Re: [openpgp] SHA-x performance (was: SHA3 algorithm ids)

"Dang, Quynh" <quynh.dang@nist.gov> Tue, 11 August 2015 17:54 UTC

Return-Path: <quynh.dang@nist.gov>
X-Original-To: openpgp@ietfa.amsl.com
Delivered-To: openpgp@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1527C1AC3DB for <openpgp@ietfa.amsl.com>; Tue, 11 Aug 2015 10:54:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TM7fIMOIHWZg for <openpgp@ietfa.amsl.com>; Tue, 11 Aug 2015 10:54:00 -0700 (PDT)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0729.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:729]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7C981ACD5D for <openpgp@ietf.org>; Tue, 11 Aug 2015 10:53:59 -0700 (PDT)
Received: from BN1PR09MB124.namprd09.prod.outlook.com (10.255.200.27) by BN1PR09MB122.namprd09.prod.outlook.com (10.255.200.156) with Microsoft SMTP Server (TLS) id 15.1.225.19; Tue, 11 Aug 2015 17:53:42 +0000
Received: from BN1PR09MB124.namprd09.prod.outlook.com ([10.255.200.27]) by BN1PR09MB124.namprd09.prod.outlook.com ([10.255.200.27]) with mapi id 15.01.0225.018; Tue, 11 Aug 2015 17:53:42 +0000
From: "Dang, Quynh" <quynh.dang@nist.gov>
To: "openpgp@ietf.org" <openpgp@ietf.org>
Thread-Topic: [openpgp] SHA-x performance (was: SHA3 algorithm ids)
Thread-Index: AQHQ1Ftzvt9tXi6HgkmsLI1jzKk6yZ4HE0oq
Date: Tue, 11 Aug 2015 17:53:42 +0000
Message-ID: <BN1PR09MB124427AC56A0116CA3B05D2F37F0@BN1PR09MB124.namprd09.prod.outlook.com>
References: <87y4hmi19i.fsf@vigenere.g10code.de> <7540C7A9-2830-4A63-8310-B684796DA279@nohats.ca> <55C681FC.9010100@iang.org> <sjma8tztbgo.fsf@securerf.ihtfp.org> <CAMm+Lwj7SxXTn+KD-eQSeZHwJB36tCgD1t0bodVsp3ovOaZ8mw@mail.gmail.com> <9A043F3CF02CD34C8E74AC1594475C73F4AD7C72@uxcn10-5.UoA.auckland.ac.nz> <87io8lpzu4.fsf@alice.fifthhorseman.net> <9A043F3CF02CD34C8E74AC1594475C73F4AD7F8E@uxcn10-5.UoA.auckland.ac.nz>, <87mvxxenss.fsf_-_@vigenere.g10code.de>
In-Reply-To: <87mvxxenss.fsf_-_@vigenere.g10code.de>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=quynh.dang@nist.gov;
x-originating-ip: [129.6.230.6]
x-microsoft-exchange-diagnostics: 1; BN1PR09MB122; 5:vzPVEef1Dx+sOX2ioqNYbyUJSJziQFMOkfTcu2D+wnT+HEUYlUUS8yHuhUNI8hWwiIlfiwfyQeK24sLjhET0NEz3xltKlrN/B5w3uWZ28XbS3KAzoAd7AosxpJQ7cegKTd0OY6i6Iibib3JMHsET4Q==; 24:Am/FNH04hqTWnQYtESUwgu3OSo0SjVafA8JiEAyA0hWKVMSAVB2LPmjWqzVVfAvQj8qIBb4DOGozhiIOM1qfCGzPXJrCd8FE4/OGmL3MJKY=; 20:42lAFrrFT9ZoXaIMh/uBFM2GET34MiKaH7uYL4xOJnAM7QigKlWw2kQNWxq1kewl8aYhGLcl4sHccP+/hnTJ6A==
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR09MB122;
x-microsoft-antispam-prvs: <BN1PR09MB12269CA2746F17090294B3AF37F0@BN1PR09MB122.namprd09.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(5005006)(3002001); SRVR:BN1PR09MB122; BCL:0; PCL:0; RULEID:; SRVR:BN1PR09MB122;
x-forefront-prvs: 066517B35B
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(377454003)(199003)(189002)(92566002)(2501003)(5002640100001)(110136002)(122556002)(40100003)(76176999)(33656002)(106356001)(62966003)(93886004)(46102003)(19580395003)(86362001)(5001860100001)(105586002)(74316001)(19580405001)(106116001)(5001830100001)(189998001)(77156002)(99286002)(66066001)(81156007)(87936001)(107886002)(2656002)(5001960100002)(76576001)(102836002)(68736005)(4001540100001)(77096005)(2351001)(64706001)(450100001)(101416001)(54356999)(2900100001)(10400500002)(5003600100002)(2950100001)(97736004)(50986999)(15975445007); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR09MB122; H:BN1PR09MB124.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts)
spamdiagnosticoutput: 1:23
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Aug 2015 17:53:42.7615 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR09MB122
Archived-At: <http://mailarchive.ietf.org/arch/msg/openpgp/3yQKY81c8i6N525h__XDTmrMCBw>
Subject: Re: [openpgp] SHA-x performance (was: SHA3 algorithm ids)
X-BeenThere: openpgp@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "Ongoing discussion of OpenPGP issues." <openpgp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/openpgp>, <mailto:openpgp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/openpgp/>
List-Post: <mailto:openpgp@ietf.org>
List-Help: <mailto:openpgp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/openpgp>, <mailto:openpgp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 11 Aug 2015 17:54:02 -0000

