VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates, indexed by machine

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains round-2 candidates in NISTLWC.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation.

Each computer name is linked to additional information about the implementations and compilers selected for benchmarking.

There is a separate page with more information about each hash function (and each implementation).

aarch64; Firestorm (610f0230); 2020 Apple M1; 4 x 3200MHz; unstable; minimac, supercop-20210604

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 14.82 14.92 15.48 T:xoodyakv1 18.50 18.54 18.62 asconhashv12 18.51 18.57 18.62 asconxofv12 19.88 20.65 20.86 T:gimli24v1 23.79 23.88 24.16 T:esch256v1 35.42 35.45 35.60 T:saturninhashv2 35.85 35.98 36.15 T:esch384v1 37.61 37.76 37.78 T:drygascon128 45.62 45.77 46.04 T:drygascon256 47.82 49.58 49.91 T:knot256v2 99.74 103.58 103.99 T:knot256v1 166.31 167.27 172.97 T:knot512 163.91 169.48 170.62 T:knot384 330.35 331.69 334.58 T:subterraneanv1 642.62 643.68 647.59 T:skinnyhashtk3 993.58 994.31 995.07 T:acehash256v1 1317.51 1319.98 1325.56 T:skinnyhashtk2 1839.93 1910.71 1917.53 T:orangishv1 8328.62 8643.01 8674.90 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 14.97 15.43 15.53 T:xoodyakv1 18.72 18.75 18.81 asconxofv12 18.72 18.75 18.85 asconhashv12 20.15 20.96 21.00 T:gimli24v1 24.02 24.12 24.45 T:esch256v1 35.84 35.87 35.90 T:saturninhashv2 36.23 36.36 36.49 T:esch384v1 37.82 37.89 39.19 T:drygascon128 46.06 46.25 46.38 T:drygascon256 48.40 50.06 50.13 T:knot256v2 100.32 103.77 103.84 T:knot256v1 167.93 168.61 173.66 T:knot512 164.15 170.08 170.31 T:knot384 331.33 333.45 342.56 T:subterraneanv1 647.63 649.42 652.68 T:skinnyhashtk3 1002.34 1003.51 1005.56 T:acehash256v1 1324.88 1367.43 1371.46 T:skinnyhashtk2 1862.52 1926.03 1926.36 T:orangishv1 8342.84 8627.17 8628.60 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 15.19 15.54 15.62 T:xoodyakv1 18.92 19.53 19.62 asconhashv12 19.01 19.53 19.70 asconxofv12 21.01 21.09 21.70 T:gimli24v1 24.22 24.30 25.17 T:esch256v1 36.37 36.46 37.59 T:saturninhashv2 36.89 37.24 38.28 T:esch384v1 38.02 39.23 39.41 T:drygascon128 46.53 46.79 47.74 T:drygascon256 50.35 50.78 51.04 T:knot256v2 100.69 104.08 104.16 T:knot256v1 169.00 169.09 169.87 T:knot512 165.62 170.91 171.17 T:knot384 332.45 332.71 333.23 T:subterraneanv1 655.62 656.48 657.79 T:skinnyhashtk3 1019.49 1019.75 1020.01 T:acehash256v1 1323.91 1328.94 1372.34 T:skinnyhashtk2 1889.08 1948.80 1954.35 T:orangishv1 8318.77 8599.58 8605.05 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 15.97? 15.97? 32.64? T:xoodyakv1 20.14 20.14 20.37 asconxofv12 20.14 20.37 20.37 asconhashv12 21.76 22.45 22.45 T:gimli24v1 25.69 25.69 25.93 T:esch256v1 38.89? 39.12? 50.46? T:saturninhashv2 39.35 39.58 40.28 T:esch384v1 39.81 40.05 44.21 T:drygascon128 48.38 49.53 50.00 T:drygascon256 52.31 52.55 54.40 T:knot256v2 104.62 105.09 105.55 T:knot256v1 171.98 172.22 179.16 T:knot512 168.51 173.14 173.37 T:knot384 335.87 336.10 336.79 T:subterraneanv1 677.75 678.22 679.37 T:skinnyhashtk3 1062.92 1063.15 1063.38 T:acehash256v1 1334.90 1335.36 1335.60 T:skinnyhashtk2 1947.38 2014.97 2015.20 T:orangishv1 8250.84 8519.57 8534.16 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 18.75? 20.83? 41.66? T:xoodyakv1 27.08 29.16 29.17 asconhashv12 27.08 29.16 29.17 asconxofv12 31.25 31.25 31.25 T:gimli24v1 33.33 33.34 35.42 T:esch256v1 43.75? 43.75? 108.33? T:drygascon128 56.25? 56.25? 120.83? T:saturninhashv2 60.41 60.42 60.42 T:esch384v1 64.58 64.58 66.66 T:drygascon256 75.00 77.08 77.08 T:knot256v2 120.83 120.83 120.83 T:knot256v1 191.66 197.91 197.91 T:knot384 220.83? 283.31? 479.14? T:knot512 393.73? 395.81? 1462.44? T:subterraneanv1 966.62? 997.89? 2056.17? T:skinnyhashtk3 1533.27? 1537.44? 3162.38? T:skinnyhashtk2 1616.61 1618.69 1620.78 T:acehash256v1 2766.56 2860.30 2860.31 T:orangishv1 7310.12 7558.05 7562.20 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 66.62? 66.75? 166.62? T:xoodyakv1 83.25 83.38 83.38 T:gimli24v1 83.38? 100.00? 100.00? asconhashv12 83.38? 100.00? 100.00? asconxofv12 116.62? 116.75? 283.25? T:drygascon128 116.75? 133.25? 133.38? T:esch256v1 150.00? 166.62? 399.88? T:saturninhashv2 200.00 200.00 216.62 T:knot256v2 216.62 216.62 216.62 T:knot256v1 233.25 233.38 233.38 T:drygascon256 250.00 266.62 266.62 T:esch384v1 383.38 400.00 400.00 T:knot384 733.38? 750.00? 2099.88? T:subterraneanv1 533.38? 1150.00? 1399.88? T:knot512 2666.62? 2699.88? 8133.00? T:skinnyhashtk3 2733.25? 2733.25? 8916.25? T:skinnyhashtk2 6183.12 6199.75 6233.00 T:acehash256v1 8633.00 8649.62 8666.38 T:photonbeetlehash256rate32v1 11066.25 11416.25 11433.00 T:orangishv1

amd64; TigerLake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; unstable; pascalinspiron75062n1, supercop-20210125

