VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240425

[Page version: 20241030 00:45:37]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
28.1928.2128.27sha256
34.1834.2234.25sha512
57.3157.3457.59asconhashabi32v12
61.6961.8261.87asconhashav12
61.6561.8361.86asconxofav12
63.8963.9564.01T:xoodyakv1
65.4965.5765.63shake128
83.3583.6083.63asconhashbi32v12
87.7187.8287.86asconhashv12
87.7387.8387.87asconxofv12
98.9799.0299.04T:esch256v2
144.27144.34144.37T:esch384v2
229.09229.15229.18T:romulush
1407.151407.201407.25T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
28.9829.0029.10sha256
35.6835.7035.79sha512
58.0958.0959.09asconhashabi32v12
62.3862.3862.75asconhashav12
62.3862.4062.43asconxofav12
64.2764.2764.37T:xoodyakv1
68.0768.0968.30shake128
84.2484.2484.30asconhashbi32v12
88.5488.5488.63asconhashv12
88.5488.5488.61asconxofv12
99.6399.6499.79T:esch256v2
145.72145.73145.84T:esch384v2
230.69230.77230.97T:romulush
1404.491404.521404.60T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
30.2830.2930.32sha256
38.2138.2438.54sha512
59.0759.0759.70asconhashabi32v12
63.4363.4465.38asconhashav12
63.4363.4763.52asconxofav12
64.9164.9164.97T:xoodyakv1
74.5874.6574.69shake128
85.4785.4785.60asconhashbi32v12
89.8489.8591.05asconxofv12
89.8589.8689.88asconhashv12
100.76100.77101.41T:esch256v2
148.16148.16148.20T:esch384v2
233.60233.61233.99T:romulush
1399.981400.111400.38T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
33.7833.7933.79sha256
41.2041.3241.41sha512
61.7061.7163.76asconhashabi32v12
66.2466.2468.12asconhashav12
66.2466.3466.37asconxofav12
66.6366.6366.95T:xoodyakv1
85.0485.1485.44shake128
88.7688.7790.97asconhashbi32v12
93.3393.3393.45asconhashv12
93.3393.3393.49asconxofv12
103.79103.80103.81T:esch256v2
154.68154.69154.74T:esch384v2
241.36241.36241.41T:romulush
1387.991388.461388.99T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
78.1178.1178.17sha256
88.7088.7288.75T:xoodyakv1
94.8194.8195.06asconhashabi32v12
95.4796.5697.30sha512
101.91101.91101.91asconhashav12
102.00102.06102.94asconxofav12
130.62130.62130.92asconhashbi32v12
137.75137.75137.75asconxofv12
137.75137.78138.09asconhashv12
142.66142.69142.84T:esch256v2
238.06238.09238.25T:esch384v2
247.66248.88249.50shake128
340.72340.72340.72T:romulush
1237.221237.381239.42T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
317.75318.00318.50T:xoodyakv1
356.25356.25356.88asconhashabi32v12
383.00383.25385.75asconhashav12
383.50384.00392.00asconxofav12
389.75390.25391.25sha256
460.75460.75461.00asconhashbi32v12
488.00488.00488.25asconxofv12
488.00488.12490.75asconhashv12
556.62556.75557.25T:esch256v2
760.50767.12774.88sha512
885.50885.50887.00T:romulush
1050.121050.251052.00T:esch384v2
1456.001456.001458.00T:photonbeetlehash256rate32v1
1967.501974.251985.12shake128