VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240909

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
32.5332.6533.04sha256
60.1260.2760.73asconhashabi32v12
61.1261.2661.84T:xoodyakv1
64.8465.0165.55asconhashav12
64.9065.0965.56asconxofav12
68.8969.0769.79shake128
71.4871.6672.23T!!!sha512
87.0187.1787.97asconhashbi32v12
91.9092.1092.60asconhashv12
91.9492.1692.75asconxofv12
127.07127.46128.96T:esch256v2
183.45183.90185.01T:esch384v2
321.98323.67324.52T:romulush
1778.551781.441785.83T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
33.1433.3033.49sha256
60.4060.4260.45asconhashabi32v12
61.2161.2261.28T:xoodyakv1
65.2665.3065.46asconxofav12
65.2665.3165.47asconhashav12
71.5871.7372.01shake128
73.3673.4073.47T!!!sha512
87.4887.5087.61asconhashbi32v12
92.3892.4292.54asconhashv12
92.3992.4492.51asconxofv12
127.17127.20127.42T:esch256v2
184.44184.49184.78T:esch384v2
323.20323.35324.80T:romulush
1769.331775.861779.00T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
34.9635.1635.55sha256
61.7861.8661.91asconhashabi32v12
62.2762.3262.43T:xoodyakv1
66.7566.8967.01asconhashav12
66.7966.9066.96asconxofav12
78.1678.2178.77T!!!sha512
79.9880.4081.32shake128
89.1789.2489.32asconhashbi32v12
94.1394.2394.36asconxofv12
94.1394.2394.39asconhashv12
128.85128.85129.02T:esch256v2
187.76187.76187.91T:esch384v2
327.89328.07329.46T:romulush
1761.261762.851782.31T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
40.0140.2841.61sha256
65.2165.3065.43T:xoodyakv1
65.2765.4465.62asconhashabi32v12
70.6570.8871.38asconhashav12
70.7271.0671.41asconxofav12
83.9884.3984.64T!!!sha512
93.8394.1394.52asconhashbi32v12
95.1696.3797.25shake128
98.7798.9599.41asconxofv12
98.9599.0899.61asconhashv12
133.40133.40133.75T:esch256v2
196.73196.73197.16T:esch384v2
340.41340.91342.58T:romulush
1747.081747.531752.96T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
102.97103.64104.88T:xoodyakv1
106.02?108.02?118.31?sha256
111.27112.34113.94asconhashabi32v12
122.47124.22128.27asconhashav12
122.48125.09128.62asconxofav12
150.17152.33154.28asconhashbi32v12
156.64157.84159.33asconxofv12
156.48158.97160.39asconhashv12
186.39188.02193.81T!!!sha512
191.59191.61194.06T:esch256v2
311.53311.53315.23T:esch384v2
322.70333.80342.53shake128
500.38501.19504.62T:romulush
1570.121572.281579.92T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
459.50469.38470.38T:xoodyakv1
471.75482.25491.62asconhashabi32v12
527.12540.88560.38asconhashav12
531.50543.50578.38asconxofav12
601.75613.62624.12asconhashbi32v12
613.88627.12635.38asconxofv12
582.50?627.50?703.38?sha256
624.38631.75642.38asconhashv12
810.62816.00827.50T:esch256v2
1428.621431.621448.50T:esch384v2
1427.751441.251463.38T:romulush
1489.381501.381537.50T!!!sha512
1962.251980.752008.00T:photonbeetlehash256rate32v1
2622.002676.122761.00shake128