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 8.69 8.72 8.77 T:xoodyakv1 15.83? 19.39? 20.70? T:gimli24v1 24.15? 32.96? 39.72? asconxofv12 24.09? 32.99? 39.22? asconhashv12 41.81? 47.20? 99.80? T:esch256v1 79.49? 81.10? 110.74? T:drygascon128 71.28? 91.51? 96.06? T:esch384v1 93.32 93.99 94.22 T:saturninhashv2 75.01? 96.84? 168.87? T:knot256v2 197.10? 209.00? 223.23? T:drygascon256 158.34? 249.96? 277.59? T:knot256v1 289.15? 364.00? 622.00? T:knot384 243.14? 519.02? 576.94? T:knot512 835.33? 860.64? 1092.00? T:subterraneanv1 1104.13? 1249.34? 2296.55? T:skinnyhashtk3 922.25? 2067.49? 2166.97? T:acehash256v1 1994.06? 3650.23? 3890.97? T:skinnyhashtk2 6551.22? 9600.03? 14819.07? T:orangishv1 23867.97? 34520.92? 35430.17? T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 8.79 8.83 8.84 T:xoodyakv1 16.41? 19.56? 20.37? T:gimli24v1 25.73? 33.25? 38.64? asconxofv12 25.75? 33.32? 46.03? asconhashv12 47.45? 47.57? 95.09? T:esch256v1 82.49? 82.78? 108.09? T:drygascon128 74.44? 92.39? 94.55? T:esch384v1 94.19 94.96 95.11 T:saturninhashv2 84.11? 97.48? 161.81? T:knot256v2 200.65 210.32 221.98 T:drygascon256 169.45? 250.58? 267.40? T:knot256v1 320.74? 364.76? 592.85? T:knot384 274.79? 520.93? 547.56? T:knot512 863.08? 864.06? 1071.28? T:subterraneanv1 1224.43? 1259.73? 2202.20? T:skinnyhashtk3 1046.55? 2056.67? 2071.36? T:acehash256v1 2171.87? 3660.54? 3723.25? T:skinnyhashtk2 7370.65? 9650.07? 14159.37? T:orangishv1 24965.75? 34256.21? 34328.23? T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 8.93 8.94 8.98 T:xoodyakv1 16.67? 19.79? 20.64? T:gimli24v1 26.14? 33.66? 38.64? asconxofv12 26.27? 33.69? 38.66? asconhashv12 48.29? 48.51? 95.97? T:esch256v1 82.69? 83.22? 108.24? T:drygascon128 75.99? 93.51? 96.14? T:esch384v1 95.61 96.29 96.44 T:saturninhashv2 85.41? 111.96? 163.87? T:knot256v2 203.05 212.72 224.34 T:drygascon256 173.14? 251.45? 267.10? T:knot256v1 322.71? 366.80? 597.21? T:knot384 274.62? 524.30? 551.31? T:knot512 867.13? 868.76? 1075.24? T:subterraneanv1 1243.34? 1274.76? 2230.18? T:skinnyhashtk3 1057.92? 1804.01? 2077.00? T:acehash256v1 2178.38? 3673.87? 3735.46? T:skinnyhashtk2 7482.34? 9778.17? 15372.82? T:orangishv1 24897.42? 32422.35? 34627.12? T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 9.23 9.30 9.44 T:xoodyakv1 17.17? 20.59? 21.38? T:gimli24v1 26.95? 34.99? 48.87? asconxofv12 26.93? 35.04? 40.00? asconhashv12 49.46? 49.85? 98.60? T:esch256v1 83.52? 83.90? 108.95? T:drygascon128 79.98? 98.38? 100.36? T:esch384v1 99.21 99.62 99.91 T:saturninhashv2 89.17? 101.33? 169.54? T:knot256v2 208.83 218.39 230.10 T:drygascon256 174.60? 253.52? 269.44? T:knot256v1 325.81? 370.94? 603.66? T:knot384 281.83? 533.04? 560.81? T:knot512 878.44? 881.76? 1086.24? T:subterraneanv1 1287.31? 1314.29? 2302.36? T:skinnyhashtk3 1104.91? 1879.45? 2164.15? T:acehash256v1 2200.75? 3704.78? 3770.65? T:skinnyhashtk2 7734.15? 10076.73? 15896.18? T:orangishv1 24590.18? 32142.73? 34307.13? T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 12.83? 14.31? 14.72? T:xoodyakv1 23.88? 29.62? 30.34? T:gimli24v1 38.94? 49.94? 57.16? asconxofv12 38.91? 50.70? 56.91? asconhashv12 66.72? 67.62? 131.52? T:esch256v1 89.83? 90.95? 118.69? T:drygascon128 141.67 142.86 143.73 T:saturninhashv2 126.80? 144.70? 241.00? T:knot256v2 123.42? 152.11? 155.14? T:esch384v1 193.05? 283.59? 302.12? T:knot256v1 283.66 290.64 307.91 T:drygascon256 360.78? 408.44? 666.25? T:knot384 346.11? 647.84? 685.33? T:knot512 1018.16? 1032.95? 1220.39? T:subterraneanv1 1823.27? 1870.14? 3268.94? T:skinnyhashtk3 1677.09? 2856.00? 3287.83? T:acehash256v1 2433.89? 4118.94? 4176.06? T:skinnyhashtk2 10991.56? 14335.58? 22614.27? T:orangishv1 21396.00? 27915.64? 30291.19? T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 49.25? 58.88? 62.25? T:xoodyakv1 62.62? 79.25? 82.25? T:gimli24v1 142.12? 172.62? 193.25? asconhashv12 132.62? 173.75? 239.00? asconxofv12 223.12? 224.75? 302.25? T:drygascon128 243.50? 257.12? 483.12? T:esch256v1 379.62 386.00 394.50 T:saturninhashv2 345.12? 391.62? 656.50? T:knot256v2 350.00? 508.38? 537.38? T:knot256v1 540.12? 657.88? 671.88? T:esch384v1 727.25? 812.88? 1329.50? T:knot384 1068.00 1079.00 1169.38 T:drygascon256 863.38? 1548.88? 1654.88? T:knot512 2018.00? 2033.38? 2328.38? T:subterraneanv1 4896.25? 4981.38? 8683.75? T:skinnyhashtk3 4344.00? 7343.62? 7433.88? T:skinnyhashtk2 6190.50? 10553.62? 12136.62? T:acehash256v1 20707.12? 26991.00? 31017.25? T:photonbeetlehash256rate32v1 43948.12? 57403.25? 90298.50? T:orangishv1

amd64; IceLake (706e5); 2020 Intel Core i5-1030NG7; 4 x 1100MHz; icelake, supercop-20200826

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 8.81 8.82 8.82 T:xoodyakv1 14.15 14.16 14.69 T:gimli24v1 23.23 23.28 23.32 T:asconhashv12 23.27 23.29 23.30 T:asconxofv12 30.86 30.90 31.06 T:esch256v1 38.69 38.73 39.07 T:esch384v1 50.76 50.78 51.25 T:saturninhashv2 81.23 81.47 82.31 T:drygascon128 82.10 82.17 82.66 T:knot256v2 81.88 82.68 84.36 T:drygascon256 125.18 125.80 126.45 T:knot256v1 271.53 271.98 272.82 T:knot512 291.66 292.06 292.88 T:knot384 943.34 964.65 1014.73 T:subterraneanv1 1225.61 1235.67 1263.31 T:skinnyhashtk3 1215.40? 1268.17? 1358.32? T:acehash256v1 2178.66 2185.39 2194.12 T:skinnyhashtk2 3336.22 3369.22 3394.68 T:photonbeetlehash256rate32v1 4007.12 4023.06 4044.75 T:orangishv1

Cycles/byte for 4096 bytes 25% 50% 75% hash 8.86 8.87 8.88 T:xoodyakv1 14.25 14.26 14.29 T:gimli24v1 23.43 23.47 23.51 T:asconxofv12 23.46 23.48 23.51 T:asconhashv12 31.10 31.13 31.17 T:esch256v1 39.06 39.08 39.11 T:esch384v1 51.15 51.17 51.19 T:saturninhashv2 81.33 81.37 83.42 T:drygascon128 82.10 82.26 84.53 T:drygascon256 82.77 82.82 82.86 T:knot256v2 125.06 125.13 125.99 T:knot256v1 272.62 272.73 272.98 T:knot512 292.02 292.46 292.71 T:knot384 925.11 927.17 931.06 T:subterraneanv1 1191.34? 1208.71? 1363.02? T:acehash256v1 1240.69 1245.37 1326.89 T:skinnyhashtk3 2182.40 2185.72 2190.69 T:skinnyhashtk2 3368.33 3375.04 3384.19 T:photonbeetlehash256rate32v1 4038.87 4044.61 4052.52 T:orangishv1

Cycles/byte for 1536 bytes 25% 50% 75% hash 8.93 8.94 8.96 T:xoodyakv1 14.40 14.42 14.45 T:gimli24v1 23.73 23.77 23.80 T:asconhashv12 23.75 23.80 23.84 T:asconxofv12 31.39 31.48 31.54 T:esch256v1 39.75 39.79 39.87 T:esch384v1 51.84 51.89 51.97 T:saturninhashv2 81.52 81.59 81.69 T:drygascon128 82.96 83.11 85.30 T:drygascon256 83.91 84.06 84.17 T:knot256v2 125.47 125.54 125.67 T:knot256v1 274.43 274.57 274.63 T:knot512 294.02 294.22 294.33 T:knot384 926.71 929.81 931.98 T:subterraneanv1 1211.63 1220.43 1226.59 T:acehash256v1 1253.56 1256.26 1259.62 T:skinnyhashtk3 2189.33 2193.34 2201.35 T:skinnyhashtk2 3356.62 3379.05 3504.34 T:photonbeetlehash256rate32v1 4097.37 4108.15 4120.31 T:orangishv1

