VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20240107

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
12.5912.6112.65sha256
18.8218.8919.15sha512
26.5126.5326.68T:xoodyakv1
30.1330.1430.17asconhashabi32v12
30.8230.8530.97shake128
34.0134.0134.04asconxofav12
34.0134.0234.04asconhashav12
43.8743.9044.04asconhashbi32v12
48.0148.0248.05asconxofv12
48.0148.0248.05asconhashv12
64.7964.8164.82T:esch256v2
94.1794.1894.91T:esch384v2
96.8796.8997.42T:romulush
698.07698.88699.06T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
13.9213.9613.99sha256
20.6220.6520.91sha512
26.8826.8826.88T:xoodyakv1
30.6030.6030.60asconhashabi32v12
33.0533.0933.17shake128
34.5234.5234.53asconhashav12
34.5234.5234.53asconxofav12
44.4344.4344.56asconhashbi32v12
48.6048.6048.61asconxofv12
48.6048.6048.61asconhashv12
65.3865.3865.41T:esch256v2
95.2895.3095.32T:esch384v2
97.8797.9397.93T:romulush
696.15696.25699.07T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
16.0916.1416.22sha256
23.5523.6423.86sha512
27.5127.5127.52T:xoodyakv1
31.3831.3831.38asconhashabi32v12
35.3935.3935.40asconxofav12
35.3935.3935.41asconhashav12
37.7537.8338.00shake128
45.3545.3545.47asconhashbi32v12
49.6049.6049.61asconxofv12
49.6049.6049.61asconhashv12
66.3866.3866.38T:esch256v2
97.1597.1697.17T:esch384v2
99.5299.5899.59T:romulush
694.16694.23694.46T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
21.9122.0522.23sha256
29.1329.1429.15T:xoodyakv1
29.5429.6629.80sha512
33.4733.4733.47asconhashabi32v12
37.6937.7137.73asconxofav12
37.7037.7137.72asconhashav12
47.1847.3947.64shake128
47.8147.8147.93asconhashbi32v12
52.2652.2652.29asconhashv12
52.2652.2952.35asconxofv12
69.0569.0669.07T:esch256v2
102.12102.19102.24T:esch384v2
103.92103.98104.01T:romulush
688.93689.02689.19T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
50.2250.2250.45T:xoodyakv1
59.9760.2260.22asconhashabi32v12
66.9267.3667.45asconxofav12
67.2767.3667.42asconhashav12
79.2279.2279.31asconhashbi32v12
86.3186.3686.53asconhashv12
86.4486.4786.56asconxofv12
97.7398.81101.72sha256
103.23103.23103.23T:esch256v2
113.11113.78114.92sha512
160.48160.55160.69T:romulush
166.14166.66166.89T:esch384v2
180.44182.06184.14shake128
623.58623.86624.22T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
231.50232.50238.50T:xoodyakv1
270.00270.12270.38asconhashabi32v12
297.50299.25301.25asconxofav12
299.38300.12301.50asconhashav12
324.25326.12326.62asconhashbi32v12
352.50353.88354.38asconhashv12
352.88354.12355.75asconxofv12
435.38436.00436.62T:esch256v2
507.25507.62508.88T:romulush
684.62693.75711.62sha256
758.88761.25765.25T:esch384v2
802.50803.12805.50T:photonbeetlehash256rate32v1
902.75911.75930.38sha512
1441.501451.501470.50shake128