VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Golden Cove (90675-00); 2022 Intel Core i3-12100; 4 x 3300MHz; alder, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
4.724.874.91shake128
5.015.025.02sha512
13.1913.2913.40asconhashav12
13.3113.3313.34T:xoodyakv1
13.2813.3913.46asconxofav12
19.9019.9920.14asconxofv12
19.9020.0220.15asconhashv12
25.7625.7925.81asconhashabi32v12
26.6126.6726.72T:esch256v2
37.6737.6937.71T:esch384v2
39.4439.4639.49asconhashbi32v12
41.3141.3441.38T:romulush
175.58177.21189.71T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.082.092.09sha256
4.874.924.99shake128
5.195.205.21sha512
13.3813.4013.42T:xoodyakv1
13.3513.4713.51asconhashav12
13.3513.4813.55asconxofav12
20.0820.1420.28asconxofv12
20.1020.1820.27asconhashv12
26.0526.1026.12asconhashabi32v12
26.8026.8526.87T:esch256v2
38.0738.0938.12T:esch384v2
39.7939.8339.87asconhashbi32v12
41.6641.6941.72T:romulush
176.67177.33177.61T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.152.15sha256
5.265.345.39shake128
5.485.495.51sha512
13.4813.5113.53T:xoodyakv1
13.5813.6513.70asconxofav12
13.5613.6613.72asconhashav12
20.3320.3720.50asconxofv12
20.3120.4020.53asconhashv12
26.4726.5226.60asconhashabi32v12
27.0927.1627.24T:esch256v2
38.6938.7338.76T:esch384v2
40.4040.4340.48asconhashbi32v12
42.2742.3142.33T:romulush
174.21175.50175.93T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.322.322.33sha256
5.685.705.72sha512
5.635.715.76shake128
13.7613.8013.86T:xoodyakv1
14.0714.1414.22asconhashav12
14.1014.1614.20asconxofav12
20.9921.1021.21asconxofv12
21.0621.1021.22asconhashv12
27.8727.9528.01T:esch256v2
27.9628.0128.06asconhashabi32v12
40.3940.4340.51T:esch384v2
41.8441.9342.04asconhashbi32v12
43.7343.8143.92T:romulush
174.42174.77176.15T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.524.564.62sha256
10.6610.7310.88sha512
13.3313.5213.80shake128
17.5817.7017.86T:xoodyakv1
20.6720.7821.05asconxofav12
20.6120.8121.03asconhashav12
29.8629.9830.22asconxofv12
29.8430.0830.38asconhashv12
36.8437.2537.84T:esch256v2
41.2841.6241.89asconhashabi32v12
60.2060.4760.75asconhashbi32v12
61.5261.9565.55T:esch384v2
62.9563.2263.56T:romulush
153.53154.14155.25T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
26.8827.3827.88sha256
60.3861.0062.25T:xoodyakv1
72.5073.1274.12asconxofav12
72.1273.5074.75asconhashav12
90.0090.6291.75sha512
99.00100.00102.25asconhashv12
98.88100.25102.38asconxofv12
105.25106.25109.00shake128
139.75?143.88?223.88?T:esch256v2
145.88147.50150.25asconhashabi32v12
175.50177.25178.88T:romulush
177.75180.38184.50T:photonbeetlehash256rate32v1
199.75200.88203.25asconhashbi32v12
266.25268.38271.75T:esch384v2