Cycles/byte for 576 bytes 25% 50% 75% hash 9.13 9.17 9.22 T:xoodyakv1 14.84 14.88 14.93 T:gimli24v1 24.56 24.63 24.68 T:asconxofv12 24.59 24.66 24.71 T:asconhashv12 32.29 32.37 32.49 T:esch256v1 41.44 41.49 41.55 T:esch384v1 53.65 53.73 53.82 T:saturninhashv2 81.94 82.05 82.15 T:drygascon128 84.75 84.82 84.89 T:drygascon256 86.85 86.94 87.19 T:knot256v2 126.59 126.70 126.82 T:knot256v1 279.16 279.25 279.44 T:knot512 297.70 298.06 298.17 T:knot384 934.34 941.10 941.64 T:subterraneanv1 1260.23 1266.18 1279.24 T:acehash256v1 1294.26 1295.97 1299.19 T:skinnyhashtk3 2205.75 2211.88 2235.66 T:skinnyhashtk2 3324.07 3328.22 3339.14 T:photonbeetlehash256rate32v1 4257.86 4261.04 4273.56 T:orangishv1

Cycles/byte for 64 bytes 25% 50% 75% hash 11.94 12.03 12.09 T:xoodyakv1 20.42 20.58 20.72 T:gimli24v1 34.98 35.20 35.38 T:asconhashv12 34.97 35.34 35.56 T:asconxofv12 44.41 44.73 46.52 T:esch256v1 63.25 63.44 63.80 T:esch384v1 76.23 76.55 76.70 T:saturninhashv2 87.88 88.12 88.36 T:drygascon128 109.23 109.98 110.25 T:drygascon256 124.55 125.16 125.97 T:knot256v2 141.64 142.02 142.31 T:knot256v1 328.44 328.81 329.30 T:knot384 340.05 341.03 341.89 T:knot512 1048.75 1053.30 1063.19 T:subterraneanv1 1828.02 1833.14 1841.88 T:skinnyhashtk3 1925.50 1928.36 1932.94 T:acehash256v1 2448.33 2449.94 2452.98 T:skinnyhashtk2 2948.48 2950.08 2952.62 T:photonbeetlehash256rate32v1 5997.36 6002.52 6013.36 T:orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 42.25 42.88 43.50 T:xoodyakv1 51.50 52.50 53.50 T:gimli24v1 118.12 118.88 121.12 T:asconxofv12 117.88 119.62 121.38 T:asconhashv12 163.38 165.75 174.50 T:esch256v1 205.12 206.62 209.62 T:saturninhashv2 218.50 219.88 221.12 T:drygascon128 257.62 258.88 260.50 T:knot256v1 274.50 276.25 281.50 T:esch384v1 338.38 340.75 343.38 T:knot256v2 366.75 369.38 371.00 T:drygascon256 656.38 658.00 661.00 T:knot384 814.62 816.62 819.25 T:knot512 2008.00 2015.50 2033.12 T:subterraneanv1 3378.25 3383.25 3389.38 T:photonbeetlehash256rate32v1 4365.00 4373.75 4378.62 T:skinnyhashtk2 4874.88 4889.00 4913.38 T:skinnyhashtk3 7131.00 7143.25 7166.12 T:acehash256v1 23966.38 24000.00 24954.75 T:orangishv1

aarch64; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; rpi4ubuntu64, supercop-20191221

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 22.00 22.00 22.00 asconhashv12 22.00 22.00 22.00 asconxofv12 30.39? 33.06? 34.24? xoodyakv1 34.99 35.00 35.01 gimli24v1 48.41 48.44 48.44 esch256v1 53.13 53.20 53.32 saturninhashv2 64.51 65.56 66.32 drygascon128 73.07 73.56 74.55 esch384v1 77.08 77.09 77.11 drygascon256 81.55 81.56 81.58 knot256v2 149.25 149.25 149.26 knot256v1 282.73 282.76 282.91 knot512 290.12 290.23 290.60 knot384 764.95 770.63 771.58 subterraneanv1 1529.79 1530.06 1539.07 acehash256v1 1932.51 1936.04 1937.67 skinnyhashtk3 3172.23 3176.81 3180.57 skinnyhashtk2 5373.54 5377.16 5381.08 orangishv1 20177.25 20223.48 20239.33 photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 22.18 22.18 22.18 asconhashv12 22.18 22.18 22.18 asconxofv12 32.02 33.20 33.20 xoodyakv1 35.27 35.27 35.28 gimli24v1 48.74 48.74 48.74 esch256v1 53.65 53.65 53.71 saturninhashv2 65.69 65.69 66.06 drygascon128 74.28 74.28 74.78 esch384v1 77.59 77.60 77.60 drygascon256 82.21 82.21 82.21 knot256v2 149.55 149.55 149.55 knot256v1 283.86 283.87 283.94 knot512 291.05 291.09 291.26 knot384 769.81 771.13 771.55 subterraneanv1 1546.86 1546.93 1550.75 acehash256v1 1949.94 1951.54 1951.91 skinnyhashtk3 3183.06 3184.19 3185.34 skinnyhashtk2 5420.01 5420.76 5422.01 orangishv1 20145.22 20161.70 20167.15 photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 22.48 22.48 22.48 asconhashv12 22.48 22.48 22.48 asconxofv12 32.26 33.43 33.73 xoodyakv1 35.73 35.73 35.74 gimli24v1 49.23 49.23 49.23 esch256v1 54.39 54.41 54.46 saturninhashv2 65.90 65.96 66.89 drygascon128 75.47 75.47 75.96 esch384v1 78.43 78.44 78.45 drygascon256 83.28 83.28 83.29 knot256v2 150.05 150.05 150.06 knot256v1 285.72 285.72 285.73 knot512 292.79 292.81 292.90 knot384 772.58 772.83 777.12 subterraneanv1 1541.48 1569.91 1575.06 acehash256v1 1973.53 1978.31 1978.93 skinnyhashtk3 3194.93 3195.62 3197.29 skinnyhashtk2 5488.36 5493.64 5495.47 orangishv1 20062.55 20069.18 20075.13 photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 23.29 23.29 23.29 asconhashv12 23.29 23.29 23.29 asconxofv12 32.86 34.04 34.04 xoodyakv1 36.89 36.89 36.90 gimli24v1 50.55 50.55 50.55 esch256v1 56.39 56.41 56.45 saturninhashv2 66.45 66.45 66.52 drygascon128 78.65 78.66 79.13 esch384v1 80.67 80.68 80.70 drygascon256 86.14 86.15 86.16 knot256v2 151.39 151.39 151.39 knot256v1 290.66 290.67 290.70 knot512 296.65 296.67 296.73 knot384 779.98 780.89 780.89 subterraneanv1 1636.72 1636.81 1639.73 acehash256v1 2039.95 2041.01 2053.45 skinnyhashtk3 3216.54 3219.00 3231.29 skinnyhashtk2 5670.31 5683.18 5684.99 orangishv1 19897.85 19901.71 19905.73 photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 33.38 33.38 33.38 asconhashv12 33.38 33.38 33.38 asconxofv12 40.33 41.00 41.62 xoodyakv1 52.02 52.02 52.06 gimli24v1 67.45 67.45 67.47 esch256v1 73.59 73.59 73.66 drygascon128 81.61 81.64 81.95 saturninhashv2 109.42 109.47 109.86 drygascon256 119.45 119.45 119.77 esch384v1 122.77 122.77 122.77 knot256v2 168.48 168.48 168.48 knot256v1 327.45 327.45 327.55 knot384 353.94 353.94 353.95 knot512 883.23 883.77 884.02 subterraneanv1 2435.73 2492.20 2493.56 acehash256v1 2899.42 2899.88 2900.03 skinnyhashtk3 3575.00 3575.02 3575.05 skinnyhashtk2 8054.77 8055.33 8055.80 orangishv1 17628.16 17631.48 17741.64 photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 113.00 113.00 113.00 asconhashv12 113.00 113.00 113.12 asconxofv12 126.88 129.75 134.50 xoodyakv1 137.12 137.50 140.88 gimli24v1 193.38 193.50 193.50 drygascon128 226.50 226.75 228.75 saturninhashv2 247.00 247.25 249.38 esch256v1 303.00 303.00 303.62 knot256v1 330.50 331.00 334.50 knot256v2 411.00 411.50 412.50 drygascon256 510.75 510.75 510.75 esch384v1 660.75 660.88 663.38 knot384 850.25 850.62 853.12 knot512 1694.38 1694.38 1695.38 subterraneanv1 6357.50 6357.62 6358.12 skinnyhashtk2 7729.38 7730.88 7732.38 skinnyhashtk3 9005.88 9009.25 9017.00 acehash256v1 20153.75 20156.38 20158.25 photonbeetlehash256rate32v1 32203.38 32204.00 32207.62 orangishv1

armeabi; A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; rpi4, supercop-20191221

