VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20260330

[Page version: 20260921 06:32:50]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
13.6713.6713.75sha256
22.5822.5922.80sha512
33.7833.8134.36T:xoodyakv1
37.4837.5438.26asconhashabi32v12
41.9942.0042.70asconxofav12
41.9942.0242.72asconhashav12
47.9748.0148.95shake128
54.1154.1755.21asconhashbi32v12
57.3457.4558.81asconhashv12
57.4057.4758.51asconxofv12
87.0687.5088.64T:esch256v2
127.10128.51128.67T:esch384v2
154.16155.15155.62T:romulush
1242.611243.651248.22T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
14.4014.4014.55sha256
23.7423.9323.93sha512
34.3634.4234.42T:xoodyakv1
38.1738.3338.43asconhashabi32v12
42.7242.7242.85asconhashav12
42.7242.7242.87asconxofav12
49.3849.5649.58shake128
54.9354.9356.88asconhashbi32v12
58.1158.2958.35asconxofv12
58.1158.3358.35asconhashv12
87.8987.9188.16T:esch256v2
128.66128.66129.35T:esch384v2
155.03155.03156.96T:romulush
1239.711239.971245.46T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
15.6215.6215.73sha256
25.8226.0426.10sha512
35.1635.1635.59T:xoodyakv1
39.0639.7139.71asconhashabi32v12
43.6744.2744.27asconhashav12
43.6744.2744.27asconxofav12
53.3953.3953.71shake128
55.9956.4856.64asconhashbi32v12
59.3059.9059.90asconxofv12
59.3559.9059.90asconhashv12
89.1989.5289.84T:esch256v2
131.08131.51131.56T:esch384v2
157.55157.55157.71T:romulush
1230.471239.201249.29T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
19.1019.1019.10sha256
28.2129.5129.51sha512
37.7638.1938.19T:xoodyakv1
41.6743.4043.40asconhashabi32v12
46.8846.8848.32asconxofav12
46.8846.8848.47asconhashav12
59.0359.0359.03shake128
59.0360.4760.76asconhashbi32v12
62.5063.8064.24asconxofv12
62.6464.2464.24asconhashv12
93.6193.7593.75T:esch256v2
137.59138.89138.89T:esch384v2
163.63164.93164.93T:romulush
1220.491222.081230.76T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
62.5062.5062.50sha256
62.50?71.61?78.12?T:xoodyakv1
78.1278.1278.12sha512
78.12?79.43?93.75?asconhashabi32v12
88.5493.7593.75asconhashav12
88.5493.7593.75asconxofav12
109.38109.38109.38asconhashbi32v12
109.38109.38113.28asconxofv12
109.38109.38115.89asconhashv12
140.62140.62149.74T:esch256v2
156.25156.25156.25shake128
218.75234.38234.38T:esch384v2
250.00250.00250.00T:romulush
1102.861109.381109.38T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
343.75375.00375.00T:xoodyakv1
375.00375.00375.00sha256
375.00?375.00?458.33?asconhashabi32v12
375.00?406.25?500.00?asconxofav12
375.00?437.50?500.00?asconhashav12
479.17500.00500.00asconhashbi32v12
500.00500.00500.00asconhashv12
500.00500.00500.00asconxofv12
625.00625.00625.00sha512
625.00625.00645.83T:esch256v2
750.00750.00802.08T:romulush
1000.00?1114.58?1125.00?T:esch384v2
1229.171250.001250.00shake128
1375.001427.081500.00T:photonbeetlehash256rate32v1