VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20241022

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
12.5712.5812.60sha256
19.7020.0520.30sha512
30.1430.1630.17asconhashabi32v12
30.8430.9330.96shake128
32.9132.9532.96T:xoodyakv1
34.0234.0234.04asconhashav12
34.0134.0234.05asconxofav12
44.0144.0344.04asconhashbi32v12
48.0348.0448.06asconhashv12
48.0248.0448.06asconxofv12
64.8064.8164.82T:esch256v2
94.1994.2094.21T:esch384v2
129.19129.90130.15T:romulush
692.35697.15697.21T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
12.9412.9512.97sha256
20.5921.0621.08sha512
30.4630.4630.47asconhashabi32v12
32.9132.9833.16shake128
33.1733.1733.18T:xoodyakv1
34.3834.3934.40asconhashav12
34.3834.3934.41asconxofav12
44.2944.2944.46asconhashbi32v12
48.4648.4748.55asconxofv12
48.4648.4748.54asconhashv12
65.2465.2565.26T:esch256v2
95.1595.1595.20T:esch384v2
130.57130.58130.67T:romulush
695.85695.88695.92T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
13.5913.6013.65sha256
22.0522.4722.50sha512
31.0131.0131.02asconhashabi32v12
33.5633.5633.58T:xoodyakv1
35.0235.0235.02asconhashav12
35.0235.0235.03asconxofav12
37.4337.5037.86shake128
44.9844.9845.00asconhashbi32v12
49.2349.2349.25asconhashv12
49.2349.2349.25asconxofv12
66.0166.0266.02T:esch256v2
96.7996.8096.82T:esch384v2
132.23132.29133.16T:romulush
693.56693.66693.82T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
15.2815.2915.34sha256
23.5723.6024.09sha512
32.4932.4932.50asconhashabi32v12
34.5234.6034.61T:xoodyakv1
36.7236.7236.72asconhashav12
36.7236.7236.72asconxofav12
46.0346.1946.66shake128
46.8346.8346.83asconhashbi32v12
51.2851.2851.29asconhashv12
51.2851.2851.29asconxofv12
68.0568.0568.08T:esch256v2
101.18101.19101.22T:esch384v2
136.80136.82136.86T:romulush
687.80687.92688.32T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
37.4837.7037.94sha256
46.9247.4547.56T:xoodyakv1
51.4551.4551.45asconhashabi32v12
52.7053.0553.64sha512
58.4558.4558.47asconhashav12
58.4558.4558.47asconxofav12
70.4570.4570.50asconhashbi32v12
77.5077.5077.58asconhashv12
77.5077.5277.58asconxofv12
94.4794.4794.47T:esch256v2
157.72157.72157.72T:esch384v2
171.94172.72177.14shake128
195.36195.41195.44T:romulush
614.19614.41614.42T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
173.62174.50178.00T:xoodyakv1
193.50194.50196.62sha256
198.25198.25198.62asconhashabi32v12
227.25227.25227.75asconhashav12
227.25227.25227.75asconxofav12
254.00254.00254.38asconhashbi32v12
281.38281.38281.38asconhashv12
281.38281.50282.00asconxofv12
364.50364.50364.88T:esch256v2
416.12419.38427.75sha512
516.50518.12518.25T:romulush
688.38688.38688.75T:esch384v2
728.75730.25730.88T:photonbeetlehash256rate32v1
1365.381373.381402.75shake128