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 36.66 36.69 36.71 xoodyakv1 46.63 46.66 46.70 asconhashv12 49.68 49.72 49.72 gimli24v1 50.48 50.68 50.74 esch256v1 54.99 55.00 55.04 saturninhashv2 65.82 67.37 67.40 asconxofv12 71.83 71.90 72.32 esch384v1 131.98 132.08 132.44 drygascon128 144.80 144.81 144.84 knot256v2 156.67 156.78 156.90 drygascon256 311.97 312.01 312.10 knot256v1 577.95 578.06 578.33 knot384 740.47 740.52 740.85 knot512 1155.20 1160.91 1173.15 subterraneanv1 1756.08 1890.11 1903.94 acehash256v1 2266.16? 2272.06? 2522.02? skinnyhashtk3 3908.61 3977.68 4071.56 skinnyhashtk2 4065.56 4066.89 4071.15 orangishv1 5447.11 5454.10 5460.42 photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 37.05 37.05 37.06 xoodyakv1 47.19 47.19 47.21 asconhashv12 50.24 50.25 50.25 gimli24v1 51.00 51.07 51.09 esch256v1 55.63 55.64 55.65 saturninhashv2 68.07 68.08 68.09 asconxofv12 72.78 72.79 72.80 esch384v1 132.37 132.40 132.58 drygascon128 146.19 146.19 146.20 knot256v2 157.81 157.86 157.92 drygascon256 312.85 312.86 312.91 knot256v1 579.93 579.95 580.08 knot384 743.91 743.92 744.07 knot512 1163.58 1165.90 1171.94 subterraneanv1 1902.93 1907.74 1914.50 acehash256v1 2286.97 2287.93 2412.79 skinnyhashtk3 3985.32 3986.74 4032.75 skinnyhashtk2 4100.29 4100.50 4100.82 orangishv1 5440.35 5442.63 5445.12 photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 37.65 37.65 37.67 xoodyakv1 48.09 48.09 48.09 asconhashv12 51.14 51.16 51.16 gimli24v1 51.78 51.81 51.88 esch256v1 56.68 56.69 56.69 saturninhashv2 69.23 69.23 69.26 asconxofv12 74.27 74.29 74.33 esch384v1 132.96 132.97 133.01 drygascon128 148.49 148.49 148.49 knot256v2 159.70 159.72 159.74 drygascon256 314.29 314.29 314.30 knot256v1 583.67 583.69 583.71 knot384 749.57 749.57 749.64 knot512 1166.78 1171.73 1172.73 subterraneanv1 1937.78 2043.52 2063.18 acehash256v1 2315.54 2315.69 2320.82 skinnyhashtk3 3998.80 4000.30 4006.76 skinnyhashtk2 4151.68 4151.85 4157.87 orangishv1 5417.70 5420.02 5424.15 photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 39.30 39.35 39.45 xoodyakv1 50.54 50.54 50.54 asconhashv12 53.58 53.58 53.62 gimli24v1 54.01 54.06 54.20 esch256v1 59.46 59.51 59.51 saturninhashv2 72.29 72.34 72.39 asconxofv12 77.84 78.32 78.36 esch384v1 134.55 134.59 134.64 drygascon128 154.61 154.61 154.66 knot256v2 164.78 164.83 164.83 drygascon256 318.09 318.14 318.14 knot256v1 592.15 592.15 592.15 knot384 764.70 764.74 764.74 knot512 1184.06 1184.54 1186.47 subterraneanv1 2020.80 2151.25 2151.93 acehash256v1 2394.98 2395.17 2395.41 skinnyhashtk3 4033.79 4034.57 4035.72 skinnyhashtk2 4293.43 4293.53 4293.87 orangishv1 5358.91 5368.36 5380.32 photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 59.89 60.33 60.75 xoodyakv1 81.17? 81.61? 124.14? asconhashv12 82.03 82.45 82.48 esch256v1 84.64 85.06 85.08 gimli24v1 95.06 95.48 95.48 saturninhashv2 111.09 111.53 111.56 asconxofv12 128.91 130.19 130.22 esch384v1 154.95 155.39 155.81 drygascon128 229.59 230.02 230.05 drygascon256 233.06 233.06 233.50 knot256v2 366.75 366.75 367.19 knot256v1 663.61 664.03 664.47 knot384 958.31 958.31 958.75 knot512 1348.94 1349.36 1349.38 subterraneanv1 3282.08 3325.45 3329.38 acehash256v1 3412.69 3413.14 3601.50 skinnyhashtk3 4486.47 4486.92 4487.78 skinnyhashtk2 4601.48 4631.44 4696.55 photonbeetlehash256rate32v1 6108.84 6108.88 6109.70 orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 253.50 256.88 260.38 xoodyakv1 277.75 281.25 281.25 gimli24v1 319.50 326.25 326.50 saturninhashv2 323.12 326.38 330.00 asconhashv12 350.62 350.62 350.88 esch256v1 416.62 420.12 423.62 asconxofv12 444.62 448.00 458.25 drygascon128 593.62 593.75 597.25 esch384v1 711.75 711.75 712.00 knot256v2 750.00 753.38 756.88 knot256v1 899.25 899.25 902.75 drygascon256 1402.88 1406.25 1409.75 knot384 2479.12 2482.50 2482.75 knot512 2638.88 2638.88 2638.88 subterraneanv1 4166.62? 4354.12? 4881.88? photonbeetlehash256rate32v1 8048.38 8048.62 8052.00 skinnyhashtk2 9159.50 9162.88 9666.50 skinnyhashtk3 12183.88 12333.25 12340.12 acehash256v1 24468.38 24471.75 24475.38 orangishv1

ppc64; POWER9 (004e1203); 2019? IBM 02CY642; 22 x 3800MHz; power9, supercop-20210326

