VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20250922

[Page version: 20251015 23:19:40]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.232.232.24sha256
10.3110.3610.40sha512
10.5310.5310.54shake128
17.1617.1717.21T:xoodyakv1
19.6219.6319.63asconxofav12
19.6219.6319.63asconhashav12
29.3429.3429.35asconhashv12
29.3429.3429.35asconxofv12
39.5239.5739.67asconhashabi32v12
43.6243.6543.66T:esch256v2
51.1251.3351.44T:romulush
58.3858.8258.99asconhashbi32v12
63.5863.9464.25T:esch384v2
313.18313.55314.60T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.282.282.29sha256
10.7610.7710.77shake128
11.2211.2811.34sha512
17.3017.3117.34T:xoodyakv1
19.8219.8219.83asconxofav12
19.8219.8219.83asconhashav12
29.5929.5929.60asconhashv12
29.5929.5929.60asconxofv12
39.9139.9540.03asconhashabi32v12
43.9143.9243.93T:esch256v2
51.7451.8452.12T:romulush
58.8659.0959.39asconhashbi32v12
64.2864.5864.83T:esch384v2
312.57312.71313.73T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.352.362.37sha256
11.4811.4911.50shake128
12.7012.7812.84sha512
17.2617.3317.47T:xoodyakv1
20.1420.1420.16asconhashav12
20.1420.1520.17asconxofav12
30.0030.0130.02asconhashv12
30.0130.0130.03asconxofv12
40.5640.6440.65asconhashabi32v12
44.3944.4044.42T:esch256v2
52.5352.6052.72T:romulush
59.3659.6860.17asconhashbi32v12
65.3165.7965.92T:esch384v2
311.69312.53312.76T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.572.572.61sha256
12.2712.2712.30shake128
15.5315.6415.71sha512
17.7417.7417.74T:xoodyakv1
21.0021.0221.06asconhashav12
21.0021.0321.07asconxofav12
31.1031.1331.15asconhashv12
31.1131.1331.16asconxofv12
42.1842.2042.29asconhashabi32v12
45.6845.6945.71T:esch256v2
54.5354.6854.88T:romulush
61.5161.7961.81asconhashbi32v12
68.2768.6768.79T:esch384v2
308.92309.07311.55T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.365.785.91sha256
22.1222.2722.34T:xoodyakv1
28.0828.1128.14shake128
31.7231.8932.25asconhashav12
31.7832.0532.38asconxofav12
45.1245.2845.48asconhashv12
44.9545.3145.62asconxofv12
56.9758.2759.25sha512
60.9861.0561.28T:esch256v2
62.3462.5562.73asconhashabi32v12
79.4279.4580.17T:romulush
88.1488.1488.83asconhashbi32v12
104.25104.72104.83T:esch384v2
274.14274.31276.44T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
29.2530.1231.12sha256
75.1275.1276.12T:xoodyakv1
114.38115.38116.88asconhashav12
114.50116.12118.50asconxofav12
153.88157.12159.50asconxofv12
157.00157.62158.75asconhashv12
221.38223.25225.12asconhashabi32v12
224.25224.38224.75shake128
226.12226.12227.00T:romulush
230.62231.00233.00T:esch256v2
299.00299.25300.50asconhashbi32v12
315.75317.38318.88T:photonbeetlehash256rate32v1
450.88452.50454.88T:esch384v2
448.25459.38475.62sha512