VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; ARM1176 (410fb767); 2011 Broadcom BCM2835; 1 x 1000MHz; berry0, supercop-20240107

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
32.8132.9133.06sha256
46.2546.3346.79T:xoodyakv1
60.0560.2160.78asconhashabi32v12
64.7664.8565.30asconxofav12
64.7364.9165.29asconhashav12
68.7768.9869.67shake128
71.4471.6272.04sha512
86.9887.1187.53asconhashbi32v12
91.9192.1492.53asconhashv12
91.8792.1892.67asconxofv12
128.11128.45129.73T:esch256v2
187.07187.37189.08T:esch384v2
281.04282.71284.35T:romulush
1837.631840.681843.60T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
32.9833.0033.03sha256
46.2646.2946.35T:xoodyakv1
60.3660.3960.43asconhashabi32v12
64.9664.9765.01asconxofav12
64.9865.0265.32asconhashav12
71.5271.7272.11shake128
73.2773.3273.51sha512
87.3187.3687.38asconhashbi32v12
92.2492.2592.29asconhashv12
92.2892.3392.46asconxofv12
128.21128.24128.30T:esch256v2
188.01188.07188.29T:esch384v2
281.62281.73283.09T:romulush
1828.741834.861837.65T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
34.3434.4434.63sha256
47.1847.2247.45T:xoodyakv1
61.6161.7961.89asconhashabi32v12
66.2366.3166.36asconxofav12
66.3166.4666.57asconhashav12
77.9277.9878.11sha512
79.6580.2380.82shake128
88.8488.9089.04asconhashbi32v12
93.8993.9093.93asconhashv12
93.9293.9594.05asconxofv12
129.82129.82130.02T:esch256v2
191.31191.44191.51T:esch384v2
285.22285.32285.59T:romulush
1820.591822.361839.94T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
38.0938.3038.55sha256
49.6449.7649.94T:xoodyakv1
65.0065.6365.76asconhashabi32v12
69.7670.0170.21asconxofav12
69.7670.0270.58asconhashav12
82.9382.9983.34sha512
93.0193.3793.98asconhashbi32v12
94.7296.0596.38shake128
98.3198.3798.38asconhashv12
98.4898.7098.86asconxofv12
134.08134.09134.51T:esch256v2
200.36200.51200.71T:esch384v2
294.95294.96295.42T:romulush
1805.911806.801811.55T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
81.1782.4883.77T:xoodyakv1
86.4887.6189.16sha256
108.31113.95116.27asconhashabi32v12
114.81116.44117.92asconxofav12
115.83117.14122.38asconhashav12
146.05147.78150.31asconhashbi32v12
154.61154.69155.23asconhashv12
155.42156.34158.31asconxofv12
180.47182.58185.56sha512
188.72188.83192.58T:esch256v2
313.41315.31318.39T:esch384v2
321.11329.48339.91shake128
419.56419.97424.42T:romulush
1623.091624.971627.58T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
368.00378.25398.12T:xoodyakv1
468.88486.38496.38asconxofav12
468.88?486.62?528.50?asconhashav12
462.38493.88508.75asconhashabi32v12
490.75501.50537.12sha256
553.00572.25597.25asconhashbi32v12
593.75598.75603.12asconhashv12
608.38612.38626.12asconxofv12
761.50761.62791.38T:esch256v2
1120.251120.381140.00T:romulush
1403.501429.001443.12T:esch384v2
1439.501449.121472.25sha512
1990.002000.252011.50T:photonbeetlehash256rate32v1
2555.622617.752702.12shake128