VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates, indexed by machine

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains round-2 candidates in NISTLWC.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each hash function (and each implementation).

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20210326

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 14.82 14.92 15.48 T:xoodyakv1 17.81 17.87 18.08 asconhashv12 17.85 17.96 18.59 asconxofv12 24.50 24.53 24.62 T:gimli24v1 24.98 25.10 25.14 T:esch256v1 35.42 35.45 35.60 T:saturninhashv2 35.39 35.54 35.77 T:esch384v1 37.61 37.76 37.78 T:drygascon128 47.74 47.93 49.67 T:drygascon256 49.10 49.30 49.81 T:knot256v2 101.72 102.19 102.66 T:knot256v1 166.31 167.27 172.97 T:knot512 179.08 179.40 180.19 T:knot384 330.35 331.69 334.58 T:subterraneanv1 642.62 643.68 647.59 T:skinnyhashtk3 966.85 970.65 973.46 T:acehash256v1 1317.51 1319.98 1325.56 T:skinnyhashtk2 2371.25 2374.17 2380.91 T:orangishv1 11395.43 11476.03 11571.68 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 14.97 15.43 15.53 T:xoodyakv1 18.03 18.13 18.20 asconhashv12 18.07 18.13 18.26 asconxofv12 24.77 24.80 24.87 T:gimli24v1 25.23 25.29 25.32 T:esch256v1 35.84 35.87 35.90 T:saturninhashv2 35.84 35.90 36.03 T:esch384v1 37.82 37.89 39.19 T:drygascon128 47.98 48.11 48.34 T:drygascon256 49.71 49.74 49.77 T:knot256v2 102.40 102.47 105.92 T:knot256v1 167.93 168.61 173.66 T:knot512 179.49 179.62 179.75 T:knot384 331.33 333.45 342.56 T:subterraneanv1 647.63 649.42 652.68 T:skinnyhashtk3 976.62 980.24 982.19 T:acehash256v1 1324.88 1367.43 1371.46 T:skinnyhashtk2 2390.82 2391.57 2393.82 T:orangishv1 11429.44 11459.94 11486.01 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 15.19 15.54 15.62 T:xoodyakv1 18.40 18.92 19.01 asconxofv12 18.49 18.92 19.44 asconhashv12 25.09 25.17 25.95 T:gimli24v1 25.52 26.21 26.56 T:esch256v1 36.37 36.46 37.59 T:saturninhashv2 36.46 37.67 38.28 T:esch384v1 38.02 39.23 39.41 T:drygascon128 48.61 48.78 50.26 T:drygascon256 50.35 51.13 52.17 T:knot256v2 102.77 103.21 106.68 T:knot256v1 169.00 169.09 169.87 T:knot512 180.55 180.98 186.88 T:knot384 332.45 332.71 333.23 T:subterraneanv1 655.62 656.48 657.79 T:skinnyhashtk3 996.14 998.49 1001.61 T:acehash256v1 1323.91 1328.94 1372.34 T:skinnyhashtk2 2421.69 2422.04 2427.25 T:orangishv1 11399.29 11430.72 11492.95 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 15.97? 15.97? 32.64? T:xoodyakv1 19.67? 19.68? 30.79? asconhashv12 19.68? 20.37? 30.79? asconxofv12 27.08? 27.31? 34.95? T:esch256v1 26.85? 31.94? 47.68? T:gimli24v1 38.89? 39.12? 50.46? T:saturninhashv2 39.35? 39.58? 43.75? T:esch384v1 39.81 40.05 44.21 T:drygascon128 50.00 51.62 52.08 T:drygascon256 56.02 56.25 60.65 T:knot256v2 103.70 106.71 107.64 T:knot256v1 171.98 172.22 179.16 T:knot512 183.09 183.33 184.48 T:knot384 335.87 336.10 336.79 T:subterraneanv1 677.75 678.22 679.37 T:skinnyhashtk3 1046.26 1053.20 1075.42 T:acehash256v1 1334.90 1335.36 1335.60 T:skinnyhashtk2 2503.84 2504.30 2509.86 T:orangishv1 11265.30 11284.51 11321.32 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 18.75? 20.83? 41.66? T:xoodyakv1 27.08? 29.16? 81.23? asconxofv12 27.09? 29.17? 50.00? asconhashv12 37.50? 39.58? 75.00? T:esch256v1 43.75? 43.75? 108.33? T:drygascon128 56.25? 56.25? 120.83? T:saturninhashv2 60.42? 66.67? 120.84? T:esch384v1 70.83? 70.83? 168.73? T:drygascon256 37.50? 87.50? 87.50? T:gimli24v1 77.08? 158.33? 170.83? T:knot256v2 143.73? 197.91? 212.48? T:knot256v1 220.83? 283.31? 479.14? T:knot512 210.41? 372.91? 464.56? T:knot384 393.73? 395.81? 1462.44? T:subterraneanv1 966.62? 997.89? 2056.17? T:skinnyhashtk3 1533.27? 1537.44? 3162.38? T:skinnyhashtk2 1581.19? 1633.27? 2316.58? T:acehash256v1 3556.11 3556.11 3560.28 T:orangishv1 9628.80 9637.12 9714.20 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 66.62? 66.75? 166.62? T:xoodyakv1 83.38? 100.00? 166.62? asconhashv12 83.38? 100.00? 183.38? asconxofv12 116.62? 116.75? 283.25? T:drygascon128 133.38? 150.00? 266.62? T:esch256v1 150.00? 166.62? 399.88? T:saturninhashv2 100.00? 216.62? 233.25? T:gimli24v1 266.62? 266.75? 633.25? T:drygascon256 266.62? 283.38? 516.62? T:esch384v1 250.00? 383.25? 449.88? T:knot256v1 216.75? 433.25? 550.00? T:knot256v2 733.38? 750.00? 2099.88? T:subterraneanv1 433.25? 866.62? 933.25? T:knot384 533.38? 1150.00? 1399.88? T:knot512 2666.62? 2699.88? 8133.00? T:skinnyhashtk3 2733.25? 2733.25? 8916.25? T:skinnyhashtk2 5999.75? 6066.50? 17732.75? T:acehash256v1 9849.50? 10266.38? 10966.25? T:photonbeetlehash256rate32v1 14699.38? 20849.25? 26349.00? T:orangishv1

amd64; IceLake (706e5); 2020 Intel Core i5-1030NG7; 4 x 1100MHz; icelake, supercop-20200826

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 8.81 8.82 8.82 T:xoodyakv1 14.15 14.16 14.69 T:gimli24v1 23.23 23.28 23.32 T:asconhashv12 23.27 23.29 23.30 T:asconxofv12 30.86 30.90 31.06 T:esch256v1 38.69 38.73 39.07 T:esch384v1 50.76 50.78 51.25 T:saturninhashv2 81.23 81.47 82.31 T:drygascon128 82.10 82.17 82.66 T:knot256v2 81.88 82.68 84.36 T:drygascon256 125.18 125.80 126.45 T:knot256v1 271.53 271.98 272.82 T:knot512 291.66 292.06 292.88 T:knot384 943.34 964.65 1014.73 T:subterraneanv1 1225.61 1235.67 1263.31 T:skinnyhashtk3 1215.40? 1268.17? 1358.32? T:acehash256v1 2178.66 2185.39 2194.12 T:skinnyhashtk2 3336.22 3369.22 3394.68 T:photonbeetlehash256rate32v1 4007.12 4023.06 4044.75 T:orangishv1

Cycles/byte for 4096 bytes 25% 50% 75% hash 8.86 8.87 8.88 T:xoodyakv1 14.25 14.26 14.29 T:gimli24v1 23.43 23.47 23.51 T:asconxofv12 23.46 23.48 23.51 T:asconhashv12 31.10 31.13 31.17 T:esch256v1 39.06 39.08 39.11 T:esch384v1 51.15 51.17 51.19 T:saturninhashv2 81.33 81.37 83.42 T:drygascon128 82.10 82.26 84.53 T:drygascon256 82.77 82.82 82.86 T:knot256v2 125.06 125.13 125.99 T:knot256v1 272.62 272.73 272.98 T:knot512 292.02 292.46 292.71 T:knot384 925.11 927.17 931.06 T:subterraneanv1 1191.34? 1208.71? 1363.02? T:acehash256v1 1240.69 1245.37 1326.89 T:skinnyhashtk3 2182.40 2185.72 2190.69 T:skinnyhashtk2 3368.33 3375.04 3384.19 T:photonbeetlehash256rate32v1 4038.87 4044.61 4052.52 T:orangishv1

