VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,big, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
4.904.925.00shake128
5.025.025.03sha512
13.1813.1913.20asconxofav12
13.1913.2013.21asconhashav12
15.3115.3315.66T:xoodyakv1
19.7419.7519.77asconhashv12
19.7319.7519.77asconxofv12
24.8424.8724.92T:esch256v2
25.7425.7725.80asconhashabi32v12
34.5834.7134.82T:esch384v2
38.5338.5738.74asconhashbi32v12
43.1443.1643.18T:romulush
158.55158.71158.91T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.092.09sha256
5.005.025.05shake128
5.195.205.21sha512
13.3013.3313.35asconxofav12
13.3113.3413.35asconhashav12
15.3815.4015.67T:xoodyakv1
19.9019.9219.95asconhashv12
19.9019.9319.96asconxofv12
24.9224.9525.03T:esch256v2
26.0026.0426.07asconhashabi32v12
34.8034.9535.00T:esch384v2
38.9138.9639.00asconhashbi32v12
43.5143.5443.57T:romulush
157.30158.21158.58T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.152.15sha256
5.365.395.52shake128
5.485.495.51sha512
13.4813.5013.53asconxofav12
13.4913.5313.57asconhashav12
15.5315.5415.59T:xoodyakv1
20.1120.1820.22asconhashv12
20.1420.1820.20asconxofv12
25.2025.2625.34T:esch256v2
26.5026.5626.60asconhashabi32v12
35.4935.5435.65T:esch384v2
39.4939.5439.60asconhashbi32v12
44.1444.1944.22T:romulush
156.76156.97157.58T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.322.322.33sha256
5.695.715.72sha512
5.665.825.96shake128
13.9714.0314.08asconhashav12
14.0014.0514.10asconxofav12
15.8215.8515.90T:xoodyakv1
20.8420.9020.98asconhashv12
20.8220.9120.96asconxofv12
25.9626.0926.19T:esch256v2
27.9027.9427.98asconhashabi32v12
37.0537.2337.37T:esch384v2
41.3541.4341.50asconhashbi32v12
45.7445.8245.88T:romulush
155.25155.33155.40T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.564.694.75sha256
10.7010.7810.91sha512
13.1913.3313.64shake128
20.1720.2820.39T:xoodyakv1
20.5620.7320.91asconxofav12
20.5220.8321.05asconhashav12
29.5629.8130.28asconhashv12
29.6229.8630.19asconxofv12
34.2834.9435.52T:esch256v2
41.4441.7241.95asconhashabi32v12
56.4857.2057.88T:esch384v2
58.9159.2559.62asconhashbi32v12
66.0066.2066.45T:romulush
139.20139.78141.52T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.3825.0025.38sha256
68.7569.2569.88T:xoodyakv1
72.5074.1275.12asconxofav12
72.3874.3876.00asconhashav12
90.2591.1295.38sha512
99.12100.38101.38asconxofv12
99.00101.00102.88asconhashv12
104.75106.25109.38shake128
130.50133.12138.88T:esch256v2
146.25148.00150.25asconhashabi32v12
158.62160.62161.88T:photonbeetlehash256rate32v1
184.50186.00187.88T:romulush
197.62200.00202.12asconhashbi32v12
242.75246.50251.25T:esch384v2