VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 10.75 11.06 11.21 sha512 11.93 12.28 12.40 shake128 15.27 15.64 15.73 asconxofav12 15.27 15.64 15.72 asconhashav12 16.42 16.62 16.66 sha256 23.06 23.22 23.45 asconxofv12 23.06 23.23 23.49 asconhashv12 31.54 31.82 32.25 T:xoodyakv1 33.92 34.16 34.80 asconhashabi32v12 51.80 52.36 52.94 asconhashbi32v12 104.54 104.80 105.13 T:esch256v2 123.79 124.05 124.24 T:esch384v2 132.67 133.01 133.33 T:romulush 509.78 510.54 511.63 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 10.86 11.57 11.60 sha512 12.21 12.60 12.76 shake128 15.59 15.62 15.90 asconxofav12 15.59 15.62 15.96 asconhashav12 16.74 16.78 17.15 sha256 23.04 23.41 23.74 asconhashv12 23.07 23.44 23.74 asconxofv12 31.28 31.34 32.06 T:xoodyakv1 34.39 34.44 35.10 asconhashabi32v12 52.46 52.98 53.41 asconhashbi32v12 104.49 105.16 105.35 T:esch256v2 124.62 124.82 125.17 T:esch384v2 132.89 133.18 133.91 T:romulush 509.52 509.92 510.35 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 11.56? 11.56? 13.35? sha512 12.53? 12.53? 14.65? shake128 15.14? 15.22? 17.01? asconhashav12 15.22? 15.22? 17.09? asconxofav12 16.52? 16.52? 18.39? sha256 22.71 24.58 24.66 asconhashv12 22.71 24.58 24.66 asconxofv12 30.76 32.06 32.63 T:xoodyakv1 33.85 35.64 36.78 asconhashabi32v12 53.14 53.22 54.85 asconhashbi32v12 104.98 106.08 107.01 T:esch256v2 126.06 126.67 127.77 T:esch384v2 134.36 135.58 136.80 T:romulush 506.02 509.52 512.61 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 12.15 12.15 12.37 sha512 13.45 13.45 13.67 shake128 15.84 15.84 16.06 asconhashav12 15.84 15.84 16.06 asconxofav12 17.80 17.80 17.80 sha256 23.65 23.65 23.87 asconhashv12 23.65 23.65 23.87 asconxofv12 31.47? 31.47? 36.46? T:xoodyakv1 35.59? 35.81? 40.80? asconhashabi32v12 53.60 57.51 58.81 asconhashbi32v12 108.94 109.16 110.03 T:esch256v2 131.29 131.29 133.90 T:esch384v2 138.24 138.24 141.93 T:romulush 499.57 504.12 509.33 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 23.44 25.39 25.39 asconhashav12 23.44 25.39 25.39 sha512 25.39 25.39 25.39 asconxofav12 31.25 31.25 31.25 shake128 33.20 33.20 35.16 sha256 35.16 35.16 35.16 asconhashv12 35.16 35.16 35.16 asconxofv12 41.02 41.02 41.02 T:xoodyakv1 60.55 60.55 62.50 asconhashabi32v12 83.98 83.98 83.98 asconhashbi32v12 138.67 140.62 140.62 T:esch256v2 185.55 185.55 187.50 T:romulush 191.41 193.36 193.36 T:esch384v2 425.78? 429.69? 474.61? T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 93.75 93.75 93.75 asconhashav12 93.75 93.75 93.75 asconxofav12 125.00 125.00 125.00 asconhashv12 125.00 125.00 125.00 asconxofv12 140.62 140.62 140.62 T:xoodyakv1 140.62? 156.25? 156.25? sha256 203.12 203.12 203.12 sha512 234.38 250.00 250.00 shake128 250.00 265.62 265.62 asconhashabi32v12 312.50 328.12 328.12 asconhashbi32v12 468.75 484.38 484.38 T:romulush 484.38 500.00 500.00 T:photonbeetlehash256rate32v1 515.62 515.62 531.25 T:esch256v2 828.12 828.12 843.75 T:esch384v2