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 20.71 20.73 20.75 T:xoodyakv1 24.58 24.60 24.61 asconxofv12 24.59 24.60 24.61 asconhashv12 33.62 33.67 33.72 T:gimli24v1 57.46 57.48 57.51 T:saturninhashv2 59.08 59.12 59.18 T:esch256v1 70.45 70.50 70.57 T:drygascon256 73.60 73.61 73.62 T:knot256v2 79.46 79.52 79.61 T:esch384v1 81.97 82.03 82.09 T:drygascon128 187.26 187.28 187.30 T:knot256v1 234.97? 235.10? 365.03? T:knot512 274.52 274.60 274.67 T:knot384 671.25 673.08 674.65 T:subterraneanv1 1302.91 1329.81 1340.32 T:acehash256v1 2008.95 2018.73 2052.51 T:skinnyhashtk3 3990.48 3991.57 3993.17 T:orangishv1 3973.08 4047.80 4055.90 T:skinnyhashtk2 10023.03 10047.28 10090.46 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 20.88 20.90 20.95 T:xoodyakv1 24.84 24.85 24.88 asconhashv12 24.84 24.86 24.87 asconxofv12 33.91 33.97 34.00 T:gimli24v1 58.04 58.07 58.09 T:saturninhashv2 59.54 59.57 59.64 T:esch256v1 70.97 71.02 71.14 T:drygascon256 74.22 74.24 74.25 T:knot256v2 80.29 80.36 80.42 T:esch384v1 82.11 82.18 82.25 T:drygascon128 187.68 187.69 187.73 T:knot256v1 235.91 235.93 235.97 T:knot512 275.47 275.53 275.65 T:knot384 671.87 672.58 674.05 T:subterraneanv1 1318.72 1343.30 1349.17 T:acehash256v1 2030.23 2034.07 2064.08 T:skinnyhashtk3 4021.09 4022.10 4023.93 T:orangishv1 3988.88 4054.66 4056.45 T:skinnyhashtk2 10008.97 10024.39 10050.20 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 21.17 21.22 21.43 T:xoodyakv1 25.26 25.28 25.30 asconxofv12 25.26 25.30 25.35 asconhashv12 34.45 34.51 34.57 T:gimli24v1 59.00 59.04 59.10 T:saturninhashv2 60.36 60.44 60.54 T:esch256v1 71.80 71.96 72.08 T:drygascon256 75.25 75.28 75.31 T:knot256v2 81.64 81.71 81.89 T:esch384v1 82.33 82.42 82.51 T:drygascon128 188.37 188.40 188.44 T:knot256v1 237.51 237.55 237.62 T:knot512 277.47 277.59 277.79 T:knot384 676.43 678.69 679.72 T:subterraneanv1 1340.42 1363.44 1364.84 T:acehash256v1 2057.36 2061.70 2103.49 T:skinnyhashtk3 4003.44 4067.23 4070.27 T:skinnyhashtk2 4072.63 4074.32 4075.99 T:orangishv1 9973.41 9985.32 10010.02 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 21.90 21.96 22.47 T:xoodyakv1 26.34 26.40 26.42 asconhashv12 26.38 26.43 26.47 asconxofv12 35.71 35.86 35.94 T:gimli24v1 61.55 61.80 62.01 T:saturninhashv2 62.16 62.26 62.39 T:esch256v1 74.15 74.33 74.57 T:drygascon256 78.03 78.06 78.13 T:knot256v2 83.01 83.12 83.35 T:drygascon128 85.26 85.41 85.54 T:esch384v1 190.18 190.29 190.39 T:knot256v1 241.83 241.90 241.98 T:knot512 281.99 282.54 283.07 T:knot384 681.32 686.55 687.32 T:subterraneanv1 1397.52 1422.01 1422.93 T:acehash256v1 2127.51 2130.28 2174.98 T:skinnyhashtk3 4042.27 4103.73 4107.82 T:skinnyhashtk2 4204.92 4207.53 4212.60 T:orangishv1 9848.11 9864.66 9901.49 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 31.20 31.78 32.66 T:xoodyakv1 40.48 40.64 40.89 asconxofv12 40.56 40.70 40.97 asconhashv12 52.80 52.98 53.36 T:gimli24v1 86.95 87.28 88.00 T:esch256v1 91.17 91.97 92.62 T:drygascon128 93.19 95.03 96.77 T:saturninhashv2 103.19 104.41 105.06 T:drygascon256 113.17 113.47 113.66 T:knot256v2 131.53 132.14 132.75 T:esch384v1 213.98 214.16 214.44 T:knot256v1 297.02 297.36 297.70 T:knot512 324.14 330.12 336.33 T:knot384 780.09 783.42 786.72 T:subterraneanv1 2127.95 2162.23 2167.83 T:acehash256v1 3029.50 3035.91 3093.42 T:skinnyhashtk3 4494.69 4551.27 4564.55 T:skinnyhashtk2 5947.47 5960.39 5973.64 T:orangishv1 7995.84 8025.30 8074.81 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 125.75 127.62 129.62 T:xoodyakv1 150.25 151.38 152.50 asconxofv12 150.62 152.12 152.88 asconhashv12 157.38 158.62 161.12 T:gimli24v1 235.12 238.88 242.25 T:drygascon128 273.00 279.00 293.00 T:saturninhashv2 317.25 318.25 319.88 T:knot256v2 334.12 338.00 341.12 T:esch256v1 400.25 401.38 402.12 T:knot256v1 401.38 405.50 411.38 T:drygascon256 575.12 577.12 582.50 T:esch384v1 699.00 708.38 720.12 T:knot384 729.50 730.75 731.75 T:knot512 1555.50 1564.25 1575.38 T:subterraneanv1 5510.00? 5744.38? 6418.00? T:photonbeetlehash256rate32v1 7895.12 8011.12 8031.75 T:acehash256v1 8067.88 8120.88 8144.62 T:skinnyhashtk2 8093.25 8133.38 8274.25 T:skinnyhashtk3 23670.88 23716.75 23806.25 T:orangishv1

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus6, supercop-20210125

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 10.00 10.05 10.63 T:gimli24v1 9.60 10.07 10.33 T:xoodyakv1 12.38 12.83 12.98 asconhashv12 12.65 13.01 13.43 asconxofv12 26.02 26.30 27.40 T:esch256v1 31.32 32.05 32.43 T:saturninhashv2 34.74 34.83 35.23 T:esch384v1 44.46 44.78 45.61 T:drygascon128 48.08 48.50 48.52 T:knot256v2 50.27 52.47 53.06 T:drygascon256 79.31 81.01 82.51 T:knot256v1 151.56 154.15 160.31 T:knot512 175.41 177.20 179.44 T:knot384 677.56 682.79 688.24 T:subterraneanv1 738.19 758.08 766.25 T:acehash256v1 954.33 1025.49 1045.13 T:skinnyhashtk3 1875.45 1981.12 2034.62 T:skinnyhashtk2 2544.08 2587.49 2652.32 T:photonbeetlehash256rate32v1 11390.57? 12861.68? 12914.79? T:orangishv1

Cycles/byte for 4096 bytes 25% 50% 75% hash 9.68 9.99 10.24 T:xoodyakv1 10.08 10.09 10.75 T:gimli24v1 12.61 12.97 13.06 asconhashv12 12.73 12.99 13.29 asconxofv12 26.58 26.58 27.66 T:esch256v1 31.40 31.92 32.44 T:saturninhashv2 34.82 35.10 35.63 T:esch384v1 43.81 44.70 45.68 T:drygascon128 48.49 48.54 48.93 T:knot256v2 50.71 51.42 52.42 T:drygascon256 79.70 80.35 82.86 T:knot256v1 152.53 154.92 160.00 T:knot512 176.01 177.82 179.30 T:knot384 672.40 677.65 680.39 T:subterraneanv1 750.65 758.41 767.74 T:acehash256v1 972.89 1032.21 1043.37 T:skinnyhashtk3 1890.46 1983.04 2048.54 T:skinnyhashtk2 2547.04 2586.03 2650.07 T:photonbeetlehash256rate32v1 11571.16? 12834.60? 12900.89? T:orangishv1

Cycles/byte for 1536 bytes 25% 50% 75% hash 9.96 10.20 10.52 T:xoodyakv1 10.39 10.46 10.88 T:gimli24v1 12.98 13.26 13.29 asconhashv12 12.92 13.42 13.61 asconxofv12 26.46 27.08 27.96 T:esch256v1 32.01 32.33 32.86 T:saturninhashv2 35.10 35.38 35.92 T:esch384v1 43.54 43.81 45.75 T:drygascon128 49.13 49.15 49.56 T:knot256v2 51.69 52.95 53.63 T:drygascon256 79.03 79.12 82.91 T:knot256v1 152.36 157.25 161.10 T:knot512 178.52 178.89 181.86 T:knot384 673.12 673.93 681.24 T:subterraneanv1 744.04 772.15 784.48 T:acehash256v1 989.18 1046.54 1084.56 T:skinnyhashtk3 1963.46 2005.58 2033.92 T:skinnyhashtk2 2601.18 2615.19 2662.84 T:photonbeetlehash256rate32v1 11906.22 11937.19 12502.56 T:orangishv1

Cycles/byte for 576 bytes 25% 50% 75% hash 10.08 10.43 10.70 T:xoodyakv1 10.62 10.78 11.13 T:gimli24v1 13.56 13.83 14.02 asconhashv12 13.40 14.06 14.18 asconxofv12 27.27 27.89 29.02 T:esch256v1 33.44 33.44 33.98 T:saturninhashv2 36.88 37.15 38.09 T:esch384v1 43.94 44.49 46.09 T:drygascon128 50.86 50.86 50.90 T:knot256v2 53.56 53.98 55.27 T:drygascon256 79.22 79.81 83.75 T:knot256v1 155.16 158.87 165.39 T:knot512 182.62 182.85 182.93 T:knot384 670.20 682.15 691.41 T:subterraneanv1 770.62 809.92 818.16 T:acehash256v1 1060.59 1084.96 1118.36 T:skinnyhashtk3 1966.95 2047.89 2057.89 T:skinnyhashtk2 2569.65 2583.44 2652.46 T:photonbeetlehash256rate32v1 12366.60 12756.95 12920.35 T:orangishv1

