VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 5.01 5.44 5.49 sha512 6.76 7.28 7.51 shake128 7.78? 7.98? 11.50? sha256 13.89 13.91 14.68 asconxofav12 13.90 13.91 13.92 asconhashav12 16.56 16.56 16.57 T:xoodyakv1 20.84 20.87 21.88 asconxofv12 20.85 21.87 22.45 asconhashv12 28.42 29.56 31.08 asconhashabi32v12 36.34 36.36 36.39 T:esch256v2 42.78 42.80 42.85 T:romulush 44.65 46.24 47.44 asconhashbi32v12 46.78 46.79 46.82 T:esch384v2 249.93 251.63 264.57 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 7.25 7.25 7.26 shake128 6.31? 7.78? 8.01? sha512 8.37? 8.38? 9.50? sha256 14.04? 14.06? 19.90? asconxofav12 14.05 14.07 14.08 asconhashav12 16.65 16.66 16.66 T:xoodyakv1 21.03 21.05 22.49 asconxofv12 21.03 21.06 22.58 asconhashv12 29.11? 31.35? 32.84? asconhashabi32v12 36.60 36.61 36.62 T:esch256v2 43.09 43.14 43.16 T:romulush 47.24 47.25 47.28 T:esch384v2 44.23? 48.21? 66.43? asconhashbi32v12 250.32 250.67 261.90 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 5.82 5.87 5.99 sha512 7.78 7.80 7.81 shake128 9.41 9.44 9.47 sha256 14.27 14.30 14.35 asconxofav12 14.28 14.30 14.34 asconhashav12 16.78 16.79 16.80 T:xoodyakv1 21.31? 21.36? 30.17? asconxofv12 21.34 21.36 21.38 asconhashv12 29.00? 29.03? 32.74? asconhashabi32v12 36.98 37.02 37.05 T:esch256v2 43.69 43.72 43.78 T:romulush 48.00 48.05 48.09 T:esch384v2 44.85? 48.80? 54.56? asconhashbi32v12 249.65 249.88 260.89 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 6.37? 6.51? 8.95? sha512 8.44 8.47 8.49 shake128 12.05 12.13 12.24 sha256 14.82 14.88 14.91 asconxofav12 14.86? 14.92? 16.87? asconhashav12 17.15 17.18 17.20 T:xoodyakv1 22.09 22.12 22.17 asconxofv12 22.09 22.14 22.22 asconhashv12 30.57? 30.69? 35.81? asconhashabi32v12 37.99 38.04 38.14 T:esch256v2 44.06? 44.97? 50.51? asconhashbi32v12 45.28 45.33 45.38 T:romulush 50.06 50.09 50.13 T:esch384v2 247.95 248.36 258.86 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 13.94? 18.78? 19.20? sha512 20.31? 20.38? 28.61? shake128 22.12 22.19 22.25 T:xoodyakv1 22.06 22.31 22.50 asconxofav12 22.25? 22.56? 31.08? asconhashav12 31.75 31.94 32.19 asconxofv12 31.75 32.00 32.31 asconhashv12 45.50 46.06 47.06 sha256 50.75 51.00 51.44 T:esch256v2 51.00? 51.44? 72.97? asconhashabi32v12 63.44 63.88 64.69 asconhashbi32v12 65.06 65.31 65.56 T:romulush 76.25 76.31 76.56 T:esch384v2 220.44 221.81 229.94 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 76.50 77.00 77.50 T:xoodyakv1 80.50 81.00 82.50 asconxofav12 80.50? 81.50? 113.50? asconhashav12 108.50 109.50 112.00 asconhashv12 108.50? 110.50? 153.00? asconxofv12 100.50? 139.00? 142.38? sha512 159.00 160.00 161.50 shake128 182.00 182.50 184.00 T:romulush 192.00? 192.50? 268.62? T:esch256v2 212.00? 214.00? 301.12? asconhashabi32v12 213.50 215.00 217.50 asconhashbi32v12 254.00? 257.00? 374.00? T:photonbeetlehash256rate32v1 294.00 296.00 306.00 sha256 330.00 331.00 331.00 T:esch384v2