VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.714.714.72sha512
5.685.685.70shake128
12.1612.1612.18asconxofav12
12.1712.1712.18asconhashav12
14.9714.9915.02T:xoodyakv1
18.2218.2218.23asconxofv12
18.2318.2418.25asconhashv12
21.8321.8321.87asconhashabi32v12
30.1731.0331.12T:esch256v2
32.5332.5332.55asconhashbi32v12
41.3941.3941.41T:romulush
44.0446.7247.06T:esch384v2
200.56201.01201.04T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.884.894.90sha512
5.815.825.83shake128
12.3012.3012.31asconhashav12
12.2912.3012.32asconxofav12
15.0615.0615.12T:xoodyakv1
18.3818.3818.39asconxofv12
18.3818.4118.42asconhashv12
22.1122.1222.14asconhashabi32v12
31.2431.2631.28T:esch256v2
32.8632.8732.87asconhashbi32v12
41.7441.7441.75T:romulush
44.7747.2247.25T:esch384v2
200.20200.42200.50T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.61sha256
5.155.165.17sha512
6.246.256.26shake128
12.5012.5012.52asconhashav12
12.4812.5112.52asconxofav12
15.1515.1915.22T:xoodyakv1
18.6318.6518.66asconxofv12
18.6518.7018.71asconhashv12
22.5722.5822.60asconhashabi32v12
30.8131.5731.61T:esch256v2
33.4133.4233.43asconhashbi32v12
42.3242.3242.36T:romulush
45.5147.8648.03T:esch384v2
199.02199.77201.49T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.731.73sha256
5.575.585.65sha512
6.656.686.69shake128
12.9713.0113.04asconxofav12
13.0313.0513.10asconhashav12
15.5115.5415.57T:xoodyakv1
19.2819.3219.38asconxofv12
19.3019.3419.40asconhashv12
23.7623.8023.85asconhashabi32v12
32.4932.5332.56T:esch256v2
34.8434.8534.91asconhashbi32v12
43.8443.8843.93T:romulush
47.5049.9550.05T:esch384v2
198.21198.94199.72T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.533.593.61sha256
12.2512.3013.28sha512
15.3015.3415.64shake128
19.6119.7020.03asconxofav12
19.7819.8320.00T:xoodyakv1
19.7320.1720.41asconhashav12
27.8927.9828.30asconxofv12
27.9228.0628.42asconhashv12
39.1239.2339.78asconhashabi32v12
42.8943.1444.00T:esch256v2
53.3153.4753.59asconhashbi32v12
62.8163.0563.25T:romulush
72.4875.6776.06T:esch384v2
176.56177.69178.00T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
19.5021.1221.62sha256
67.2567.5068.00T:xoodyakv1
71.0071.7574.25asconxofav12
71.5074.2576.12asconhashav12
84.2584.6288.75sha512
95.2596.1297.00asconxofv12
96.0096.3897.50asconhashv12
121.62122.00122.62shake128
157.00159.12160.75asconhashabi32v12
158.12159.50162.12T:esch256v2
175.00175.50176.38T:romulush
199.75201.50204.62asconhashbi32v12
204.12204.75205.12T:photonbeetlehash256rate32v1
316.25329.50331.38T:esch384v2