Cycles/byte for 1536 bytes 25% 50% 75% hash 8.93 8.94 8.96 T:xoodyakv1 14.40 14.42 14.45 T:gimli24v1 23.73 23.77 23.80 T:asconhashv12 23.75 23.80 23.84 T:asconxofv12 31.39 31.48 31.54 T:esch256v1 39.75 39.79 39.87 T:esch384v1 51.84 51.89 51.97 T:saturninhashv2 81.52 81.59 81.69 T:drygascon128 82.96 83.11 85.30 T:drygascon256 83.91 84.06 84.17 T:knot256v2 125.47 125.54 125.67 T:knot256v1 274.43 274.57 274.63 T:knot512 294.02 294.22 294.33 T:knot384 926.71 929.81 931.98 T:subterraneanv1 1211.63 1220.43 1226.59 T:acehash256v1 1253.56 1256.26 1259.62 T:skinnyhashtk3 2189.33 2193.34 2201.35 T:skinnyhashtk2 3356.62 3379.05 3504.34 T:photonbeetlehash256rate32v1 4097.37 4108.15 4120.31 T:orangishv1

Cycles/byte for 576 bytes 25% 50% 75% hash 9.13 9.17 9.22 T:xoodyakv1 14.84 14.88 14.93 T:gimli24v1 24.56 24.63 24.68 T:asconxofv12 24.59 24.66 24.71 T:asconhashv12 32.29 32.37 32.49 T:esch256v1 41.44 41.49 41.55 T:esch384v1 53.65 53.73 53.82 T:saturninhashv2 81.94 82.05 82.15 T:drygascon128 84.75 84.82 84.89 T:drygascon256 86.85 86.94 87.19 T:knot256v2 126.59 126.70 126.82 T:knot256v1 279.16 279.25 279.44 T:knot512 297.70 298.06 298.17 T:knot384 934.34 941.10 941.64 T:subterraneanv1 1260.23 1266.18 1279.24 T:acehash256v1 1294.26 1295.97 1299.19 T:skinnyhashtk3 2205.75 2211.88 2235.66 T:skinnyhashtk2 3324.07 3328.22 3339.14 T:photonbeetlehash256rate32v1 4257.86 4261.04 4273.56 T:orangishv1

Cycles/byte for 64 bytes 25% 50% 75% hash 11.94 12.03 12.09 T:xoodyakv1 20.42 20.58 20.72 T:gimli24v1 34.98 35.20 35.38 T:asconhashv12 34.97 35.34 35.56 T:asconxofv12 44.41 44.73 46.52 T:esch256v1 63.25 63.44 63.80 T:esch384v1 76.23 76.55 76.70 T:saturninhashv2 87.88 88.12 88.36 T:drygascon128 109.23 109.98 110.25 T:drygascon256 124.55 125.16 125.97 T:knot256v2 141.64 142.02 142.31 T:knot256v1 328.44 328.81 329.30 T:knot384 340.05 341.03 341.89 T:knot512 1048.75 1053.30 1063.19 T:subterraneanv1 1828.02 1833.14 1841.88 T:skinnyhashtk3 1925.50 1928.36 1932.94 T:acehash256v1 2448.33 2449.94 2452.98 T:skinnyhashtk2 2948.48 2950.08 2952.62 T:photonbeetlehash256rate32v1 5997.36 6002.52 6013.36 T:orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 42.25 42.88 43.50 T:xoodyakv1 51.50 52.50 53.50 T:gimli24v1 118.12 118.88 121.12 T:asconxofv12 117.88 119.62 121.38 T:asconhashv12 163.38 165.75 174.50 T:esch256v1 205.12 206.62 209.62 T:saturninhashv2 218.50 219.88 221.12 T:drygascon128 257.62 258.88 260.50 T:knot256v1 274.50 276.25 281.50 T:esch384v1 338.38 340.75 343.38 T:knot256v2 366.75 369.38 371.00 T:drygascon256 656.38 658.00 661.00 T:knot384 814.62 816.62 819.25 T:knot512 2008.00 2015.50 2033.12 T:subterraneanv1 3378.25 3383.25 3389.38 T:photonbeetlehash256rate32v1 4365.00 4373.75 4378.62 T:skinnyhashtk2 4874.88 4889.00 4913.38 T:skinnyhashtk3 7131.00 7143.25 7166.12 T:acehash256v1 23966.38 24000.00 24954.75 T:orangishv1

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; rpi4ubuntu64, supercop-20191221

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 22.00 22.00 22.00 asconhashv12 22.00 22.00 22.00 asconxofv12 30.39? 33.06? 34.24? xoodyakv1 34.99 35.00 35.01 gimli24v1 48.41 48.44 48.44 esch256v1 53.13 53.20 53.32 saturninhashv2 64.51 65.56 66.32 drygascon128 73.07 73.56 74.55 esch384v1 77.08 77.09 77.11 drygascon256 81.55 81.56 81.58 knot256v2 149.25 149.25 149.26 knot256v1 282.73 282.76 282.91 knot512 290.12 290.23 290.60 knot384 764.95 770.63 771.58 subterraneanv1 1529.79 1530.06 1539.07 acehash256v1 1932.51 1936.04 1937.67 skinnyhashtk3 3172.23 3176.81 3180.57 skinnyhashtk2 5373.54 5377.16 5381.08 orangishv1 20177.25 20223.48 20239.33 photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 22.18 22.18 22.18 asconhashv12 22.18 22.18 22.18 asconxofv12 32.02 33.20 33.20 xoodyakv1 35.27 35.27 35.28 gimli24v1 48.74 48.74 48.74 esch256v1 53.65 53.65 53.71 saturninhashv2 65.69 65.69 66.06 drygascon128 74.28 74.28 74.78 esch384v1 77.59 77.60 77.60 drygascon256 82.21 82.21 82.21 knot256v2 149.55 149.55 149.55 knot256v1 283.86 283.87 283.94 knot512 291.05 291.09 291.26 knot384 769.81 771.13 771.55 subterraneanv1 1546.86 1546.93 1550.75 acehash256v1 1949.94 1951.54 1951.91 skinnyhashtk3 3183.06 3184.19 3185.34 skinnyhashtk2 5420.01 5420.76 5422.01 orangishv1 20145.22 20161.70 20167.15 photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 22.48 22.48 22.48 asconhashv12 22.48 22.48 22.48 asconxofv12 32.26 33.43 33.73 xoodyakv1 35.73 35.73 35.74 gimli24v1 49.23 49.23 49.23 esch256v1 54.39 54.41 54.46 saturninhashv2 65.90 65.96 66.89 drygascon128 75.47 75.47 75.96 esch384v1 78.43 78.44 78.45 drygascon256 83.28 83.28 83.29 knot256v2 150.05 150.05 150.06 knot256v1 285.72 285.72 285.73 knot512 292.79 292.81 292.90 knot384 772.58 772.83 777.12 subterraneanv1 1541.48 1569.91 1575.06 acehash256v1 1973.53 1978.31 1978.93 skinnyhashtk3 3194.93 3195.62 3197.29 skinnyhashtk2 5488.36 5493.64 5495.47 orangishv1 20062.55 20069.18 20075.13 photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 23.29 23.29 23.29 asconhashv12 23.29 23.29 23.29 asconxofv12 32.86 34.04 34.04 xoodyakv1 36.89 36.89 36.90 gimli24v1 50.55 50.55 50.55 esch256v1 56.39 56.41 56.45 saturninhashv2 66.45 66.45 66.52 drygascon128 78.65 78.66 79.13 esch384v1 80.67 80.68 80.70 drygascon256 86.14 86.15 86.16 knot256v2 151.39 151.39 151.39 knot256v1 290.66 290.67 290.70 knot512 296.65 296.67 296.73 knot384 779.98 780.89 780.89 subterraneanv1 1636.72 1636.81 1639.73 acehash256v1 2039.95 2041.01 2053.45 skinnyhashtk3 3216.54 3219.00 3231.29 skinnyhashtk2 5670.31 5683.18 5684.99 orangishv1 19897.85 19901.71 19905.73 photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 33.38 33.38 33.38 asconhashv12 33.38 33.38 33.38 asconxofv12 40.33 41.00 41.62 xoodyakv1 52.02 52.02 52.06 gimli24v1 67.45 67.45 67.47 esch256v1 73.59 73.59 73.66 drygascon128 81.61 81.64 81.95 saturninhashv2 109.42 109.47 109.86 drygascon256 119.45 119.45 119.77 esch384v1 122.77 122.77 122.77 knot256v2 168.48 168.48 168.48 knot256v1 327.45 327.45 327.55 knot384 353.94 353.94 353.95 knot512 883.23 883.77 884.02 subterraneanv1 2435.73 2492.20 2493.56 acehash256v1 2899.42 2899.88 2900.03 skinnyhashtk3 3575.00 3575.02 3575.05 skinnyhashtk2 8054.77 8055.33 8055.80 orangishv1 17628.16 17631.48 17741.64 photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 113.00 113.00 113.00 asconhashv12 113.00 113.00 113.12 asconxofv12 126.88 129.75 134.50 xoodyakv1 137.12 137.50 140.88 gimli24v1 193.38 193.50 193.50 drygascon128 226.50 226.75 228.75 saturninhashv2 247.00 247.25 249.38 esch256v1 303.00 303.00 303.62 knot256v1 330.50 331.00 334.50 knot256v2 411.00 411.50 412.50 drygascon256 510.75 510.75 510.75 esch384v1 660.75 660.88 663.38 knot384 850.25 850.62 853.12 knot512 1694.38 1694.38 1695.38 subterraneanv1 6357.50 6357.62 6358.12 skinnyhashtk2 7729.38 7730.88 7732.38 skinnyhashtk3 9005.88 9009.25 9017.00 acehash256v1 20153.75 20156.38 20158.25 photonbeetlehash256rate32v1 32203.38 32204.00 32207.62 orangishv1

