VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.224.234.23sha512
5.575.585.59shake128
10.1210.1210.13asconxofav12
10.5010.5010.50asconhashav12
15.1215.1215.13asconhashv12
15.1215.1215.13asconxofv12
16.2616.2716.28T:xoodyakv1
23.8723.8723.88asconhashabi32v12
35.8535.9736.10T:esch256v2
36.6236.6236.62asconhashbi32v12
40.7840.8040.82T:romulush
48.5248.5848.64T:esch384v2
203.53203.84204.05T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
4.724.734.74sha512
5.725.725.75shake128
10.2310.2310.24asconxofav12
10.6010.6010.61asconhashav12
15.2615.2615.26asconxofv12
15.2615.2615.27asconhashv12
16.3416.3616.38T:xoodyakv1
24.2224.2324.24asconhashabi32v12
35.6936.0436.21T:esch256v2
37.0037.0037.00asconhashbi32v12
41.1241.1541.17T:romulush
49.0149.0449.06T:esch384v2
203.28203.34203.60T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.142.142.14sha256
5.535.545.56sha512
6.106.116.18shake128
10.4110.4110.42asconxofav12
10.7810.7810.79asconhashav12
15.4915.4915.50asconxofv12
15.4915.4915.50asconhashv12
16.4716.4916.52T:xoodyakv1
24.7924.8124.85asconhashabi32v12
36.1936.2736.64T:esch256v2
37.6237.6237.63asconhashbi32v12
41.6741.6941.73T:romulush
49.7549.7749.79T:esch384v2
202.83203.24203.43T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.342.342.34sha256
6.546.556.70shake128
7.337.367.44sha512
10.8610.8610.88asconxofav12
11.2211.2211.23asconhashav12
16.0816.0816.09asconxofv12
16.0816.0816.10asconhashv12
16.7916.8416.90T:xoodyakv1
26.3026.3426.46asconhashabi32v12
37.1237.3237.50T:esch256v2
39.2639.2639.26asconhashbi32v12
43.1743.2143.27T:romulush
51.8351.8851.92T:esch384v2
201.08201.18201.37T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.814.834.87sha256
15.2815.3716.58shake128
16.7716.7716.77asconxofav12
17.0017.0017.06asconhashav12
21.2521.4921.77T:xoodyakv1
23.7523.7523.75asconhashv12
23.7523.7523.75asconxofv12
31.8632.0232.45sha512
45.7146.0147.27asconhashabi32v12
50.9151.5152.00T:esch256v2
60.3660.3660.36asconhashbi32v12
62.1462.3862.55T:romulush
78.3678.5278.65T:esch384v2
178.40178.81179.29T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.1224.1824.25sha256
63.0063.0063.20asconxofav12
63.1263.1263.76asconhashav12
72.0073.2176.27T:xoodyakv1
83.2583.2583.25asconxofv12
84.1284.1284.12asconhashv12
120.75121.23131.04shake128
173.61174.57175.75T:romulush
189.26192.17196.02T:esch256v2
198.62200.91211.00asconhashabi32v12
205.60206.58207.97T:photonbeetlehash256rate32v1
226.62226.62228.05asconhashbi32v12
253.75255.22257.67sha512
340.40341.43342.76T:esch384v2