VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260131 16:39:17]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
15.7016.0916.55sha256
27.2527.6528.87sha512
42.9543.4544.60asconhashabi32v12
44.5745.6746.45T:xoodyakv1
44.5945.8046.20shake128
47.3948.3948.87asconhashav12
47.3348.4848.97asconxofav12
61.5262.6863.19asconhashbi32v12
67.4167.9768.52asconhashv12
66.6867.9768.59asconxofv12
87.1988.7489.40T:esch256v2
127.75128.77130.03T:esch384v2
226.84229.55230.17T:romulush
1018.411023.031026.90T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
16.5916.9817.21sha256
28.7828.8730.00sha512
43.8044.0044.82asconhashabi32v12
45.2545.6146.73T:xoodyakv1
48.0348.1148.42asconhashav12
48.0248.1148.76asconxofav12
47.8148.2749.86shake128
62.5262.5963.59asconhashbi32v12
67.5267.6568.54asconxofv12
67.6767.9370.09asconhashv12
87.8488.3292.23T:esch256v2
128.12129.01133.09T:esch384v2
228.40232.35236.31T:romulush
1021.221024.061030.68T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
18.5518.9019.13sha256
31.8131.8632.25sha512
45.5745.6345.91asconhashabi32v12
46.8147.1247.18T:xoodyakv1
49.8549.9250.05asconhashav12
49.8749.9850.19asconxofav12
55.0255.2155.90shake128
64.5664.6264.86asconhashbi32v12
69.5069.5970.19asconhashv12
69.5369.6170.21asconxofv12
89.8089.9691.28T:esch256v2
131.11131.24131.75T:esch384v2
231.08231.60243.62T:romulush
1012.251026.001029.13T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
23.8224.1924.43sha256
37.0737.2037.30sha512
50.2650.3250.84asconhashabi32v12
51.0851.2651.48T:xoodyakv1
54.8054.8855.15asconhashav12
54.8154.9055.07asconxofav12
70.1270.1870.81asconhashbi32v12
70.1470.5171.81shake128
74.9074.9875.43asconhashv12
74.9174.9875.07asconxofv12
95.0695.1895.59T:esch256v2
139.56139.67140.12T:esch384v2
241.34241.65243.66T:romulush
1007.471018.101043.64T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
89.4190.6291.72sha256
104.36105.17105.69T:xoodyakv1
110.11110.70110.94asconhashabi32v12
116.58117.05118.27sha512
117.27117.92118.61asconhashav12
117.62118.23121.78asconxofav12
140.98141.64142.77asconhashbi32v12
144.19144.69145.27asconhashv12
144.27144.73145.41asconxofv12
163.78164.28164.61T:esch256v2
247.70248.08248.58T:esch384v2
286.86288.33294.08shake128
372.48373.19373.66T:romulush
922.50928.19933.42T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
560.88564.12569.25T:xoodyakv1
582.62586.12588.12asconhashabi32v12
587.00590.62599.88sha256
609.25613.75619.25asconxofav12
610.88615.62622.88asconhashav12
687.00691.12698.50asconhashv12
687.75693.62697.50asconxofv12
699.12703.25705.12asconhashbi32v12
803.12806.38813.25T:esch256v2
933.75939.62945.50sha512
1166.001171.121175.75T:romulush
1238.001240.621244.62T:esch384v2
1376.621381.501385.00T:photonbeetlehash256rate32v1
2290.882304.882341.62shake128