VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
4.824.864.88shake128
5.015.025.02sha512
13.4513.4613.48asconhashav12
13.4513.4613.48asconxofav12
15.3115.3215.35T:xoodyakv1
19.9120.0420.10asconhashv12
19.9320.0720.13asconxofv12
24.8024.8524.89T:esch256v2
25.7425.7525.77asconhashabi32v12
34.1534.2034.34T:esch384v2
39.4239.4539.48asconhashbi32v12
44.4944.5144.53T:romulush
183.06189.28190.22T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.092.09sha256
4.985.005.02shake128
5.195.205.22sha512
13.5813.5913.61asconhashav12
13.5813.6013.62asconxofav12
15.3815.4015.43T:xoodyakv1
20.0420.1120.24asconhashv12
20.1820.2320.29asconxofv12
25.0125.0925.54T:esch256v2
26.0526.0726.09asconhashabi32v12
34.6034.6634.75T:esch384v2
39.7839.8039.82asconhashbi32v12
44.8844.9344.99T:romulush
183.13188.87189.20T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.152.16sha256
5.295.305.35shake128
5.485.505.51sha512
13.7713.8113.83asconhashav12
13.7813.8113.85asconxofav12
15.5015.5215.56T:xoodyakv1
20.3220.4220.55asconhashv12
20.3520.4320.53asconxofv12
25.1825.2625.40T:esch256v2
26.5426.5826.63asconhashabi32v12
35.1335.2435.37T:esch384v2
40.3540.4140.47asconhashbi32v12
45.5545.5945.63T:romulush
182.79188.43188.76T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.322.332.33sha256
5.715.735.80sha512
5.645.745.83shake128
14.3214.3914.44asconhashav12
14.3414.3914.43asconxofav12
15.8215.8515.90T:xoodyakv1
21.0021.0921.21asconhashv12
20.9921.1521.25asconxofv12
25.8826.0326.22T:esch256v2
27.9027.9628.03asconhashabi32v12
36.7936.9337.12T:esch384v2
41.8541.9342.01asconhashbi32v12
47.2047.3047.40T:romulush
181.43186.83187.16T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.624.694.74sha256
11.0811.2411.55sha512
12.9313.1413.50shake128
20.0720.1620.26T:xoodyakv1
21.3221.5221.76asconxofav12
21.3521.5421.68asconhashav12
29.6329.8830.19asconhashv12
29.6130.0630.25asconxofv12
33.8834.6535.55T:esch256v2
41.1341.3241.62asconhashabi32v12
55.8356.6357.76T:esch384v2
59.7860.1260.53asconhashbi32v12
68.5968.7869.09T:romulush
161.23165.82166.53T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.1524.5524.81sha256
67.8868.4869.05T:xoodyakv1
76.5177.6479.35asconhashav12
76.8078.2079.62asconxofav12
88.5289.2092.34sha512
98.0899.69101.69asconxofv12
99.18100.62102.00asconhashv12
102.15103.24105.98shake128
126.92131.66138.74T:esch256v2
144.10144.94147.83asconhashabi32v12
183.84188.24190.97T:photonbeetlehash256rate32v1
193.21194.62197.01T:romulush
198.86200.45203.50asconhashbi32v12
238.15242.65248.70T:esch384v2