VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.224.224.23sha512
5.715.735.74shake128
10.1210.1310.13asconxofav12
10.5010.5010.50asconhashav12
14.5614.5714.59T:xoodyakv1
15.1215.1215.12asconxofv12
15.1215.1215.13asconhashv12
24.5024.5024.51asconhashabi32v12
35.5135.5535.58T:esch256v2
36.8736.8836.88asconhashbi32v12
38.8338.8538.87T:romulush
44.2644.2744.29T:esch384v2
218.23219.17219.71T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.734.744.74sha512
5.865.865.87shake128
10.2310.2310.24asconxofav12
10.6010.6010.61asconhashav12
14.6214.6414.65T:xoodyakv1
15.2615.2615.27asconhashv12
15.2615.2615.27asconxofv12
24.7424.7424.75asconhashabi32v12
35.7835.8135.83T:esch256v2
37.2537.2537.26asconhashbi32v12
39.1339.1639.19T:romulush
44.7144.7244.73T:esch384v2
217.99218.20218.56T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.112.112.11sha256
5.555.555.57sha512
6.276.286.29shake128
10.4010.4110.41asconxofav12
10.7810.7810.78asconhashav12
14.7514.7614.79T:xoodyakv1
15.4915.4915.50asconhashv12
15.4915.4915.51asconxofv12
25.1425.1525.16asconhashabi32v12
36.1536.1836.28T:esch256v2
37.8837.8837.90asconhashbi32v12
39.6539.7139.75T:romulush
45.4545.4745.56T:esch384v2
216.85216.94218.43T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.272.272.27sha256
6.746.776.79shake128
7.347.367.38sha512
10.8510.8510.86asconxofav12
11.2211.2211.22asconhashav12
15.0515.0915.12T:xoodyakv1
16.0816.0816.08asconxofv12
16.0816.0816.08asconhashv12
26.2126.2526.26asconhashabi32v12
37.1437.2437.37T:esch256v2
39.5539.5539.55asconhashbi32v12
41.0541.1241.18T:romulush
47.4147.4647.56T:esch384v2
215.23215.42215.59T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.274.284.50sha256
15.8915.9216.08shake128
16.6916.6916.69asconxofav12
16.9716.9716.97asconhashav12
19.1619.3619.44T:xoodyakv1
23.7223.7223.72asconxofv12
23.7323.7323.73asconhashv12
31.1631.3331.62sha512
39.7039.7339.81asconhashabi32v12
50.6750.9451.30T:esch256v2
59.2359.4859.67T:romulush
60.9560.9560.95asconhashbi32v12
72.6172.8473.09T:esch384v2
190.14190.86191.70T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.3824.5024.62sha256
62.1262.1262.12asconxofav12
62.7562.7562.75asconhashav12
64.8865.5066.38T:xoodyakv1
84.1284.1284.12asconxofv12
84.2584.2584.25asconhashv12
126.00126.62127.00shake128
142.88143.50148.38asconhashabi32v12
165.50167.38167.50T:romulush
190.38190.88191.88T:esch256v2
215.38216.50217.88T:photonbeetlehash256rate32v1
229.38229.50229.50asconhashbi32v12
227.00?257.12?258.88?sha512
315.88316.88318.88T:esch384v2