VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20240909

[Page version: 20241207 23:21:18]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
28.1428.2528.31T!!!sha256
31.4431.5931.65T!!!sha512
55.3855.4855.55T:xoodyakv1
57.5057.5857.62asconhashabi32v12
61.7161.8261.86asconxofav12
61.7061.8361.90asconhashav12
65.4065.5965.66shake128
83.5483.5883.62asconhashbi32v12
87.7987.8387.87asconxofv12
87.7787.8487.88asconhashv12
98.3398.6198.65T:esch256v2
142.19142.24142.27T:esch384v2
273.92274.00274.06T:romulush
1285.991286.051286.12T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
28.9428.9528.99T!!!sha256
32.8032.8132.91T!!!sha512
55.7655.8155.89T:xoodyakv1
58.1158.1158.20asconhashabi32v12
62.4162.4162.54asconxofav12
62.4162.4462.68asconhashav12
68.1468.1868.54shake128
84.2784.2784.47asconhashbi32v12
88.5688.5688.68asconhashv12
88.5688.5888.76asconxofv12
99.2799.2799.31T:esch256v2
143.60143.68143.77T:esch384v2
275.92276.11276.25T:romulush
1283.641283.701283.78T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
30.1730.1931.05T!!!sha256
34.9334.9635.71T!!!sha512
56.3956.4057.18T:xoodyakv1
59.1359.1359.23asconhashabi32v12
63.5163.5164.01asconxofav12
63.5163.5164.24asconhashav12
74.8174.8576.10shake128
85.5485.5485.92asconhashbi32v12
89.9189.9289.98asconxofv12
89.9289.9490.16asconhashv12
100.45100.47100.72T:esch256v2
146.05146.07146.51T:esch384v2
279.41279.46280.17T:romulush
1279.471279.851280.28T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
33.3833.4333.65T!!!sha256
37.3637.6840.00T!!!sha512
58.2959.6161.82T:xoodyakv1
62.0563.4066.24asconhashabi32v12
66.4366.6570.24asconxofav12
66.6267.7670.03asconhashav12
85.6186.0591.21shake128
88.9489.0690.38asconhashbi32v12
93.5193.6495.78asconxofv12
93.5193.7195.45asconhashv12
103.59103.69105.09T:esch256v2
152.59152.60154.47T:esch384v2
288.85289.18290.92T:romulush
1268.521269.221270.63T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
74.6975.3477.55T!!!sha256
79.6979.7779.89T:xoodyakv1
82.2882.8083.02T!!!sha512
96.4796.47100.73asconhashabi32v12
103.75103.81108.92asconhashav12
103.72104.03113.95asconxofav12
132.28132.80140.27asconhashbi32v12
139.50139.53143.75asconhashv12
139.53140.02145.17asconxofv12
143.83145.19153.58T:esch256v2
236.36237.97254.88T:esch384v2
253.25258.84276.12shake128
412.05428.39448.95T:romulush
1132.341139.621156.16T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
300.12300.88301.62T:xoodyakv1
368.75368.75368.75asconhashabi32v12
380.25381.75385.12T!!!sha256
397.50397.50397.50asconxofav12
397.50397.50407.62asconhashav12
473.75473.75473.75asconhashbi32v12
502.00502.00502.00asconxofv12
502.00502.00505.75asconhashv12
564.38565.00581.38T:esch256v2
656.00663.12693.88T!!!sha512
1046.501048.001071.62T:esch384v2
1080.001080.501118.38T:romulush
1344.001347.121419.62T:photonbeetlehash256rate32v1
2029.25?2155.12?2361.50?shake128