armeabi; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; rpi4, supercop-20191221

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 36.66 36.69 36.71 xoodyakv1 46.63 46.66 46.70 asconhashv12 49.68 49.72 49.72 gimli24v1 50.48 50.68 50.74 esch256v1 54.99 55.00 55.04 saturninhashv2 65.82 67.37 67.40 asconxofv12 71.83 71.90 72.32 esch384v1 131.98 132.08 132.44 drygascon128 144.80 144.81 144.84 knot256v2 156.67 156.78 156.90 drygascon256 311.97 312.01 312.10 knot256v1 577.95 578.06 578.33 knot384 740.47 740.52 740.85 knot512 1155.20 1160.91 1173.15 subterraneanv1 1756.08 1890.11 1903.94 acehash256v1 2266.16? 2272.06? 2522.02? skinnyhashtk3 3908.61 3977.68 4071.56 skinnyhashtk2 4065.56 4066.89 4071.15 orangishv1 5447.11 5454.10 5460.42 photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 37.05 37.05 37.06 xoodyakv1 47.19 47.19 47.21 asconhashv12 50.24 50.25 50.25 gimli24v1 51.00 51.07 51.09 esch256v1 55.63 55.64 55.65 saturninhashv2 68.07 68.08 68.09 asconxofv12 72.78 72.79 72.80 esch384v1 132.37 132.40 132.58 drygascon128 146.19 146.19 146.20 knot256v2 157.81 157.86 157.92 drygascon256 312.85 312.86 312.91 knot256v1 579.93 579.95 580.08 knot384 743.91 743.92 744.07 knot512 1163.58 1165.90 1171.94 subterraneanv1 1902.93 1907.74 1914.50 acehash256v1 2286.97 2287.93 2412.79 skinnyhashtk3 3985.32 3986.74 4032.75 skinnyhashtk2 4100.29 4100.50 4100.82 orangishv1 5440.35 5442.63 5445.12 photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 37.65 37.65 37.67 xoodyakv1 48.09 48.09 48.09 asconhashv12 51.14 51.16 51.16 gimli24v1 51.78 51.81 51.88 esch256v1 56.68 56.69 56.69 saturninhashv2 69.23 69.23 69.26 asconxofv12 74.27 74.29 74.33 esch384v1 132.96 132.97 133.01 drygascon128 148.49 148.49 148.49 knot256v2 159.70 159.72 159.74 drygascon256 314.29 314.29 314.30 knot256v1 583.67 583.69 583.71 knot384 749.57 749.57 749.64 knot512 1166.78 1171.73 1172.73 subterraneanv1 1937.78 2043.52 2063.18 acehash256v1 2315.54 2315.69 2320.82 skinnyhashtk3 3998.80 4000.30 4006.76 skinnyhashtk2 4151.68 4151.85 4157.87 orangishv1 5417.70 5420.02 5424.15 photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 39.30 39.35 39.45 xoodyakv1 50.54 50.54 50.54 asconhashv12 53.58 53.58 53.62 gimli24v1 54.01 54.06 54.20 esch256v1 59.46 59.51 59.51 saturninhashv2 72.29 72.34 72.39 asconxofv12 77.84 78.32 78.36 esch384v1 134.55 134.59 134.64 drygascon128 154.61 154.61 154.66 knot256v2 164.78 164.83 164.83 drygascon256 318.09 318.14 318.14 knot256v1 592.15 592.15 592.15 knot384 764.70 764.74 764.74 knot512 1184.06 1184.54 1186.47 subterraneanv1 2020.80 2151.25 2151.93 acehash256v1 2394.98 2395.17 2395.41 skinnyhashtk3 4033.79 4034.57 4035.72 skinnyhashtk2 4293.43 4293.53 4293.87 orangishv1 5358.91 5368.36 5380.32 photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 59.89 60.33 60.75 xoodyakv1 81.17? 81.61? 124.14? asconhashv12 82.03 82.45 82.48 esch256v1 84.64 85.06 85.08 gimli24v1 95.06 95.48 95.48 saturninhashv2 111.09 111.53 111.56 asconxofv12 128.91 130.19 130.22 esch384v1 154.95 155.39 155.81 drygascon128 229.59 230.02 230.05 drygascon256 233.06 233.06 233.50 knot256v2 366.75 366.75 367.19 knot256v1 663.61 664.03 664.47 knot384 958.31 958.31 958.75 knot512 1348.94 1349.36 1349.38 subterraneanv1 3282.08 3325.45 3329.38 acehash256v1 3412.69 3413.14 3601.50 skinnyhashtk3 4486.47 4486.92 4487.78 skinnyhashtk2 4601.48 4631.44 4696.55 photonbeetlehash256rate32v1 6108.84 6108.88 6109.70 orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 253.50 256.88 260.38 xoodyakv1 277.75 281.25 281.25 gimli24v1 319.50 326.25 326.50 saturninhashv2 323.12 326.38 330.00 asconhashv12 350.62 350.62 350.88 esch256v1 416.62 420.12 423.62 asconxofv12 444.62 448.00 458.25 drygascon128 593.62 593.75 597.25 esch384v1 711.75 711.75 712.00 knot256v2 750.00 753.38 756.88 knot256v1 899.25 899.25 902.75 drygascon256 1402.88 1406.25 1409.75 knot384 2479.12 2482.50 2482.75 knot512 2638.88 2638.88 2638.88 subterraneanv1 4166.62? 4354.12? 4881.88? photonbeetlehash256rate32v1 8048.38 8048.62 8052.00 skinnyhashtk2 9159.50 9162.88 9666.50 skinnyhashtk3 12183.88 12333.25 12340.12 acehash256v1 24468.38 24471.75 24475.38 orangishv1

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus6, supercop-20210125

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 10.00 10.05 10.63 T:gimli24v1 9.60 10.07 10.33 T:xoodyakv1 12.38 12.83 12.98 asconhashv12 12.65 13.01 13.43 asconxofv12 26.02 26.30 27.40 T:esch256v1 31.32 32.05 32.43 T:saturninhashv2 34.74 34.83 35.23 T:esch384v1 44.46 44.78 45.61 T:drygascon128 48.08 48.50 48.52 T:knot256v2 50.27 52.47 53.06 T:drygascon256 79.31 81.01 82.51 T:knot256v1 151.56 154.15 160.31 T:knot512 175.41 177.20 179.44 T:knot384 677.56 682.79 688.24 T:subterraneanv1 738.19 758.08 766.25 T:acehash256v1 954.33 1025.49 1045.13 T:skinnyhashtk3 1875.45 1981.12 2034.62 T:skinnyhashtk2 2544.08 2587.49 2652.32 T:photonbeetlehash256rate32v1 11390.57? 12861.68? 12914.79? T:orangishv1

