A quantitative benchmarking study of SHA-256 on the Raspberry Pi RP2350, a microcontroller which has integrated both ARM Cortex-M33 and RISC-V Hazard3 cores on a single die, enabling a direct same-silicon architectural comparison under identical conditions.
Abstract
SHA-256 is a fundamental hashing algorithm in embedded security, authentication, data integrity verification, and hardware random number generation in resource-constrained systems. This paper presents a quantitative benchmarking study of SHA-256 on the Raspberry Pi RP2350, a microcontroller which has integrated both ARM Cortex-M33 and RISC-V Hazard3 cores on a single die, enabling a direct same-silicon architectural comparison under identical conditions. Throughput, execution time, current draw, and energy per kilobyte were measured across software and hardware-accelerated modes with and without Direct Memory Access on both cores, and against a software baseline on the predecessor RP2040. Hardware acceleration yielded speedups of 14.05\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\times$$\end{document} and 13.58\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\times$$\end{document} over software for the ARM and RISC-V cores respectively, with energy per KB reduced from approximately 25 \documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$${\upmu }$$\end{document}J/KB to under 1.79 \documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$${\upmu }$$\end{document}J/KB in both cases, while current draw remained stable between 17 and 18 mA across all configurations, indicating that efficiency gains are attributable to reduced execution time rather than lower active current. A counter-intuitive observation emerges from the DMA analysis: despite the ARM ecosystem’s significantly greater maturity in embedded bus integration, the ARM Cortex-M33 exhibits a larger DMA-induced throughput penalty (18.1%, factor of 1.221\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\times$$\end{document}) than the newer RISC-V Hazard3 core (13.6%, factor of 1.157\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$\times$$\end{document}) when accessing the shared SHA-256 peripheral on identical silicon. To our knowledge, this is the first same-silicon comparison of ARM and RISC-V cryptographic acceleration with direct energy measurements, and the first published per-configuration energy characterization of the RP2350.
A complete FPGA-validated RISC-V SoC in which a five-stage RV32IM processor works alongside a custom systolic MAC array, and two propositions are formally proved that the output-stationary schedule reduces computation cycles by a naïve, unblocked sequential CPU execution.
Srujan Sateesh Kalagi, K. R. Vinay Kumar, Shashank Dharamshetty et al.· Discover Artificial Intellig...· 0 citations
SCAN-C is a lightweight block cipher featuring a hybrid Feistel-SPN structure designed for Controller Area Network (CAN) security. This work presents the first full-round differential cryptanalysis of SCAN-C, demonstrating that its unique XNOR-based key mixing provides no additional security margin. We also prove that XNOR-based mixing is structurally equivalent to standard XOR mixing, as the corresponding difference distribution tables (DDTs) differ only by a permutation of indices. Utilizing an SMT-based automated search, we identify optimal differential clusters, including a 9-round distinguisher with a probability of 2-51.30\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$2^{-51.30}$$\end{document}. By extending these results, we show that the complete internal key state can be recovered through the recovery of all 12 round keys, requiring around 255\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$2^{55}$$\end{document} chosen plaintexts and 269\documentclass[12pt]{minimal} \usepackage{amsmath} \usepackage{wasysym} \usepackage{amsfonts} \usepackage{amssymb} \usepackage{amsbsy} \usepackage{mathrsfs} \usepackage{upgreek} \setlength{\oddsidemargin}{-69pt} \begin{document}$$2^{69}$$\end{document} encryptions. Our results confirm that the current 12-round specification is insufficient for security and is the first to show that differential cryptanalysis is equivalent under both XOR and XNOR difference definitions.
Vanshita Jha, J. Teh, Aishwarya Thiruvengadam· Cybersecurity· 0 citations
To satisfy the low-overhead and high-throughput requirements of embedded computing platforms executing cryptographic workloads, this study presents a high-performance RISC-V CPU IP core compatible with the standard RV32IM architecture. Instead of introducing dedicated cryptographic instructions, the proposed design enhances the execution efficiency of algorithms such as SM3 and SM4 through microarchitectural optimization of arithmetic units. A hierarchical multiplier architecture consisting of partial-product generation, 4–2 compressor-tree reduction, and a look-ahead adder is developed to improve multiplication throughput, while an enhanced radix-4 SRT divider incorporating leading-zero detection, result caching, and dynamic iteration control is proposed to reduce division latency. All modules are implemented in Verilog and integrated into a five-stage RISC-V pipeline. Functional verification is performed using a complete RVM instruction test suite, followed by FPGA-based performance evaluation. Experimental results demonstrate that the multiplier generates 64-bit results within a single clock cycle in 32-bit scenarios, reducing latency by more than 70% compared with conventional Wallace-tree implementations. The proposed architecture provides an efficient computing platform for secure embedded systems and offers implementation references for real-time signal processing, communication security, and electromagnetic information systems.
In the modern world, 128-bit binary arithmetic is essential for achieving high numerical accuracy but remains expensive to implement in processors. This research presents an optimized, reduced-clock-cycle approach for performing 128-bit floating-point calculations on Field-Programmable Gate Arrays (FPGAs) using the SRMA architecture. The SRMA-focused implementation not only reduces execution time but also decreases energy consumption on Kintex-7 FPGA boards. Yet, today most of the processors are x86-64 CPU's which don't support floating point 128-bit calculations natively. On high performance processors, these generic methods trigger delayed pipelines and branch mispredictions, leading to longer clock cycles and increased energy. To unlock a processor's full potential, bridging the gap between slow software emulation and hardware support is a necessary task. The SRMA algorithm works on mantissa computations where it handles the branch-free arithmetics, where traditionally Generic algorithms use heavy branch-pipelining leading to unnecessary clock-cycles. This approach highlights the split-mantissa, an advanced approach where the mantissa of the scientific computations are split accordingly and then appended for minimal error. There is a bottleneck where software uses generic code that ignores the strengths of modern CPUs. Our ultimate goal is to run at speeds that make it practical for scientific computing at lower cost.
N. P, Thirumalaiswamy V., Harish Kumar S. et al.· International Journal of Com...· 0 citations
In the present day, data confidentiality and integrity are among the major concerns in the embedded and communication systems and hardware-based cryptographic systems are playing a significant role in this regard. Moreover, the flexible features of FPGA implementations of cryptographic algorithms, such as greater performance, higher parallelism, and greater protection for sensitive data, are better than software-based approaches. This survey discusses the latest FPGA-based architectures of the AES-256 and the SHA-256, along with the design methodologies, optimization techniques and integration strategies. An analysis of existing studies is conducted to understand the pros and cons of various architectures, resource usage, throughput and implementation methods. The survey reveals that most current designs focus on optimizing only one aspect of encryption and hashing separately, whereas integrated designs may require extra hardware because of the duplicated control and interface logic. From these observations, it can be deduced that an efficient resource usage, scalability and secure hardware implementation is possible by integrating the AES-256 and SHA-256 components into a modular FPGA architecture.
Vasudeva G., Bharathi Gururaj, Mruthika N. et al.· International journal of com...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.