VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20251114

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 28.14 28.24 28.31 T!!!sha256 31.49 31.62 31.66 T!!!sha512 55.47 55.52 55.59 T:xoodyakv1 57.53 57.58 57.63 asconhashabi32v12 61.75 61.83 61.89 asconxofav12 61.78 61.87 62.14 asconhashav12 65.42 65.58 65.69 shake128 83.51 83.63 84.00 asconhashbi32v12 87.79 87.85 87.90 asconxofv12 87.77 87.85 87.89 asconhashv12 98.29 98.58 98.64 T:esch256v2 142.19 142.23 142.26 T:esch384v2 273.95 274.05 274.10 T:romulush 1286.02 1286.09 1286.18 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 28.94 28.94 28.96 T!!!sha256 32.80 32.81 32.84 T!!!sha512 55.82 55.83 55.88 T:xoodyakv1 58.11 58.11 58.21 asconhashabi32v12 62.41 62.41 62.47 asconxofav12 62.41 62.42 62.56 asconhashav12 68.15 68.18 68.62 shake128 84.27 84.30 84.48 asconhashbi32v12 88.56 88.56 88.75 asconhashv12 88.56 88.59 88.73 asconxofv12 99.27 99.28 99.35 T:esch256v2 143.60 143.68 143.78 T:esch384v2 275.99 276.16 276.36 T:romulush 1283.67 1283.74 1283.93 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 30.16 30.20 31.00 T!!!sha256 34.93 34.95 35.65 T!!!sha512 56.45 56.45 57.13 T:xoodyakv1 59.13 59.13 59.85 asconhashabi32v12 63.51 63.51 64.11 asconxofav12 63.51 63.51 63.96 asconhashav12 74.86 74.92 75.73 shake128 85.54 85.56 86.02 asconhashbi32v12 89.91 89.92 90.27 asconhashv12 89.92 89.93 90.42 asconxofv12 100.45 100.45 100.64 T:esch256v2 146.05 146.08 146.51 T:esch384v2 279.48 279.54 280.12 T:romulush 1279.45 1279.90 1280.16 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 33.42 33.70 36.02 T!!!sha256 37.37 37.67 39.83 T!!!sha512 58.60 60.30 62.26 T:xoodyakv1 61.98 63.19 66.52 asconhashabi32v12 66.50 66.65 70.12 asconxofav12 66.44 66.65 70.31 asconhashav12 85.77 86.31 90.22 shake128 88.94 89.18 92.07 asconhashbi32v12 93.51 93.53 95.79 asconxofv12 93.53 93.68 96.29 asconhashv12 103.59 103.70 105.27 T:esch256v2 152.59 152.62 153.72 T:esch384v2 288.92 288.93 290.77 T:romulush 1268.57 1269.16 1270.84 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 74.75 75.05 76.50 T!!!sha256 79.84 79.92 84.11 T:xoodyakv1 82.78 82.97 88.02 T!!!sha512 96.41 96.47 98.33 asconhashabi32v12 103.66 103.75 107.59 asconhashav12 103.72 104.38 115.23 asconxofav12 132.28 132.41 140.69 asconhashbi32v12 139.50 139.53 142.09 asconxofv12 139.59 139.88 154.23 asconhashv12 143.78 143.86 147.69 T:esch256v2 236.34 236.77 248.16 T:esch384v2 255.38? 258.14? 291.53? shake128 410.98 416.11 442.02 T:romulush 1131.88 1139.23 1156.00 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 299.62 300.00 302.38 T:xoodyakv1 368.75 371.75 398.88 asconhashabi32v12 380.38 381.88 400.12 T!!!sha256 397.50 397.50 402.75 asconhashav12 397.50 400.88 401.25 asconxofav12 473.75 473.75 477.12 asconhashbi32v12 501.38 502.00 502.00 asconhashv12 502.00 502.00 505.38 asconxofv12 565.38 565.62 583.62 T:esch256v2 659.50 660.50 682.50 T!!!sha512 1047.50 1048.62 1084.50 T:esch384v2 1081.00 1081.12 1100.12 T:romulush 1343.75 1344.00 1344.50 T:photonbeetlehash256rate32v1 2017.25? 2037.38? 2345.88? shake128