Cycles/byte for 4096 bytes 25% 50% 75% hash 9.68 9.99 10.24 T:xoodyakv1 10.08 10.09 10.75 T:gimli24v1 12.61 12.97 13.06 asconhashv12 12.73 12.99 13.29 asconxofv12 26.58 26.58 27.66 T:esch256v1 31.40 31.92 32.44 T:saturninhashv2 34.82 35.10 35.63 T:esch384v1 43.81 44.70 45.68 T:drygascon128 48.49 48.54 48.93 T:knot256v2 50.71 51.42 52.42 T:drygascon256 79.70 80.35 82.86 T:knot256v1 152.53 154.92 160.00 T:knot512 176.01 177.82 179.30 T:knot384 672.40 677.65 680.39 T:subterraneanv1 750.65 758.41 767.74 T:acehash256v1 972.89 1032.21 1043.37 T:skinnyhashtk3 1890.46 1983.04 2048.54 T:skinnyhashtk2 2547.04 2586.03 2650.07 T:photonbeetlehash256rate32v1 11571.16? 12834.60? 12900.89? T:orangishv1

Cycles/byte for 1536 bytes 25% 50% 75% hash 9.96 10.20 10.52 T:xoodyakv1 10.39 10.46 10.88 T:gimli24v1 12.98 13.26 13.29 asconhashv12 12.92 13.42 13.61 asconxofv12 26.46 27.08 27.96 T:esch256v1 32.01 32.33 32.86 T:saturninhashv2 35.10 35.38 35.92 T:esch384v1 43.54 43.81 45.75 T:drygascon128 49.13 49.15 49.56 T:knot256v2 51.69 52.95 53.63 T:drygascon256 79.03 79.12 82.91 T:knot256v1 152.36 157.25 161.10 T:knot512 178.52 178.89 181.86 T:knot384 673.12 673.93 681.24 T:subterraneanv1 744.04 772.15 784.48 T:acehash256v1 989.18 1046.54 1084.56 T:skinnyhashtk3 1963.46 2005.58 2033.92 T:skinnyhashtk2 2601.18 2615.19 2662.84 T:photonbeetlehash256rate32v1 11906.22 11937.19 12502.56 T:orangishv1

Cycles/byte for 576 bytes 25% 50% 75% hash 10.08 10.43 10.70 T:xoodyakv1 10.62 10.78 11.13 T:gimli24v1 13.56 13.83 14.02 asconhashv12 13.40 14.06 14.18 asconxofv12 27.27 27.89 29.02 T:esch256v1 33.44 33.44 33.98 T:saturninhashv2 36.88 37.15 38.09 T:esch384v1 43.94 44.49 46.09 T:drygascon128 50.86 50.86 50.90 T:knot256v2 53.56 53.98 55.27 T:drygascon256 79.22 79.81 83.75 T:knot256v1 155.16 158.87 165.39 T:knot512 182.62 182.85 182.93 T:knot384 670.20 682.15 691.41 T:subterraneanv1 770.62 809.92 818.16 T:acehash256v1 1060.59 1084.96 1118.36 T:skinnyhashtk3 1966.95 2047.89 2057.89 T:skinnyhashtk2 2569.65 2583.44 2652.46 T:photonbeetlehash256rate32v1 12366.60 12756.95 12920.35 T:orangishv1

Cycles/byte for 64 bytes 25% 50% 75% hash 13.36 13.72 14.06 T:xoodyakv1 15.11 15.12 15.47 T:gimli24v1 20.75 21.09 21.45 asconhashv12 20.39 21.44 21.80 asconxofv12 36.92 37.97 39.38 T:esch256v1 48.16 48.52 48.52 T:saturninhashv2 48.17 48.52 49.92 T:drygascon128 56.25 56.59 57.66 T:esch384v1 72.42 72.77 73.12 T:knot256v2 74.19 74.89 76.64 T:drygascon256 88.95 89.64 93.52 T:knot256v1 192.66 197.94 203.55 T:knot512 201.09 201.45 203.20 T:knot384 747.08 758.67 769.58 T:subterraneanv1 1182.31 1242.06 1245.59 T:acehash256v1 1447.38 1540.20 1605.59 T:skinnyhashtk3 2168.80 2248.23 2276.36 T:skinnyhashtk2 2279.89 2284.80 2377.27 T:photonbeetlehash256rate32v1 18368.80 18804.03 18929.17 T:orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 39.38 39.38 39.38 T:gimli24v1 47.75 47.88 50.62 T:xoodyakv1 73.12 75.88 78.75 asconhashv12 73.12 76.00 78.75 asconxofv12 123.75 123.75 126.62 T:drygascon128 132.12 132.25 135.00 T:saturninhashv2 143.38 143.50 149.00 T:esch256v1 163.12 165.88 171.50 T:knot256v1 194.00 194.12 196.88 T:knot256v2 244.75 247.50 250.25 T:esch384v1 281.25 281.25 286.88 T:drygascon256 405.00 407.75 410.62 T:knot384 472.50 483.75 503.38 T:knot512 1395.00 1431.50 1437.12 T:subterraneanv1 2593.12 2601.50 2722.50 T:photonbeetlehash256rate32v1 3881.25 3940.38 3993.75 T:skinnyhashtk2 3864.38 4027.50 4154.00 T:skinnyhashtk3 4297.50 4592.75 4612.50 T:acehash256v1 72315.00 73926.50 74303.50 T:orangishv1