See the Keccak's website: http://keccak.noekeon.org/, under the "Implementation" section.


It stated that "Keccak has overall good software performance. It is faster than SHA-2 on modern PCs and shines when used in a mode exploiting parallelism. On AMD™ Bulldozer™, 128-bit and 256-bit security hashing tops at 4.8 and 5.9 cycles/byte, respectively. On Intel™ Sandy Bridge™, the same functions reach 5.4 and 6.9 cycles/byte."

Quynh. 
________________________________________
From: openpgp <openpgp-bounces@ietf.org>; on behalf of Werner Koch <wk@gnupg.org>;
Sent: Tuesday, August 11, 2015 1:29 PM
To: Peter Gutmann
Cc: Phillip Hallam-Baker; Derek Atkins; ianG; Daniel Kahn Gillmor; IETF OpenPGP
Subject: [openpgp] SHA-x performance (was:  SHA3 algorithm ids)

On Tue, 11 Aug 2015 18:39, pgut001@cs.auckland.ac.nz said:

> A huge number of devices, and in particular ones with less CPU power, are
> still 32-bit, and will remain so for a long time, probably more or less
> indefinitely.

Does anyone know a summary of SHA-256 performance on standard CPUs
with dedicated SHA hardware?  The Padlock engine has this but I don't
know whether other CPUs also provide hardware support.  I assume that on
x86 the AVX instructions are as good as dedicated support:

FWIW, Libgcrypt on an i5-2410M (64 bit) gives this:

                |  nanosecs/byte   mebibytes/sec   cycles/byte
 SHA1           |      1.92 ns/B     496.5 MiB/s      4.42 c/B
 SHA256         |      4.42 ns/B     215.6 MiB/s     10.17 c/B
 SHA512         |      2.97 ns/B     321.1 MiB/s      6.83 c/B

with AVX disabled:

 SHA1           |      2.27 ns/B     419.7 MiB/s      5.23 c/B
 SHA256         |      5.26 ns/B     181.1 MiB/s     12.11 c/B
 SHA512         |      3.61 ns/B     264.0 MiB/s      8.31 c/B

with AVX and SSSE3 disabled:

 SHA1           |      3.27 ns/B     292.0 MiB/s      7.51 c/B
 SHA256         |      7.50 ns/B     127.1 MiB/s     17.26 c/B
 SHA512         |      4.68 ns/B     203.6 MiB/s     10.78 c/B

We have no optimized SHA3 yet; for reference here are the numbers from
the unoptimized version:

 SHA3-256       |      5.70 ns/B     167.3 MiB/s     13.11 c/B
 SHA3-512       |     10.66 ns/B     89.46 MiB/s     24.52 c/B


Salam-Shalom,

   Werner

--
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.

_______________________________________________
openpgp mailing list
openpgp@ietf.org
https://www.ietf.org/mailman/listinfo/openpgp