Cycles/byte for 64 bytes 25% 50% 75% hash 13.36 13.72 14.06 T:xoodyakv1 15.11 15.12 15.47 T:gimli24v1 20.75 21.09 21.45 asconhashv12 20.39 21.44 21.80 asconxofv12 36.92 37.97 39.38 T:esch256v1 48.16 48.52 48.52 T:saturninhashv2 48.17 48.52 49.92 T:drygascon128 56.25 56.59 57.66 T:esch384v1 72.42 72.77 73.12 T:knot256v2 74.19 74.89 76.64 T:drygascon256 88.95 89.64 93.52 T:knot256v1 192.66 197.94 203.55 T:knot512 201.09 201.45 203.20 T:knot384 747.08 758.67 769.58 T:subterraneanv1 1182.31 1242.06 1245.59 T:acehash256v1 1447.38 1540.20 1605.59 T:skinnyhashtk3 2168.80 2248.23 2276.36 T:skinnyhashtk2 2279.89 2284.80 2377.27 T:photonbeetlehash256rate32v1 18368.80 18804.03 18929.17 T:orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 39.38 39.38 39.38 T:gimli24v1 47.75 47.88 50.62 T:xoodyakv1 73.12 75.88 78.75 asconhashv12 73.12 76.00 78.75 asconxofv12 123.75 123.75 126.62 T:drygascon128 132.12 132.25 135.00 T:saturninhashv2 143.38 143.50 149.00 T:esch256v1 163.12 165.88 171.50 T:knot256v1 194.00 194.12 196.88 T:knot256v2 244.75 247.50 250.25 T:esch384v1 281.25 281.25 286.88 T:drygascon256 405.00 407.75 410.62 T:knot384 472.50 483.75 503.38 T:knot512 1395.00 1431.50 1437.12 T:subterraneanv1 2593.12 2601.50 2722.50 T:photonbeetlehash256rate32v1 3881.25 3940.38 3993.75 T:skinnyhashtk2 3864.38 4027.50 4154.00 T:skinnyhashtk3 4297.50 4592.75 4612.50 T:acehash256v1 72315.00 73926.50 74303.50 T:orangishv1

amd64; Zen2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; unstable; colossus7, supercop-20210125

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 9.93 10.68 10.77 T:xoodyakv1 10.02 10.78 11.04 T:gimli24v1 14.26 14.71 15.69 asconxofv12 14.31 14.79 15.81 asconhashv12 28.33? 28.75? 34.22? T:esch256v1 31.84 32.81 33.40 T:saturninhashv2 40.42 41.45 44.69 T:esch384v1 43.56? 45.85? 49.99? T:drygascon128 43.39 46.64 47.41 T:knot256v2 49.74 52.58 54.13 T:drygascon256 78.17 83.85 85.00 T:knot256v1 155.26 162.98 165.74 T:knot512 159.80 168.07 169.24 T:knot384 737.46 778.83 783.01 T:acehash256v1 862.08 878.37 883.95 T:subterraneanv1 944.41 970.60 980.14 T:skinnyhashtk3 1821.76 1841.61 1865.46 T:skinnyhashtk2 2943.67 2997.20 3003.24 T:orangishv1 3173.22 3250.07 3265.99 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 10.06 10.68 10.74 T:xoodyakv1 10.19 10.95 11.02 T:gimli24v1 14.43 14.86 15.73 asconxofv12 14.58 14.91 15.78 asconhashv12 28.95 31.70 31.73 T:esch256v1 32.24 32.94 33.73 T:saturninhashv2 42.07 43.68 44.43 T:esch384v1 44.08 47.02 47.40 T:knot256v2 45.81 47.96 49.06 T:drygascon128 53.45? 58.78? 60.87? T:drygascon256 78.89 84.15 84.18 T:knot256v1 158.62 163.61 164.98 T:knot512 167.88 167.88 169.54 T:knot384 752.70 777.66 784.48 T:acehash256v1 865.69 874.45 877.71 T:subterraneanv1 962.73 973.48 978.32 T:skinnyhashtk3 1825.50 1838.56 1849.09 T:skinnyhashtk2 2926.55 2952.95 3024.39 T:orangishv1 3177.13 3229.85 3250.63 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 10.41 10.84 10.93 T:xoodyakv1 10.50 11.07 11.15 T:gimli24v1 14.74 15.21 15.94 asconxofv12 14.84 15.34 16.03 asconhashv12 29.59? 32.04? 33.69? T:esch256v1 32.65 33.76 34.19 T:saturninhashv2 42.85 43.59 44.75 T:esch384v1 46.11 46.19 47.65 T:drygascon128 44.31 47.62 47.62 T:knot256v2 51.56? 53.99? 57.30? T:drygascon256 78.52 83.06 83.74 T:knot256v1 163.42 166.08 166.10 T:knot512 168.90 170.29 170.54 T:knot384 742.78 756.56 790.44 T:acehash256v1 833.28 874.20 886.54 T:subterraneanv1 941.22 986.40 993.08 T:skinnyhashtk3 1747.81 1828.46 1843.56 T:skinnyhashtk2 2948.10 3064.86 3071.37 T:orangishv1 3136.11 3257.89 3274.37 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 10.59 10.94 11.09 T:xoodyakv1 10.86 11.41 11.52 T:gimli24v1 15.59 15.94 16.56 asconxofv12 15.59 16.05 16.68 asconhashv12 30.82 32.34 32.66 T:esch256v1 34.26 35.04 35.59 T:saturninhashv2 44.49 45.35 48.59 T:esch384v1 45.51 46.52 46.68 T:drygascon128 45.86 48.87 49.65 T:knot256v2 55.51 58.98 60.86 T:drygascon256 79.38 83.79 85.16 T:knot256v1 157.19 169.02 169.41 T:knot512 171.48 172.66 172.77 T:knot384 785.66 794.73 824.80 T:acehash256v1 881.91 889.10 889.41 T:subterraneanv1 1002.97 1008.71 1018.36 T:skinnyhashtk3 1753.28 1840.55 1855.90 T:skinnyhashtk2 2964.02 3133.67 3161.41 T:orangishv1 3016.33 3193.48 3225.35 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 14.06 14.41 14.42 T:xoodyakv1 15.12 15.81 16.17 T:gimli24v1 22.84 23.55 24.27 asconxofv12 22.86 23.56 24.61 asconhashv12 39.38 41.48 42.19 T:esch256v1 46.77 49.56 49.92 T:drygascon128 50.98 51.33 52.39 T:saturninhashv2 66.80 68.91 73.12 T:esch384v1 66.45 70.31 71.02 T:knot256v2 75.23 75.58 75.94 T:drygascon256 88.94 94.22 94.56 T:knot256v1 178.95 188.78 191.59 T:knot384 192.66 205.31 207.06 T:knot512 950.28 1003.72 1007.94 T:subterraneanv1 1175.62 1204.45 1254.38 T:acehash256v1 1363.36 1447.03 1453.70 T:skinnyhashtk3 1910.05 2042.58 2046.09 T:skinnyhashtk2 2681.38 2838.17 2840.62 T:photonbeetlehash256rate32v1 4184.64 4451.84 4453.94 T:orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 39.38 42.12 42.25 T:gimli24v1 50.62 50.62 50.62 T:xoodyakv1 78.75? 81.50? 106.88? asconhashv12 78.75 81.50 84.38 asconxofv12 118.12 121.00 126.50 T:drygascon128 137.88 143.38 143.50 T:saturninhashv2 143.50 154.62 154.75 T:esch256v1 163.12 171.50 174.38 T:knot256v1 177.25 188.38 188.50 T:knot256v2 275.62 281.25 281.25 T:drygascon256 278.38 286.88 303.75 T:esch384v1 357.25 376.88 379.75 T:knot384 472.50 503.38 506.25 T:knot512 1839.38 1946.25 1946.25 T:subterraneanv1 3068.38 3254.00 3279.38 T:photonbeetlehash256rate32v1 3445.38 3608.38 3645.00 T:skinnyhashtk2 3872.75 3875.62 3912.12 T:skinnyhashtk3 4300.38 4440.88 4657.50 T:acehash256v1 16697.75 17811.62 17952.25 T:orangishv1

amd64; Zen2 (830f10); 2019 AMD EPYC 7702; 64 x 2000MHz; genji346, supercop-20191017

