VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20251222

[Page version: 20260403 18:07:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
28.1128.2428.30T!!!sha256
31.4431.6131.67T!!!sha512
34.1134.2134.26T!!!shake128
44.0644.1844.22T:xoodyakv1
57.4557.5657.61asconhashabi32v12
61.7661.8261.87asconhashav12
61.7461.8361.88asconxofav12
83.5383.5883.62asconhashbi32v12
87.7687.8487.89asconxofv12
87.7687.8587.90asconhashv12
98.3098.5898.64T:esch256v2
142.19142.23142.26T:esch384v2
273.95274.05274.10T:romulush
1286.011286.091286.21T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
28.9428.9429.00T!!!sha256
32.8032.8132.90T!!!sha512
34.9834.9935.03T!!!shake128
44.4744.5044.67T:xoodyakv1
58.1158.1258.29asconhashabi32v12
62.4162.4262.59asconxofav12
62.4162.4362.56asconhashav12
84.2784.2784.40asconhashbi32v12
88.5688.5788.73asconxofv12
88.5688.5888.75asconhashv12
99.2399.2899.35T:esch256v2
143.61143.67143.78T:esch384v2
276.02276.17276.36T:romulush
1283.671283.741283.95T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
30.1630.2231.08T!!!sha256
34.9234.9635.71T!!!sha512
37.4337.4337.76T!!!shake128
45.0445.0646.03T:xoodyakv1
59.1359.1359.61asconhashabi32v12
63.5163.5164.53asconhashav12
63.5263.6064.45asconxofav12
85.5485.5785.98asconhashbi32v12
89.9189.9190.28asconxofv12
89.9189.9290.22asconhashv12
100.45100.46100.75T:esch256v2
146.05146.09146.61T:esch384v2
279.48279.59280.23T:romulush
1279.501279.881280.17T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
33.4333.8235.90T!!!sha256
37.3737.7740.27T!!!sha512
40.5640.9742.08T!!!shake128
46.6147.4750.36T:xoodyakv1
62.0062.9166.35asconhashabi32v12
66.4566.9470.40asconhashav12
66.5067.2469.67asconxofav12
88.9689.5591.79asconhashbi32v12
93.5193.8095.71asconhashv12
93.5193.9796.23asconxofv12
103.61103.83105.56T:esch256v2
152.59152.65153.72T:esch384v2
288.92288.94291.76T:romulush
1268.611269.251270.75T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
65.9666.1569.35T:xoodyakv1
74.7575.0478.80T!!!sha256
82.67?83.01?92.07?T!!!sha512
96.2996.61103.48T!!!shake128
96.52?97.90?114.49?asconhashabi32v12
103.71103.72104.58asconhashav12
103.69103.73104.86asconxofav12
132.28133.35143.81asconhashbi32v12
139.53139.95148.38asconhashv12
139.51141.27152.94asconxofv12
143.78143.92151.42T:esch256v2
236.33236.82245.87T:esch384v2
410.74419.51442.74T:romulush
1132.041138.921159.04T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
253.25253.49259.48T:xoodyakv1
368.75368.75373.28asconhashabi32v12
380.53381.88408.10T!!!sha256
397.24397.50399.04asconhashav12
397.50397.50402.85asconxofav12
473.75473.75483.63asconhashbi32v12
501.06501.90533.37asconxofv12
502.00502.00503.49asconhashv12
565.36565.69604.85T:esch256v2
659.26?661.04?733.85?T!!!sha512
758.83758.92766.94T!!!shake128
1047.241051.201108.91T:esch384v2
1081.001081.681129.67T:romulush
1343.701343.941352.58T:photonbeetlehash256rate32v1