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus7, supercop-20210125

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 9.93 10.68 10.77 T:xoodyakv1 10.02 10.78 11.04 T:gimli24v1 14.26 14.71 15.69 asconxofv12 14.31 14.79 15.81 asconhashv12 28.33? 28.75? 34.22? T:esch256v1 31.84 32.81 33.40 T:saturninhashv2 40.42 41.45 44.69 T:esch384v1 43.56? 45.85? 49.99? T:drygascon128 43.39 46.64 47.41 T:knot256v2 49.74 52.58 54.13 T:drygascon256 78.17 83.85 85.00 T:knot256v1 155.26 162.98 165.74 T:knot512 159.80 168.07 169.24 T:knot384 737.46 778.83 783.01 T:acehash256v1 862.08 878.37 883.95 T:subterraneanv1 944.41 970.60 980.14 T:skinnyhashtk3 1821.76 1841.61 1865.46 T:skinnyhashtk2 2943.67 2997.20 3003.24 T:orangishv1 3173.22 3250.07 3265.99 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 10.06 10.68 10.74 T:xoodyakv1 10.19 10.95 11.02 T:gimli24v1 14.43 14.86 15.73 asconxofv12 14.58 14.91 15.78 asconhashv12 28.95 31.70 31.73 T:esch256v1 32.24 32.94 33.73 T:saturninhashv2 42.07 43.68 44.43 T:esch384v1 44.08 47.02 47.40 T:knot256v2 45.81 47.96 49.06 T:drygascon128 53.45? 58.78? 60.87? T:drygascon256 78.89 84.15 84.18 T:knot256v1 158.62 163.61 164.98 T:knot512 167.88 167.88 169.54 T:knot384 752.70 777.66 784.48 T:acehash256v1 865.69 874.45 877.71 T:subterraneanv1 962.73 973.48 978.32 T:skinnyhashtk3 1825.50 1838.56 1849.09 T:skinnyhashtk2 2926.55 2952.95 3024.39 T:orangishv1 3177.13 3229.85 3250.63 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 10.41 10.84 10.93 T:xoodyakv1 10.50 11.07 11.15 T:gimli24v1 14.74 15.21 15.94 asconxofv12 14.84 15.34 16.03 asconhashv12 29.59? 32.04? 33.69? T:esch256v1 32.65 33.76 34.19 T:saturninhashv2 42.85 43.59 44.75 T:esch384v1 46.11 46.19 47.65 T:drygascon128 44.31 47.62 47.62 T:knot256v2 51.56? 53.99? 57.30? T:drygascon256 78.52 83.06 83.74 T:knot256v1 163.42 166.08 166.10 T:knot512 168.90 170.29 170.54 T:knot384 742.78 756.56 790.44 T:acehash256v1 833.28 874.20 886.54 T:subterraneanv1 941.22 986.40 993.08 T:skinnyhashtk3 1747.81 1828.46 1843.56 T:skinnyhashtk2 2948.10 3064.86 3071.37 T:orangishv1 3136.11 3257.89 3274.37 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 10.59 10.94 11.09 T:xoodyakv1 10.86 11.41 11.52 T:gimli24v1 15.59 15.94 16.56 asconxofv12 15.59 16.05 16.68 asconhashv12 30.82 32.34 32.66 T:esch256v1 34.26 35.04 35.59 T:saturninhashv2 44.49 45.35 48.59 T:esch384v1 45.51 46.52 46.68 T:drygascon128 45.86 48.87 49.65 T:knot256v2 55.51 58.98 60.86 T:drygascon256 79.38 83.79 85.16 T:knot256v1 157.19 169.02 169.41 T:knot512 171.48 172.66 172.77 T:knot384 785.66 794.73 824.80 T:acehash256v1 881.91 889.10 889.41 T:subterraneanv1 1002.97 1008.71 1018.36 T:skinnyhashtk3 1753.28 1840.55 1855.90 T:skinnyhashtk2 2964.02 3133.67 3161.41 T:orangishv1 3016.33 3193.48 3225.35 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 14.06 14.41 14.42 T:xoodyakv1 15.12 15.81 16.17 T:gimli24v1 22.84 23.55 24.27 asconxofv12 22.86 23.56 24.61 asconhashv12 39.38 41.48 42.19 T:esch256v1 46.77 49.56 49.92 T:drygascon128 50.98 51.33 52.39 T:saturninhashv2 66.80 68.91 73.12 T:esch384v1 66.45 70.31 71.02 T:knot256v2 75.23 75.58 75.94 T:drygascon256 88.94 94.22 94.56 T:knot256v1 178.95 188.78 191.59 T:knot384 192.66 205.31 207.06 T:knot512 950.28 1003.72 1007.94 T:subterraneanv1 1175.62 1204.45 1254.38 T:acehash256v1 1363.36 1447.03 1453.70 T:skinnyhashtk3 1910.05 2042.58 2046.09 T:skinnyhashtk2 2681.38 2838.17 2840.62 T:photonbeetlehash256rate32v1 4184.64 4451.84 4453.94 T:orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 39.38 42.12 42.25 T:gimli24v1 50.62 50.62 50.62 T:xoodyakv1 78.75? 81.50? 106.88? asconhashv12 78.75 81.50 84.38 asconxofv12 118.12 121.00 126.50 T:drygascon128 137.88 143.38 143.50 T:saturninhashv2 143.50 154.62 154.75 T:esch256v1 163.12 171.50 174.38 T:knot256v1 177.25 188.38 188.50 T:knot256v2 275.62 281.25 281.25 T:drygascon256 278.38 286.88 303.75 T:esch384v1 357.25 376.88 379.75 T:knot384 472.50 503.38 506.25 T:knot512 1839.38 1946.25 1946.25 T:subterraneanv1 3068.38 3254.00 3279.38 T:photonbeetlehash256rate32v1 3445.38 3608.38 3645.00 T:skinnyhashtk2 3872.75 3875.62 3912.12 T:skinnyhashtk3 4300.38 4440.88 4657.50 T:acehash256v1 16697.75 17811.62 17952.25 T:orangishv1

amd64; Zen2 (830f10); 2019 AMD EPYC 7702; 64 x 2000MHz; genji346, supercop-20191017

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 7.91? 12.27? 20.92? gimli24v1 18.78 18.81 18.81 asconhashv12 18.78 18.81 18.83 asconxofv12 29.77 29.90 30.19 xoodyakv1 38.07 38.16 38.26 esch256v1 43.96 44.30 44.31 saturninhashv2 48.60 48.69 48.79 esch384v1 61.88 62.17 62.34 drygascon128 63.38 63.41 63.54 knot256v2 68.67 69.38 70.64 drygascon256 111.60 111.66 111.82 knot256v1 213.90 215.36 225.05 knot512 224.49 227.12 238.12 knot384 560.73 567.79 580.69 subterraneanv1 1165.71 1177.01 1187.78 acehash256v1 1366.23? 1414.01? 1566.50? skinnyhashtk3 2718.50 2732.37 2755.82 skinnyhashtk2 3511.94 3528.14 3560.71 orangishv1 4639.18 4668.70 4713.13 photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 12.34? 12.36? 16.67? gimli24v1 18.95 18.95 18.95 asconhashv12 18.95 18.95 18.96 asconxofv12 30.03 30.04 30.17 xoodyakv1 38.42 38.43 38.45 esch256v1 44.64 44.65 44.65 saturninhashv2 49.13 49.17 49.20 esch384v1 62.08 62.21 62.23 drygascon128 63.96 63.96 63.99 knot256v2 69.82 69.85 70.47 drygascon256 111.90 111.93 111.97 knot256v1 215.25 215.75 220.59 knot512 226.01 226.90 232.36 knot384 570.42 571.76 574.27 subterraneanv1 1184.33 1187.60 1191.27 acehash256v1 1440.45 1444.33 1511.32 skinnyhashtk3 2747.82 2751.14 2758.94 skinnyhashtk2 3569.16 3574.47 3582.55 orangishv1 4650.80 4659.49 4670.69 photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 12.47 12.50 12.54 gimli24v1 19.18 19.19 19.23 asconhashv12 19.18 19.19 19.23 asconxofv12 30.26 30.26 30.40 xoodyakv1 38.82 38.85 38.95 esch256v1 45.22 45.25 45.60 saturninhashv2 49.93 49.97 50.04 esch384v1 62.30 62.33 62.38 drygascon128 64.79 64.80 64.88 knot256v2 70.21 71.03 71.22 drygascon256 112.25 112.32 112.33 knot256v1 216.72 216.74 217.20 knot512 227.29 227.36 228.19 knot384 568.65 571.17 581.38 subterraneanv1 1204.79 1208.18 1211.58 acehash256v1 1465.55 1526.58 1539.91 skinnyhashtk3 2757.55 2764.92 2773.33 skinnyhashtk2 3622.04 3634.87 3644.69 orangishv1 4617.63 4636.24 4652.03 photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 12.92 12.92 12.95 gimli24v1 19.83 19.86 19.93 asconhashv12 19.83 19.86 19.93 asconxofv12 30.87 30.87 31.01 xoodyakv1 39.90 39.97 40.00 esch256v1 46.81 46.84 46.91 saturninhashv2 52.08 52.12 52.15 esch384v1 62.74 62.78 62.85 drygascon128 67.05 67.05 67.05 knot256v2 72.40 73.02 73.26 drygascon256 113.30 113.33 113.37 knot256v1 220.59 220.62 221.08 knot512 230.07 230.73 231.70 knot384 576.60 579.17 581.15 subterraneanv1 1243.54 1245.73 1275.62 acehash256v1 1501.77 1538.85 1564.51 skinnyhashtk3 2769.17 2797.95 2808.78 skinnyhashtk2 3739.44 3754.24 3767.81 orangishv1 4510.31 4535.07 4560.59 photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 18.75 18.75 18.75 gimli24v1 28.44 28.75 28.75 asconhashv12 28.44 28.75 28.75 asconxofv12 38.44 38.44 38.75 xoodyakv1 54.06 54.38 55.62 esch256v1 66.88 67.19 67.19 saturninhashv2 68.12 68.44 68.44 drygascon128 79.06 79.38 79.38 esch384v1 95.31 95.31 95.31 knot256v2 98.12 98.44 99.38 drygascon256 126.88 126.88 127.19 knot256v1 254.69 254.69 255.00 knot384 270.62 270.94 270.94 knot512 681.25 683.12 688.44 subterraneanv1 1889.38 1892.19 1898.12 acehash256v1 2119.69 2124.06 2225.94 skinnyhashtk3 3045.31 3051.56 3067.50 skinnyhashtk2 3261.25 3276.25 3465.94 photonbeetlehash256rate32v1 5308.12 5310.94 5329.69 orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 52.50 55.00 55.00 gimli24v1 95.00 97.50 100.00 asconxofv12 95.00 97.50 97.50 asconhashv12 125.00 125.00 127.50 xoodyakv1 172.50 172.50 175.00 drygascon128 182.50 182.50 185.00 saturninhashv2 202.50 205.00 210.00 esch256v1 227.50 230.00 232.50 knot256v1 252.50 252.50 255.00 knot256v2 342.50 342.50 342.50 esch384v1 365.00 367.50 372.50 drygascon256 512.50 515.00 515.00 knot384 660.00 660.00 662.50 knot512 1492.50 1500.00 1522.50 subterraneanv1 3695.00 3702.50 3722.50 photonbeetlehash256rate32v1 5430.00 5435.00 5445.00 skinnyhashtk2 5650.00 5665.00 5955.00 skinnyhashtk3 6977.50 6980.00 6995.00 acehash256v1 21515.00 21522.50 21532.50 orangishv1

amd64; Zen (810f81); 2019 AMD Ryzen Embedded R1606G; 2 x 2600MHz; unstable; ghf51, supercop-20200702

