VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20250922

[Page version: 20251015 23:19:40]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
15.5215.5315.53shake128
16.9116.9316.94sha512
24.6624.6624.68sha256
26.2526.2526.25asconhashav12
26.2526.2526.26asconxofav12
39.1239.1339.18asconhashv12
39.1239.1339.19asconxofv12
42.2542.3142.37T:xoodyakv1
51.5051.5151.57asconhashabi32v12
76.2676.2676.33asconhashbi32v12
82.7882.8482.94T:esch256v2
121.45121.48121.62T:esch384v2
136.76136.77136.79T:romulush
522.37522.51522.89T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
15.8815.8915.90shake128
17.5017.5017.50sha512
25.1325.1325.14sha256
26.5126.5126.51asconhashav12
26.5126.5126.51asconxofav12
39.4639.4639.46asconxofv12
39.4739.4739.47asconhashv12
42.4842.4842.48T:xoodyakv1
52.1252.1252.12asconhashabi32v12
77.0177.0177.02asconhashbi32v12
83.1583.1583.27T:esch256v2
122.58122.61122.72T:esch384v2
137.86137.93138.34T:romulush
521.23521.50521.53T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
17.0017.0317.03shake128
18.4818.4818.49sha512
25.9225.9325.94sha256
26.9526.9526.95asconhashav12
26.9526.9526.95asconxofav12
40.0240.0240.02asconxofv12
40.0340.0340.03asconhashv12
42.8642.8642.87T:xoodyakv1
53.1553.1553.16asconhashabi32v12
78.2878.2878.29asconhashbi32v12
84.0284.0384.15T:esch256v2
124.73124.73124.74T:esch384v2
139.73139.73139.74T:romulush
519.52519.61520.31T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
18.3118.4018.40shake128
19.3019.3019.31sha512
28.0228.0228.08sha256
28.0828.0828.11asconhashav12
28.0828.0828.11asconxofav12
41.5141.5141.52asconxofv12
41.5541.5541.55asconhashv12
43.8843.8943.91T:xoodyakv1
55.9155.9155.92asconhashabi32v12
81.6781.6781.69asconhashbi32v12
86.3586.3586.48T:esch256v2
129.96129.98130.12T:esch384v2
144.79144.80144.81T:romulush
515.10515.13515.19T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
37.7037.7037.70sha512
42.4742.5842.77asconxofav12
42.5542.7242.78asconhashav12
43.1943.1943.47shake128
56.4556.6256.80T:xoodyakv1
57.1957.1957.47sha256
60.0860.1960.38asconxofv12
60.3960.4760.64asconhashv12
90.8690.8691.19asconhashabi32v12
116.12116.28118.03T:esch256v2
124.67124.67125.00asconhashbi32v12
198.66198.89201.41T:esch384v2
209.31209.33209.45T:romulush
458.77458.84458.89T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
158.25158.38159.25asconxofav12
158.25158.38160.25asconhashav12
194.88194.88197.62T:xoodyakv1
209.00209.12211.00asconxofv12
209.12209.25210.12asconhashv12
247.00247.00247.62sha256
302.50302.62303.62sha512
343.50343.50344.25shake128
366.38366.38368.62asconhashabi32v12
436.25436.25437.62T:esch256v2
463.62463.62465.88asconhashbi32v12
534.00534.25536.88T:photonbeetlehash256rate32v1
577.75579.75583.75T:romulush
864.00864.00865.25T:esch384v2