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 7.91? 12.27? 20.92? gimli24v1 18.78 18.81 18.81 asconhashv12 18.78 18.81 18.83 asconxofv12 29.77 29.90 30.19 xoodyakv1 38.07 38.16 38.26 esch256v1 43.96 44.30 44.31 saturninhashv2 48.60 48.69 48.79 esch384v1 61.88 62.17 62.34 drygascon128 63.38 63.41 63.54 knot256v2 68.67 69.38 70.64 drygascon256 111.60 111.66 111.82 knot256v1 213.90 215.36 225.05 knot512 224.49 227.12 238.12 knot384 560.73 567.79 580.69 subterraneanv1 1165.71 1177.01 1187.78 acehash256v1 1366.23? 1414.01? 1566.50? skinnyhashtk3 2718.50 2732.37 2755.82 skinnyhashtk2 3511.94 3528.14 3560.71 orangishv1 4639.18 4668.70 4713.13 photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 12.34? 12.36? 16.67? gimli24v1 18.95 18.95 18.95 asconhashv12 18.95 18.95 18.96 asconxofv12 30.03 30.04 30.17 xoodyakv1 38.42 38.43 38.45 esch256v1 44.64 44.65 44.65 saturninhashv2 49.13 49.17 49.20 esch384v1 62.08 62.21 62.23 drygascon128 63.96 63.96 63.99 knot256v2 69.82 69.85 70.47 drygascon256 111.90 111.93 111.97 knot256v1 215.25 215.75 220.59 knot512 226.01 226.90 232.36 knot384 570.42 571.76 574.27 subterraneanv1 1184.33 1187.60 1191.27 acehash256v1 1440.45 1444.33 1511.32 skinnyhashtk3 2747.82 2751.14 2758.94 skinnyhashtk2 3569.16 3574.47 3582.55 orangishv1 4650.80 4659.49 4670.69 photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 12.47 12.50 12.54 gimli24v1 19.18 19.19 19.23 asconhashv12 19.18 19.19 19.23 asconxofv12 30.26 30.26 30.40 xoodyakv1 38.82 38.85 38.95 esch256v1 45.22 45.25 45.60 saturninhashv2 49.93 49.97 50.04 esch384v1 62.30 62.33 62.38 drygascon128 64.79 64.80 64.88 knot256v2 70.21 71.03 71.22 drygascon256 112.25 112.32 112.33 knot256v1 216.72 216.74 217.20 knot512 227.29 227.36 228.19 knot384 568.65 571.17 581.38 subterraneanv1 1204.79 1208.18 1211.58 acehash256v1 1465.55 1526.58 1539.91 skinnyhashtk3 2757.55 2764.92 2773.33 skinnyhashtk2 3622.04 3634.87 3644.69 orangishv1 4617.63 4636.24 4652.03 photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 12.92 12.92 12.95 gimli24v1 19.83 19.86 19.93 asconhashv12 19.83 19.86 19.93 asconxofv12 30.87 30.87 31.01 xoodyakv1 39.90 39.97 40.00 esch256v1 46.81 46.84 46.91 saturninhashv2 52.08 52.12 52.15 esch384v1 62.74 62.78 62.85 drygascon128 67.05 67.05 67.05 knot256v2 72.40 73.02 73.26 drygascon256 113.30 113.33 113.37 knot256v1 220.59 220.62 221.08 knot512 230.07 230.73 231.70 knot384 576.60 579.17 581.15 subterraneanv1 1243.54 1245.73 1275.62 acehash256v1 1501.77 1538.85 1564.51 skinnyhashtk3 2769.17 2797.95 2808.78 skinnyhashtk2 3739.44 3754.24 3767.81 orangishv1 4510.31 4535.07 4560.59 photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 18.75 18.75 18.75 gimli24v1 28.44 28.75 28.75 asconhashv12 28.44 28.75 28.75 asconxofv12 38.44 38.44 38.75 xoodyakv1 54.06 54.38 55.62 esch256v1 66.88 67.19 67.19 saturninhashv2 68.12 68.44 68.44 drygascon128 79.06 79.38 79.38 esch384v1 95.31 95.31 95.31 knot256v2 98.12 98.44 99.38 drygascon256 126.88 126.88 127.19 knot256v1 254.69 254.69 255.00 knot384 270.62 270.94 270.94 knot512 681.25 683.12 688.44 subterraneanv1 1889.38 1892.19 1898.12 acehash256v1 2119.69 2124.06 2225.94 skinnyhashtk3 3045.31 3051.56 3067.50 skinnyhashtk2 3261.25 3276.25 3465.94 photonbeetlehash256rate32v1 5308.12 5310.94 5329.69 orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 52.50 55.00 55.00 gimli24v1 95.00 97.50 100.00 asconxofv12 95.00 97.50 97.50 asconhashv12 125.00 125.00 127.50 xoodyakv1 172.50 172.50 175.00 drygascon128 182.50 182.50 185.00 saturninhashv2 202.50 205.00 210.00 esch256v1 227.50 230.00 232.50 knot256v1 252.50 252.50 255.00 knot256v2 342.50 342.50 342.50 esch384v1 365.00 367.50 372.50 drygascon256 512.50 515.00 515.00 knot384 660.00 660.00 662.50 knot512 1492.50 1500.00 1522.50 subterraneanv1 3695.00 3702.50 3722.50 photonbeetlehash256rate32v1 5430.00 5435.00 5445.00 skinnyhashtk2 5650.00 5665.00 5955.00 skinnyhashtk3 6977.50 6980.00 6995.00 acehash256v1 21515.00 21522.50 21532.50 orangishv1

amd64; Zen (810f81); 2019 AMD Ryzen Embedded R1606G; 2 x 2600MHz; unstable; ghf51, supercop-20200702

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 14.98 15.20 16.44 xoodyakv1 19.59? 21.16? 25.50? gimli24v1 28.84? 30.97? 36.29? asconhashv12 31.90? 33.59? 40.14? asconxofv12 74.25? 80.35? 83.89? saturninhashv2 76.92? 101.98? 128.64? esch384v1 58.08? 103.18? 111.84? esch256v1 106.96? 114.61? 122.24? drygascon128 124.88? 133.91? 140.01? knot256v2 125.31? 139.62? 147.82? drygascon256 174.16 187.89 193.08 knot256v1 429.30? 457.71? 478.91? knot384 420.88? 463.44? 631.19? knot512 1554.88? 1684.20? 1846.21? subterraneanv1 1547.69? 1968.30? 2072.45? acehash256v1 2292.86? 2591.83? 4890.69? skinnyhashtk3 4819.45? 4879.68? 7911.51? skinnyhashtk2 6916.10? 7548.97? 9595.17? orangishv1 6725.54? 7974.38? 8263.67? photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 15.24 15.32 16.31 xoodyakv1 20.27? 21.62? 24.93? gimli24v1 29.63? 30.39? 36.19? asconhashv12 33.06? 33.86? 39.57? asconxofv12 75.34 80.29 83.60 saturninhashv2 94.75? 100.24? 130.18? esch384v1 63.18? 100.45? 106.22? esch256v1 105.28? 114.17? 120.05? drygascon128 127.96 134.51 138.32 knot256v2 131.30? 144.68? 152.78? drygascon256 172.96 185.16 188.20 knot256v1 440.40 458.18 471.95 knot384 446.62? 468.87? 610.83? knot512 1571.18? 1675.25? 1818.25? subterraneanv1 1608.04? 1986.80? 2072.62? acehash256v1 2561.56? 2617.57? 4704.60? skinnyhashtk3 4820.31? 4858.74? 7656.64? skinnyhashtk2 6853.01? 6890.11? 7947.06? photonbeetlehash256rate32v1 7263.59? 7711.30? 9695.32? orangishv1

Cycles/byte for 1536 bytes 25% 50% 75% hash 15.51 15.56 16.08 xoodyakv1 20.46? 22.33? 25.07? gimli24v1 30.35? 30.84? 35.02? asconhashv12 33.52? 34.09? 39.44? asconxofv12 63.65? 71.57? 104.93? esch256v1 76.41 81.23 84.74 saturninhashv2 108.25? 120.32? 121.76? drygascon128 127.24? 135.33? 143.25? knot256v2 125.19? 139.11? 147.05? drygascon256 148.62? 174.25? 185.74? knot256v1 134.88? 205.80? 217.78? esch384v1 420.74? 456.54? 474.38? knot384 442.95? 465.38? 605.77? knot512 1583.17 1596.11 1612.10 subterraneanv1 2006.54 2031.94 2155.38 acehash256v1 2584.16? 2646.33? 4745.88? skinnyhashtk3 4495.36 4536.49 4891.32 skinnyhashtk2 6853.86? 7931.64? 8415.49? photonbeetlehash256rate32v1 7355.26? 8726.96? 9831.37? orangishv1

Cycles/byte for 576 bytes 25% 50% 75% hash 16.07 16.11 16.66 xoodyakv1 21.22? 21.35? 25.59? gimli24v1 31.82? 33.94? 36.29? asconhashv12 33.00? 34.58? 40.58? asconxofv12 65.68? 70.24? 73.58? esch256v1 79.44 83.64 87.70 saturninhashv2 108.88? 120.93? 121.29? drygascon128 132.21 141.38 146.88 knot256v2 128.74? 143.27? 151.35? drygascon256 176.22 187.51 190.89 knot256v1 144.67? 214.95? 232.42? esch384v1 439.83 461.32 480.91 knot384 449.72? 472.15? 614.30? knot512 1576.11 1620.71 1633.89 subterraneanv1 1969.91 2079.10 2093.95 acehash256v1 2710.68? 2717.59? 4882.85? skinnyhashtk3 4535.83 4879.92 4919.28 skinnyhashtk2 6801.84? 7870.15? 8295.94? photonbeetlehash256rate32v1 8585.82? 9034.23? 10145.60? orangishv1