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 14.98 15.20 16.44 xoodyakv1 19.59? 21.16? 25.50? gimli24v1 28.84? 30.97? 36.29? asconhashv12 31.90? 33.59? 40.14? asconxofv12 74.25? 80.35? 83.89? saturninhashv2 76.92? 101.98? 128.64? esch384v1 58.08? 103.18? 111.84? esch256v1 106.96? 114.61? 122.24? drygascon128 124.88? 133.91? 140.01? knot256v2 125.31? 139.62? 147.82? drygascon256 174.16 187.89 193.08 knot256v1 429.30? 457.71? 478.91? knot384 420.88? 463.44? 631.19? knot512 1554.88? 1684.20? 1846.21? subterraneanv1 1547.69? 1968.30? 2072.45? acehash256v1 2292.86? 2591.83? 4890.69? skinnyhashtk3 4819.45? 4879.68? 7911.51? skinnyhashtk2 6916.10? 7548.97? 9595.17? orangishv1 6725.54? 7974.38? 8263.67? photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 15.24 15.32 16.31 xoodyakv1 20.27? 21.62? 24.93? gimli24v1 29.63? 30.39? 36.19? asconhashv12 33.06? 33.86? 39.57? asconxofv12 75.34 80.29 83.60 saturninhashv2 94.75? 100.24? 130.18? esch384v1 63.18? 100.45? 106.22? esch256v1 105.28? 114.17? 120.05? drygascon128 127.96 134.51 138.32 knot256v2 131.30? 144.68? 152.78? drygascon256 172.96 185.16 188.20 knot256v1 440.40 458.18 471.95 knot384 446.62? 468.87? 610.83? knot512 1571.18? 1675.25? 1818.25? subterraneanv1 1608.04? 1986.80? 2072.62? acehash256v1 2561.56? 2617.57? 4704.60? skinnyhashtk3 4820.31? 4858.74? 7656.64? skinnyhashtk2 6853.01? 6890.11? 7947.06? photonbeetlehash256rate32v1 7263.59? 7711.30? 9695.32? orangishv1

Cycles/byte for 1536 bytes 25% 50% 75% hash 15.51 15.56 16.08 xoodyakv1 20.46? 22.33? 25.07? gimli24v1 30.35? 30.84? 35.02? asconhashv12 33.52? 34.09? 39.44? asconxofv12 63.65? 71.57? 104.93? esch256v1 76.41 81.23 84.74 saturninhashv2 108.25? 120.32? 121.76? drygascon128 127.24? 135.33? 143.25? knot256v2 125.19? 139.11? 147.05? drygascon256 148.62? 174.25? 185.74? knot256v1 134.88? 205.80? 217.78? esch384v1 420.74? 456.54? 474.38? knot384 442.95? 465.38? 605.77? knot512 1583.17 1596.11 1612.10 subterraneanv1 2006.54 2031.94 2155.38 acehash256v1 2584.16? 2646.33? 4745.88? skinnyhashtk3 4495.36 4536.49 4891.32 skinnyhashtk2 6853.86? 7931.64? 8415.49? photonbeetlehash256rate32v1 7355.26? 8726.96? 9831.37? orangishv1

Cycles/byte for 576 bytes 25% 50% 75% hash 16.07 16.11 16.66 xoodyakv1 21.22? 21.35? 25.59? gimli24v1 31.82? 33.94? 36.29? asconhashv12 33.00? 34.58? 40.58? asconxofv12 65.68? 70.24? 73.58? esch256v1 79.44 83.64 87.70 saturninhashv2 108.88? 120.93? 121.29? drygascon128 132.21 141.38 146.88 knot256v2 128.74? 143.27? 151.35? drygascon256 176.22 187.51 190.89 knot256v1 144.67? 214.95? 232.42? esch384v1 439.83 461.32 480.91 knot384 449.72? 472.15? 614.30? knot512 1576.11 1620.71 1633.89 subterraneanv1 1969.91 2079.10 2093.95 acehash256v1 2710.68? 2717.59? 4882.85? skinnyhashtk3 4535.83 4879.92 4919.28 skinnyhashtk2 6801.84? 7870.15? 8295.94? photonbeetlehash256rate32v1 8585.82? 9034.23? 10145.60? orangishv1

Cycles/byte for 64 bytes 25% 50% 75% hash 21.94 22.75 23.56 xoodyakv1 31.69? 32.91? 49.56? gimli24v1 41.03? 47.94? 52.00? asconhashv12 50.38? 50.78? 58.50? asconxofv12 87.75? 90.19? 97.91? esch256v1 113.34 115.38 125.53 saturninhashv2 119.84? 129.59? 133.25? drygascon128 171.84? 191.75? 213.28? drygascon256 192.16 203.94 206.38 knot256v2 197.44 209.22 214.09 knot256v1 227.09? 324.59? 331.50? esch384v1 490.75 500.91 534.22 knot384 564.69? 587.03? 696.72? knot512 1783.84? 1822.84? 2029.62? subterraneanv1 2993.66 2995.69 3164.69 acehash256v1 3764.31? 3852.47? 6962.31? skinnyhashtk3 4987.53 5018.81 5392.56 skinnyhashtk2 5983.25? 7046.00? 7481.09? photonbeetlehash256rate32v1 12208.22 12823.69 13261.22 orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 78.00 81.25 84.50 gimli24v1 81.25? 87.75? 94.25? xoodyakv1 156.00? 172.25? 185.25? asconhashv12 169.00? 175.50? 201.50? asconxofv12 276.25 292.50 305.50 drygascon128 308.75 312.00 338.00 saturninhashv2 331.50? 360.75? 461.50? esch256v1 354.25 360.75 367.25 knot256v1 568.75 591.50 601.25 knot256v2 637.00? 692.25? 724.75? drygascon256 991.25 1001.00 1082.25 knot384 1001.00? 1394.25? 1459.25? esch384v1 1456.00 1498.25 1508.00 knot512 3415.75 3419.00 3490.50 subterraneanv1 7673.25? 8089.25? 8537.75? photonbeetlehash256rate32v1 8960.25 9015.50 9486.75 skinnyhashtk2 10052.25? 10383.75? 18219.50? skinnyhashtk3 6880.25? 11267.75? 11703.25? acehash256v1 47791.25? 51320.75? 54226.25? orangishv1

