VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
15.7016.0916.55sha256
27.2527.6528.87sha512
42.9543.4544.60asconhashabi32v12
44.5745.6746.45T:xoodyakv1
44.5945.8046.20shake128
47.3948.3948.87asconhashav12
47.3348.4848.97asconxofav12
61.5262.6863.19asconhashbi32v12
67.4167.9768.52asconhashv12
66.6867.9768.59asconxofv12
87.1988.7489.40T:esch256v2
127.75128.77130.03T:esch384v2
226.84229.55230.17T:romulush
1018.411023.031026.90T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
16.5916.9817.21sha256
28.7828.8730.00sha512
43.8044.0044.82asconhashabi32v12
45.2545.6146.73T:xoodyakv1
48.0348.1148.42asconhashav12
48.0248.1148.76asconxofav12
47.8148.2749.86shake128
62.5262.5963.59asconhashbi32v12
67.5267.6568.54asconxofv12
67.6767.9370.09asconhashv12
87.8488.3292.23T:esch256v2
128.12129.01133.09T:esch384v2
228.40232.35236.31T:romulush
1021.221024.061030.68T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
18.5518.9019.13sha256
31.8131.8632.25sha512
45.5745.6345.91asconhashabi32v12
46.8147.1247.18T:xoodyakv1
49.8549.9250.05asconhashav12
49.8749.9850.19asconxofav12
55.0255.2155.90shake128
64.5664.6264.86asconhashbi32v12
69.5069.5970.19asconhashv12
69.5369.6170.21asconxofv12
89.8089.9691.28T:esch256v2
131.11131.24131.75T:esch384v2
231.08231.60243.62T:romulush
1012.251026.001029.13T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
23.8224.1924.43sha256
37.0737.2037.30sha512
50.2650.3250.84asconhashabi32v12
51.0851.2651.48T:xoodyakv1
54.8054.8855.15asconhashav12
54.8154.9055.07asconxofav12
70.1270.1870.81asconhashbi32v12
70.1470.5171.81shake128
74.9074.9875.43asconhashv12
74.9174.9875.07asconxofv12
95.0695.1895.59T:esch256v2
139.56139.67140.12T:esch384v2
241.34241.65243.66T:romulush
1007.471018.101043.64T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
89.4190.6291.72sha256
104.36105.17105.69T:xoodyakv1
110.11110.70110.94asconhashabi32v12
116.58117.05118.27sha512
117.27117.92118.61asconhashav12
117.62118.23121.78asconxofav12
140.98141.64142.77asconhashbi32v12
144.19144.69145.27asconhashv12
144.27144.73145.41asconxofv12
163.78164.28164.61T:esch256v2
247.70248.08248.58T:esch384v2
286.86288.33294.08shake128
372.48373.19373.66T:romulush
922.50928.19933.42T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
560.88564.12569.25T:xoodyakv1
582.62586.12588.12asconhashabi32v12
587.00590.62599.88sha256
609.25613.75619.25asconxofav12
610.88615.62622.88asconhashav12
687.00691.12698.50asconhashv12
687.75693.62697.50asconxofv12
699.12703.25705.12asconhashbi32v12
803.12806.38813.25T:esch256v2
933.75939.62945.50sha512
1166.001171.121175.75T:romulush
1238.001240.621244.62T:esch384v2
1376.621381.501385.00T:photonbeetlehash256rate32v1
2290.882304.882341.62shake128