I'm looking for high-speed SHA-256 implementations, and specifically, ones with low latency; that is, the time between when you submit the message block, and when the output (or internal state) is produced.
I've googled it, and the fastest I've found appears to take circa 70nsec; does anyone know of something faster?
I'm not interested in parallel implementations (which can obviously do far more than 1 hash every 70nsec); I am specifically looking for a single high-speed hash.
An ASIC implementation (or even a proposal that gives a plausible outline of how fast it would be) would be quite acceptable.
We can assume that the preimage fits within a single SHA-256 block (or that we're just doing the compression function itself).
An alternative way of answering this would be 'how fast can we compute SHA-256 on a single large message'; can we do something faster than about 1GByte/second?
I specifically asked about SHA-256, however if someone has something similar about, SHA-3 or AES, I'd be interested in hearing that as well.