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20210326

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 12.94 12.95 12.96 T:xoodyakv1 13.90 13.91 13.92 T:gimli24v1 21.77 21.78 21.86 asconxofv12 21.76 21.79 21.85 asconhashv12 37.62 37.72 37.79 T:esch256v1 43.35? 45.03? 60.94? T:esch384v1 45.35 45.36 45.37 T:saturninhashv2 68.34 68.38 68.42 T:drygascon128 76.59 76.62 76.65 T:knot256v2 79.11 79.15 79.19 T:drygascon256 117.44 117.78 118.60 T:knot256v1 230.82 230.93 231.01 T:knot512 270.14 270.18 270.24 T:knot384 980.57 981.23 983.64 T:subterraneanv1 1283.39 1283.64 1284.19 T:acehash256v1 1382.71 1384.00 1388.87 T:skinnyhashtk3 2489.97 2491.23 2491.53 T:skinnyhashtk2 3915.60 3916.66 3918.74 T:orangishv1 9729.49 9731.16 9732.50 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 13.05 13.07 13.08 T:xoodyakv1 14.03 14.05 14.07 T:gimli24v1 21.96 21.98 22.01 asconxofv12 21.99 22.02 22.04 asconhashv12 38.07 38.20 38.29 T:esch256v1 45.44? 45.49? 59.90? T:esch384v1 45.75 45.77 45.78 T:saturninhashv2 68.48 68.49 68.53 T:drygascon128 77.18 77.19 77.20 T:knot256v2 79.67 79.73 79.85 T:drygascon256 117.89 118.65 119.64 T:knot256v1 230.75 231.78 231.91 T:knot512 270.68 270.70 272.59 T:knot384 983.18 984.03 985.35 T:subterraneanv1 1295.80 1295.99 1296.49 T:acehash256v1 1393.96 1395.03 1399.05 T:skinnyhashtk3 2495.10 2495.81 2496.49 T:skinnyhashtk2 3946.06 3946.75 3949.53 T:orangishv1 9704.33 9707.65 9710.00 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 13.18 13.20 13.21 T:xoodyakv1 14.24 14.26 14.29 T:gimli24v1 22.30 22.35 22.38 asconxofv12 22.31 22.35 22.40 asconhashv12 38.42 38.57 38.69 T:esch256v1 46.22? 46.31? 60.90? T:esch384v1 46.41 46.44 46.47 T:saturninhashv2 68.64 68.71 68.77 T:drygascon128 78.18 78.19 78.22 T:knot256v2 80.54 80.61 80.68 T:drygascon256 118.53 118.92 119.83 T:knot256v1 232.74 233.50 234.24 T:knot512 272.36 272.38 272.39 T:knot384 987.14 987.81 989.29 T:subterraneanv1 1316.59 1316.85 1317.14 T:acehash256v1 1411.25 1413.26 1417.11 T:skinnyhashtk3 2502.60 2502.96 2505.32 T:skinnyhashtk2 3997.00 3997.64 4000.50 T:orangishv1 9671.21 9674.42 9685.90 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 13.70 13.72 13.76 T:xoodyakv1 14.81 14.85 14.89 T:gimli24v1 23.16 23.19 23.26 asconxofv12 23.14 23.20 23.28 asconhashv12 39.61 39.75 39.90 T:esch256v1 48.18 48.26 48.35 T:saturninhashv2 48.20? 48.33? 63.60? T:esch384v1 69.18 69.28 69.59 T:drygascon128 80.76 80.79 80.81 T:knot256v2 82.81 82.87 82.99 T:drygascon256 119.74 120.99 121.24 T:knot256v1 237.84 238.20 238.89 T:knot512 276.43 276.47 276.48 T:knot384 997.44 997.99 1000.14 T:subterraneanv1 1372.78 1372.88 1373.05 T:acehash256v1 1459.86 1460.35 1465.44 T:skinnyhashtk3 2524.30 2524.56 2525.42 T:skinnyhashtk2 4131.97 4134.78 4136.70 T:orangishv1 9581.72 9589.55 9596.95 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 17.91 18.02 18.12 T:xoodyakv1 20.64 20.88 21.02 T:gimli24v1 34.03 34.14 34.55 asconxofv12 34.00 34.17 34.47 asconhashv12 53.86 54.31 54.78 T:esch256v1 70.38 70.69 71.27 T:saturninhashv2 74.33? 75.03? 97.25? T:esch384v1 75.77 75.98 76.16 T:drygascon128 112.03 112.34 112.62 T:drygascon256 114.09 114.45 114.75 T:knot256v2 134.28 134.64 134.91 T:knot256v1 294.38 295.03 295.91 T:knot512 308.97 309.12 309.36 T:knot384 1127.66 1128.94 1130.91 T:subterraneanv1 2074.81 2076.77 2082.94 T:skinnyhashtk3 2088.58 2089.56 2089.94 T:acehash256v1 2802.22 2802.48 2802.69 T:skinnyhashtk2 5868.80 5870.33 5871.47 T:orangishv1 8011.19 8093.62 8215.09 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 55.38 55.88 57.12 T:gimli24v1 64.62 65.62 66.38 T:xoodyakv1 120.12 121.12 123.50 asconhashv12 120.25 121.25 122.50 asconxofv12 197.62 198.38 200.25 T:drygascon128 199.50 200.25 202.00 T:saturninhashv2 200.75 201.75 204.25 T:esch256v1 248.25 249.25 252.25 T:knot256v1 302.00 305.12 307.38 T:knot256v2 323.50? 328.12? 423.38? T:esch384v1 422.25 423.12 425.75 T:drygascon256 622.62 623.12 624.25 T:knot384 738.88 742.38 745.38 T:knot512 2141.62 2146.25 2151.62 T:subterraneanv1 4991.50 4992.38 4993.38 T:skinnyhashtk2 5539.00 5544.50 5556.38 T:skinnyhashtk3 4868.62? 5840.25? 7188.75? T:photonbeetlehash256rate32v1 7716.62 7721.75 7730.88 T:acehash256v1 23479.50 23482.12 23485.25 T:orangishv1

amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6248; 20 x 2500MHz; pmnod076, supercop-20191017

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 10.81 10.85 10.90 gimli24v1 22.21 22.26 22.33 asconhashv12 22.18 22.26 22.33 asconxofv12 40.53 40.60 40.70 esch256v1 45.50 45.59 45.75 saturninhashv2 47.17 47.21 47.26 esch384v1 69.08 69.14 69.23 knot256v2 74.88 75.04 75.15 drygascon128 78.03 78.14 78.29 xoodyakv1 79.35 79.50 79.75 drygascon256 115.97 118.18 119.15 knot256v1 231.29 231.50 235.90 knot512 244.01 244.26 247.76 knot384 813.10 820.15 826.27 subterraneanv1 1406.14 1409.36 1414.03 acehash256v1 1487.50 1498.25 1508.60 skinnyhashtk3 2651.10 2656.15 2663.46 skinnyhashtk2 3836.29 3951.36 4137.98 orangishv1 5822.83 5853.70 5880.77 photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 10.92 10.93 10.94 gimli24v1 22.43 22.44 22.46 asconhashv12 22.43 22.45 22.47 asconxofv12 40.91 40.94 40.97 esch256v1 46.03 46.05 46.09 saturninhashv2 47.69 47.70 47.72 esch384v1 69.70 69.72 69.75 knot256v2 75.12 75.18 75.22 drygascon128 78.46 78.50 78.54 xoodyakv1 80.06 80.12 80.20 drygascon256 117.11 117.95 118.05 knot256v1 232.35 232.42 234.58 knot512 244.91 244.98 246.70 knot384 819.98 821.35 823.30 subterraneanv1 1423.86 1424.76 1426.01 acehash256v1 1507.09 1511.49 1514.73 skinnyhashtk3 2657.82 2659.47 2661.91 skinnyhashtk2 3967.58 3977.13 4066.47 orangishv1 5839.12 5845.25 5856.00 photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 11.03 11.07 11.10 gimli24v1 22.71 22.76 22.79 asconhashv12 22.70 22.76 22.79 asconxofv12 41.43 41.48 41.52 esch256v1 46.74 46.77 46.87 saturninhashv2 48.49 48.51 48.54 esch384v1 70.67 70.70 70.72 knot256v2 75.38 75.43 75.46 drygascon128 78.99 79.05 79.10 xoodyakv1 81.04 81.11 81.18 drygascon256 117.17 117.77 118.40 knot256v1 233.88 233.95 234.03 knot512 246.37 246.44 246.49 knot384 821.18 825.85 830.24 subterraneanv1 1445.97 1447.64 1451.71 acehash256v1 1528.77 1530.59 1535.97 skinnyhashtk3 2664.12 2670.20 2672.39 skinnyhashtk2 4014.65 4023.02 4118.10 orangishv1 5820.46 5827.90 5858.59 photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 11.44 11.48 11.51 gimli24v1 23.50 23.55 23.60 asconhashv12 23.50 23.57 23.61 asconxofv12 42.66 42.73 42.83 esch256v1 48.55 48.61 48.80 saturninhashv2 50.62 50.65 50.69 esch384v1 73.12 73.15 73.17 knot256v2 75.82 75.88 75.94 drygascon128 80.33 80.36 80.47 xoodyakv1 83.63 83.70 83.80 drygascon256 118.11 118.60 119.40 knot256v1 238.05 238.17 238.34 knot512 249.80 249.84 249.89 knot384 830.81 831.33 832.01 subterraneanv1 1502.76 1502.97 1516.03 acehash256v1 1577.82 1579.12 1590.01 skinnyhashtk3 2679.02 2690.03 2694.35 skinnyhashtk2 4154.66 4164.19 4254.95 orangishv1 5753.15 5769.05 5819.12 photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 16.47 16.66 16.81 gimli24v1 33.47 33.81 34.19 asconxofv12 33.72 33.91 34.25 asconhashv12 58.56 59.12 59.72 esch256v1 70.53 71.03 71.44 saturninhashv2 77.72 77.88 78.31 esch384v1 82.31 82.50 83.19 drygascon128 97.78 97.94 98.09 xoodyakv1 104.50 104.72 104.88 knot256v2 115.38 115.62 115.94 drygascon256 132.03 132.47 133.16 knot256v1 275.84 275.94 276.03 knot384 289.81 290.50 291.44 knot512 952.22 953.31 954.31 subterraneanv1 2235.19 2242.31 2243.75 skinnyhashtk3 2285.56 2286.12 2286.62 acehash256v1 2973.75 2974.03 2974.38 skinnyhashtk2 5030.97 5102.31 5105.22 photonbeetlehash256rate32v1 5877.88 5887.19 6025.22 orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 48.50 49.00 49.25 gimli24v1 113.50 114.50 116.75 asconxofv12 112.75 114.75 116.00 asconhashv12 193.00 196.00 198.75 saturninhashv2 208.50 209.25 211.25 drygascon128 217.00 219.00 221.50 esch256v1 237.75 238.75 242.00 knot256v1 286.50 287.00 287.50 knot256v2 311.75 312.00 312.50 xoodyakv1 335.00 335.75 336.75 esch384v1 438.50 440.25 443.25 drygascon256 561.75 562.25 563.25 knot384 700.50 703.00 705.25 knot512 1900.75 1907.00 1923.00 subterraneanv1 5291.25 5292.25 5295.25 skinnyhashtk2 5767.50 5837.00 5841.00 photonbeetlehash256rate32v1 5967.00 5983.50 5991.50 skinnyhashtk3 8444.25 8447.75 8450.50 acehash256v1 23463.50 23479.75 24074.25 orangishv1

