VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20250922

[Page version: 20251001 12:36:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.137.147.15sha512
8.748.748.75shake128
10.1210.1410.21sha256
16.5516.5716.95asconhashav12
16.5516.5716.94asconxofav12
16.7516.7616.92T:xoodyakv1
25.2525.2725.33asconhashv12
24.6725.3225.33asconxofv12
32.3932.3932.41asconhashabi32v12
43.0543.0643.07T:romulush
45.8845.9345.97T:esch256v2
48.5648.5848.61asconhashbi32v12
66.7766.8066.83T:esch384v2
281.86281.90281.95T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.877.887.88sha512
8.948.958.96shake128
10.7710.7910.80sha256
16.7216.7416.77asconhashav12
16.7316.8217.08asconxofav12
16.8817.0017.01T:xoodyakv1
24.9324.9725.50asconxofv12
24.9325.4725.50asconhashv12
32.8132.8132.83asconhashabi32v12
43.4143.4343.44T:romulush
46.1846.2246.25T:esch256v2
48.9548.9749.00asconhashbi32v12
67.4567.4967.67T:esch384v2
281.37281.44281.48T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.049.059.07sha512
9.559.559.58shake128
11.8211.8411.86sha256
17.0017.0217.07asconxofav12
16.9917.0317.08asconhashav12
17.0217.0417.05T:xoodyakv1
25.3025.8325.87asconxofv12
25.4325.8525.87asconhashv12
33.5233.5333.54asconhashabi32v12
44.0644.1044.13T:romulush
46.6646.6846.76T:esch256v2
49.6449.6549.69asconhashbi32v12
68.5668.5868.61T:esch384v2
280.50280.55280.60T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.2610.2610.28shake128
11.5211.5411.56sha512
14.6514.6614.67sha256
17.4517.4717.49T:xoodyakv1
17.7417.8018.06asconxofav12
17.7517.8117.93asconhashav12
26.4426.5226.80asconxofv12
26.7726.8626.91asconhashv12
35.3135.3635.38asconhashabi32v12
45.7745.8545.96T:romulush
47.9948.0548.16T:esch256v2
51.4051.4351.51asconhashbi32v12
71.5371.5771.60T:esch384v2
278.09278.22278.32T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.9223.0323.11T:xoodyakv1
23.8123.8123.91shake128
27.0627.3827.80asconhashav12
27.3427.5527.94asconxofav12
38.6138.9139.14asconxofv12
39.0239.1439.14asconhashv12
45.4545.5245.75sha512
50.6450.8150.94sha256
59.1959.2359.44asconhashabi32v12
64.5264.7364.91T:esch256v2
66.7366.9567.31T:romulush
73.7073.7373.95asconhashbi32v12
109.55109.59109.81T:esch384v2
248.03248.55249.08T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
82.2582.7583.88T:xoodyakv1
103.38103.88104.50asconhashav12
103.75105.25107.25asconxofav12
133.88134.62135.00asconxofv12
134.00134.62136.12asconhashv12
189.25189.38189.88shake128
190.62192.25194.62T:romulush
241.75243.75243.88T:esch256v2
247.38248.00249.38asconhashabi32v12
249.38249.62250.62asconhashbi32v12
290.00291.62293.75T:photonbeetlehash256rate32v1
321.88323.88324.25sha256
363.00364.12365.12sha512
475.50475.88476.38T:esch384v2