Cycles/byte for 64 bytes 25% 50% 75% hash 21.94 22.75 23.56 xoodyakv1 31.69? 32.91? 49.56? gimli24v1 41.03? 47.94? 52.00? asconhashv12 50.38? 50.78? 58.50? asconxofv12 87.75? 90.19? 97.91? esch256v1 113.34 115.38 125.53 saturninhashv2 119.84? 129.59? 133.25? drygascon128 171.84? 191.75? 213.28? drygascon256 192.16 203.94 206.38 knot256v2 197.44 209.22 214.09 knot256v1 227.09? 324.59? 331.50? esch384v1 490.75 500.91 534.22 knot384 564.69? 587.03? 696.72? knot512 1783.84? 1822.84? 2029.62? subterraneanv1 2993.66 2995.69 3164.69 acehash256v1 3764.31? 3852.47? 6962.31? skinnyhashtk3 4987.53 5018.81 5392.56 skinnyhashtk2 5983.25? 7046.00? 7481.09? photonbeetlehash256rate32v1 12208.22 12823.69 13261.22 orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 78.00 81.25 84.50 gimli24v1 81.25? 87.75? 94.25? xoodyakv1 156.00? 172.25? 185.25? asconhashv12 169.00? 175.50? 201.50? asconxofv12 276.25 292.50 305.50 drygascon128 308.75 312.00 338.00 saturninhashv2 331.50? 360.75? 461.50? esch256v1 354.25 360.75 367.25 knot256v1 568.75 591.50 601.25 knot256v2 637.00? 692.25? 724.75? drygascon256 991.25 1001.00 1082.25 knot384 1001.00? 1394.25? 1459.25? esch384v1 1456.00 1498.25 1508.00 knot512 3415.75 3419.00 3490.50 subterraneanv1 7673.25? 8089.25? 8537.75? photonbeetlehash256rate32v1 8960.25 9015.50 9486.75 skinnyhashtk2 10052.25? 10383.75? 18219.50? skinnyhashtk3 6880.25? 11267.75? 11703.25? acehash256v1 47791.25? 51320.75? 54226.25? orangishv1

amd64; CometLake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20210604

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 12.94 12.95 12.96 T:xoodyakv1 13.90 13.91 13.92 T:gimli24v1 21.77 21.78 21.86 asconxofv12 21.76 21.79 21.85 asconhashv12 37.62 37.72 37.79 T:esch256v1 43.35? 45.03? 60.94? T:esch384v1 45.35 45.36 45.37 T:saturninhashv2 68.34 68.38 68.42 T:drygascon128 76.59 76.62 76.65 T:knot256v2 79.11 79.15 79.19 T:drygascon256 117.44 117.78 118.60 T:knot256v1 230.82 230.93 231.01 T:knot512 270.14 270.18 270.24 T:knot384 980.57 981.23 983.64 T:subterraneanv1 1283.39 1283.64 1284.19 T:acehash256v1 1382.71 1384.00 1388.87 T:skinnyhashtk3 2489.97 2491.23 2491.53 T:skinnyhashtk2 3915.60 3916.66 3918.74 T:orangishv1 9729.49 9731.16 9732.50 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 13.05 13.07 13.08 T:xoodyakv1 14.03 14.05 14.07 T:gimli24v1 21.96 21.98 22.01 asconxofv12 21.99 22.02 22.04 asconhashv12 38.07 38.20 38.29 T:esch256v1 45.44? 45.49? 59.90? T:esch384v1 45.75 45.77 45.78 T:saturninhashv2 68.48 68.49 68.53 T:drygascon128 77.18 77.19 77.20 T:knot256v2 79.67 79.73 79.85 T:drygascon256 117.89 118.65 119.64 T:knot256v1 230.75 231.78 231.91 T:knot512 270.68 270.70 272.59 T:knot384 983.18 984.03 985.35 T:subterraneanv1 1295.80 1295.99 1296.49 T:acehash256v1 1393.96 1395.03 1399.05 T:skinnyhashtk3 2495.10 2495.81 2496.49 T:skinnyhashtk2 3946.06 3946.75 3949.53 T:orangishv1 9704.33 9707.65 9710.00 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 13.18 13.20 13.21 T:xoodyakv1 14.24 14.26 14.29 T:gimli24v1 22.30 22.35 22.38 asconxofv12 22.31 22.35 22.40 asconhashv12 38.42 38.57 38.69 T:esch256v1 46.22? 46.31? 60.90? T:esch384v1 46.41 46.44 46.47 T:saturninhashv2 68.64 68.71 68.77 T:drygascon128 78.18 78.19 78.22 T:knot256v2 80.54 80.61 80.68 T:drygascon256 118.53 118.92 119.83 T:knot256v1 232.74 233.50 234.24 T:knot512 272.36 272.38 272.39 T:knot384 987.14 987.81 989.29 T:subterraneanv1 1316.59 1316.85 1317.14 T:acehash256v1 1411.25 1413.26 1417.11 T:skinnyhashtk3 2502.60 2502.96 2505.32 T:skinnyhashtk2 3997.00 3997.64 4000.50 T:orangishv1 9671.21 9674.42 9685.90 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 13.70 13.72 13.76 T:xoodyakv1 14.81 14.85 14.89 T:gimli24v1 23.16 23.19 23.26 asconxofv12 23.14 23.20 23.28 asconhashv12 39.61 39.75 39.90 T:esch256v1 48.18 48.26 48.35 T:saturninhashv2 48.20? 48.33? 63.60? T:esch384v1 69.18 69.28 69.59 T:drygascon128 80.76 80.79 80.81 T:knot256v2 82.81 82.87 82.99 T:drygascon256 119.74 120.99 121.24 T:knot256v1 237.84 238.20 238.89 T:knot512 276.43 276.47 276.48 T:knot384 997.44 997.99 1000.14 T:subterraneanv1 1372.78 1372.88 1373.05 T:acehash256v1 1459.86 1460.35 1465.44 T:skinnyhashtk3 2524.30 2524.56 2525.42 T:skinnyhashtk2 4131.97 4134.78 4136.70 T:orangishv1 9581.72 9589.55 9596.95 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 17.91 18.02 18.12 T:xoodyakv1 20.64 20.88 21.02 T:gimli24v1 34.03 34.14 34.55 asconxofv12 34.00 34.17 34.47 asconhashv12 53.86 54.31 54.78 T:esch256v1 70.38 70.69 71.27 T:saturninhashv2 74.33? 75.03? 97.25? T:esch384v1 75.77 75.98 76.16 T:drygascon128 112.03 112.34 112.62 T:drygascon256 114.09 114.45 114.75 T:knot256v2 134.28 134.64 134.91 T:knot256v1 294.38 295.03 295.91 T:knot512 308.97 309.12 309.36 T:knot384 1127.66 1128.94 1130.91 T:subterraneanv1 2074.81 2076.77 2082.94 T:skinnyhashtk3 2088.58 2089.56 2089.94 T:acehash256v1 2802.22 2802.48 2802.69 T:skinnyhashtk2 5868.80 5870.33 5871.47 T:orangishv1 8011.19 8093.62 8215.09 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 55.38 55.88 57.12 T:gimli24v1 64.62 65.62 66.38 T:xoodyakv1 120.12 121.12 123.50 asconhashv12 120.25 121.25 122.50 asconxofv12 197.62 198.38 200.25 T:drygascon128 199.50 200.25 202.00 T:saturninhashv2 200.75 201.75 204.25 T:esch256v1 248.25 249.25 252.25 T:knot256v1 302.00 305.12 307.38 T:knot256v2 323.50? 328.12? 423.38? T:esch384v1 422.25 423.12 425.75 T:drygascon256 622.62 623.12 624.25 T:knot384 738.88 742.38 745.38 T:knot512 2141.62 2146.25 2151.62 T:subterraneanv1 4991.50 4992.38 4993.38 T:skinnyhashtk2 5539.00 5544.50 5556.38 T:skinnyhashtk3 4868.62? 5840.25? 7188.75? T:photonbeetlehash256rate32v1 7716.62 7721.75 7730.88 T:acehash256v1 23479.50 23482.12 23485.25 T:orangishv1