amd64; CascadeLake (50657); 2019 Intel Xeon Gold 6230; 40 x 2100MHz; unstable; cel02, supercop-20201130

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 15.23 15.76 15.85 T:xoodyakv1 13.16? 20.60? 23.71? T:gimli24v1 27.99? 29.31? 33.21? T:asconhashv12 37.17 37.92 39.34 T:asconxofv12 38.67? 70.91? 75.46? T:esch256v1 85.05 86.77 90.87 T:saturninhashv2 97.82? 108.45? 119.49? T:drygascon128 133.74 135.19 136.14 T:esch384v1 127.31? 137.59? 143.96? T:knot256v2 152.44 152.65 152.88 T:drygascon256 197.06 200.58 216.67 T:knot256v1 372.50 376.76 401.28 T:knot512 554.20? 590.68? 620.81? T:knot384 2644.61 2646.39 2651.09 T:subterraneanv1 2672.76 2702.30 2898.89 T:skinnyhashtk3 2930.00 3046.55 3060.80 T:acehash256v1 3945.77? 4679.90? 11841.91? T:orangishv1 4860.54 4905.10 4932.61 T:skinnyhashtk2 30313.87 30431.25 30645.88 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 15.42 15.88 15.92 T:xoodyakv1 14.26? 20.81? 22.90? T:gimli24v1 28.97? 30.84? 33.11? T:asconhashv12 37.87 38.42 39.49 T:asconxofv12 42.67? 71.63? 74.95? T:esch256v1 86.28 87.47 90.95 T:saturninhashv2 101.08? 115.58? 119.42? T:drygascon128 128.70 135.26 136.33 T:esch384v1 127.54? 138.55? 143.57? T:knot256v2 153.42 153.64 153.72 T:drygascon256 198.77 200.59 215.35 T:knot256v1 376.46 377.83 399.78 T:knot512 562.75 592.48 615.53 T:knot384 2647.72 2651.54 2657.56 T:subterraneanv1 2711.59 2719.31 2899.02 T:skinnyhashtk3 2975.16 3078.15 3085.39 T:acehash256v1 4707.33? 4712.76? 11190.88? T:orangishv1 4881.94 4918.68 4936.09 T:skinnyhashtk2 29509.94 30257.48 30465.05 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 15.61 16.05 16.11 T:xoodyakv1 14.46? 21.09? 23.17? T:gimli24v1 29.77? 32.05? 33.60? T:asconhashv12 38.45 39.11 40.03 T:asconxofv12 43.23? 72.27? 73.24? T:esch256v1 87.57 88.66 92.43 T:saturninhashv2 107.19? 119.15? 119.73? T:drygascon128 137.57 138.09 140.95 T:esch384v1 131.69 140.51 145.42 T:knot256v2 155.34 155.44 155.96 T:drygascon256 200.08 201.90 216.30 T:knot256v1 378.87 380.37 402.21 T:knot512 563.87 596.06 618.95 T:knot384 2652.37 2661.88 2668.88 T:subterraneanv1 2743.08 2758.85 2934.23 T:skinnyhashtk3 3026.43 3122.75 3134.22 T:acehash256v1 4768.65? 4775.17? 11339.54? T:orangishv1 4895.03 4933.59 4950.98 T:skinnyhashtk2 29538.93 30091.96 30154.77 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 16.20 16.55 16.61 T:xoodyakv1 14.92? 21.74? 23.80? T:gimli24v1 31.65 33.19 34.72 T:asconhashv12 40.42 41.10 41.49 T:asconxofv12 44.34? 75.06? 78.04? T:esch256v1 90.51 91.87 95.71 T:saturninhashv2 119.09 120.67 122.05 T:drygascon128 136.42 143.43 145.49 T:esch384v1 136.49 145.40 150.44 T:knot256v2 159.81 159.98 160.50 T:drygascon256 202.38 203.06 218.68 T:knot256v1 385.33 387.07 408.77 T:knot512 569.57 603.80 627.47 T:knot384 2679.38 2684.89 2697.91 T:subterraneanv1 2836.41 2858.78 3031.79 T:skinnyhashtk3 3152.06 3257.96 3267.79 T:acehash256v1 4926.99? 4939.45? 11723.10? T:orangishv1 4933.35 4981.36 4990.65 T:skinnyhashtk2 29614.88 29808.92 29883.06 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 22.44 22.62 22.88 T:xoodyakv1 21.12? 31.00? 33.19? T:gimli24v1 48.06 49.19 50.09 T:asconhashv12 59.97 61.00 61.81 T:asconxofv12 60.22? 104.16? 104.81? T:esch256v1 124.19 129.00 131.97 T:drygascon128 130.38 131.47 136.00 T:saturninhashv2 195.41 207.56 215.41 T:knot256v2 215.88 216.38 217.12 T:drygascon256 219.25 221.59 225.09 T:esch384v1 231.12 231.97 249.09 T:knot256v1 470.81 472.47 497.78 T:knot512 631.09 666.25 692.50 T:knot384 3024.19 3028.16 3035.94 T:subterraneanv1 4036.16 4071.81 4327.34 T:skinnyhashtk3 4813.75 4953.47 4974.81 T:acehash256v1 5430.59 5480.59 5537.03 T:skinnyhashtk2 7005.09? 7012.38? 16608.34? T:orangishv1 26367.69 26467.91 26504.00 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 81.25 83.25 85.75 T:xoodyakv1 53.00? 84.25? 88.50? T:gimli24v1 165.50 168.75 173.75 T:asconhashv12 205.75 212.25 217.00 T:asconxofv12 323.75 335.50 340.00 T:drygascon128 351.50 354.50 373.75 T:saturninhashv2 223.50? 385.00? 387.75? T:esch256v1 452.50 457.00 486.75 T:knot256v1 544.50 579.75 583.25 T:knot256v2 813.50 815.00 820.25 T:drygascon256 942.75 952.00 956.50 T:esch384v1 1138.00 1141.50 1192.25 T:knot512 1279.50 1340.25 1395.75 T:knot384 5735.00 5742.50 5753.50 T:subterraneanv1 9397.00 9558.25 9836.00 T:skinnyhashtk2 10778.50 10931.00 11492.00 T:skinnyhashtk3 17850.75 18233.75 18340.25 T:acehash256v1 28001.00? 28089.25? 66564.25? T:orangishv1 30166.25 30276.75 30348.50 T:photonbeetlehash256rate32v1