VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20250922

[Page version: 20251015 23:19:40]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 7.13 7.14 7.15 sha512 8.74 8.74 8.75 shake128 10.12 10.14 10.21 sha256 16.55 16.57 16.95 asconhashav12 16.55 16.57 16.94 asconxofav12 16.75 16.76 16.92 T:xoodyakv1 25.25 25.27 25.33 asconhashv12 24.67 25.32 25.33 asconxofv12 32.39 32.39 32.41 asconhashabi32v12 43.05 43.06 43.07 T:romulush 45.88 45.93 45.97 T:esch256v2 48.56 48.58 48.61 asconhashbi32v12 66.77 66.80 66.83 T:esch384v2 281.86 281.90 281.95 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 7.87 7.88 7.88 sha512 8.94 8.95 8.96 shake128 10.77 10.79 10.80 sha256 16.72 16.74 16.77 asconhashav12 16.73 16.82 17.08 asconxofav12 16.88 17.00 17.01 T:xoodyakv1 24.93 24.97 25.50 asconxofv12 24.93 25.47 25.50 asconhashv12 32.81 32.81 32.83 asconhashabi32v12 43.41 43.43 43.44 T:romulush 46.18 46.22 46.25 T:esch256v2 48.95 48.97 49.00 asconhashbi32v12 67.45 67.49 67.67 T:esch384v2 281.37 281.44 281.48 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 9.04 9.05 9.07 sha512 9.55 9.55 9.58 shake128 11.82 11.84 11.86 sha256 17.00 17.02 17.07 asconxofav12 16.99 17.03 17.08 asconhashav12 17.02 17.04 17.05 T:xoodyakv1 25.30 25.83 25.87 asconxofv12 25.43 25.85 25.87 asconhashv12 33.52 33.53 33.54 asconhashabi32v12 44.06 44.10 44.13 T:romulush 46.66 46.68 46.76 T:esch256v2 49.64 49.65 49.69 asconhashbi32v12 68.56 68.58 68.61 T:esch384v2 280.50 280.55 280.60 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 10.26 10.26 10.28 shake128 11.52 11.54 11.56 sha512 14.65 14.66 14.67 sha256 17.45 17.47 17.49 T:xoodyakv1 17.74 17.80 18.06 asconxofav12 17.75 17.81 17.93 asconhashav12 26.44 26.52 26.80 asconxofv12 26.77 26.86 26.91 asconhashv12 35.31 35.36 35.38 asconhashabi32v12 45.77 45.85 45.96 T:romulush 47.99 48.05 48.16 T:esch256v2 51.40 51.43 51.51 asconhashbi32v12 71.53 71.57 71.60 T:esch384v2 278.09 278.22 278.32 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 22.92 23.03 23.11 T:xoodyakv1 23.81 23.81 23.91 shake128 27.06 27.38 27.80 asconhashav12 27.34 27.55 27.94 asconxofav12 38.61 38.91 39.14 asconxofv12 39.02 39.14 39.14 asconhashv12 45.45 45.52 45.75 sha512 50.64 50.81 50.94 sha256 59.19 59.23 59.44 asconhashabi32v12 64.52 64.73 64.91 T:esch256v2 66.73 66.95 67.31 T:romulush 73.70 73.73 73.95 asconhashbi32v12 109.55 109.59 109.81 T:esch384v2 248.03 248.55 249.08 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 82.25 82.75 83.88 T:xoodyakv1 103.38 103.88 104.50 asconhashav12 103.75 105.25 107.25 asconxofav12 133.88 134.62 135.00 asconxofv12 134.00 134.62 136.12 asconhashv12 189.25 189.38 189.88 shake128 190.62 192.25 194.62 T:romulush 241.75 243.75 243.88 T:esch256v2 247.38 248.00 249.38 asconhashabi32v12 249.38 249.62 250.62 asconhashbi32v12 290.00 291.62 293.75 T:photonbeetlehash256rate32v1 321.88 323.88 324.25 sha256 363.00 364.12 365.12 sha512 475.50 475.88 476.38 T:esch384v2