VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20241011

[Page version: 20241021 10:28:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.027.117.75sha512
11.5311.5611.60sha256
11.6311.6411.64shake128
18.4718.4718.48asconxofav12
18.4718.4818.49asconhashav12
22.8122.8122.81T:xoodyakv1
27.4727.5527.56asconhashv12
27.4727.5727.58asconxofv12
37.4937.5037.50asconhashabi32v12
56.1156.1256.13asconhashbi32v12
57.8157.8157.82T:esch256v2
65.8565.9466.86T:esch384v2
78.0478.0678.11T:romulush
403.14403.98404.90T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.048.078.71sha512
11.8511.8511.86shake128
12.4112.4512.50sha256
18.6118.6118.61asconhashav12
18.6118.6118.62asconxofav12
22.9522.9522.95T:xoodyakv1
27.6927.6927.69asconxofv12
27.6927.6927.69asconhashv12
37.9437.9437.94asconhashabi32v12
56.6656.6656.66asconhashbi32v12
58.1958.1958.19T:esch256v2
66.6166.6467.42T:esch384v2
78.7478.7778.92T:romulush
402.09402.11402.71T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.699.7910.55sha512
12.6712.6812.70shake128
13.9314.0814.17sha256
18.9318.9318.94asconhashav12
18.9318.9418.94asconxofav12
23.1823.1823.18T:xoodyakv1
28.1028.1228.12asconxofv12
28.1228.1228.12asconhashv12
38.8038.8038.82asconhashabi32v12
57.6557.6557.65asconhashbi32v12
58.8558.8558.86T:esch256v2
67.7667.7868.52T:esch384v2
79.9479.9480.04T:romulush
400.55400.76400.83T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
13.2413.4014.40sha512
13.6213.6313.66shake128
18.1218.1818.25sha256
19.8019.8019.81asconxofav12
19.8019.8119.81asconhashav12
23.8023.8023.81T:xoodyakv1
29.2129.2529.25asconxofv12
29.2029.2529.25asconhashv12
41.1041.1041.11asconhashabi32v12
60.3060.3060.30asconhashbi32v12
60.6260.6360.70T:esch256v2
70.7570.7571.47T:esch384v2
83.0483.1483.19T:romulush
397.40397.48397.80T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
30.4130.4730.64asconxofav12
30.4430.9431.06asconhashav12
31.2731.3332.03T:xoodyakv1
32.0032.0232.31shake128
42.8643.2843.44asconhashv12
43.2743.2843.42asconxofv12
62.3162.8466.72sha512
70.4770.5870.62asconhashabi32v12
70.1771.9572.31sha256
83.2383.4483.48T:esch256v2
93.4793.4893.97asconhashbi32v12
108.70108.72109.72T:esch384v2
123.16123.22123.25T:romulush
355.08355.73356.44T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
112.00112.50116.88T:xoodyakv1
118.12118.12118.25asconxofav12
118.38118.38118.50asconhashav12
150.50151.62154.62asconhashv12
151.88154.25154.38asconxofv12
255.00256.62257.50shake128
297.50297.62297.62asconhashabi32v12
316.00316.25317.00T:esch256v2
351.25351.75355.25T:romulush
358.12358.12358.25asconhashbi32v12
417.75418.38420.00T:photonbeetlehash256rate32v1
466.88467.62468.00T:esch384v2
460.75469.88472.62sha256
496.75498.12546.75sha512