.00asconhashv12
486.00490.00490.00asconxofv12
624.00626.00631.00sha512
635.00635.00637.00T:esch256v2
771.00771.00775.00T:romulush
1067.001068.001069.00T:esch384v2
1212.001214.001220.00shake128
1424.001426.001428.00T:photonbeetlehash256rate32v1