VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
17.2317.2817.33sha512
18.8518.8519.61shake128
20.2520.2520.27T:xoodyakv1
20.5320.5820.71sha256
32.6232.6232.63asconxofav12
32.6232.6232.63asconhashav12
48.7548.7548.76asconhashv12
48.7548.7548.76asconxofv12
67.7567.7667.92asconhashabi32v12
99.8999.95100.62asconhashbi32v12
111.51111.56111.60T:esch256v2
126.83126.87126.93T:esch384v2
153.81153.89153.94T:romulush
619.33619.95620.13T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
18.9418.9919.07sha512
19.2619.2719.29shake128
20.4120.4120.42T:xoodyakv1
21.8421.9021.98sha256
32.9532.9532.95asconxofav12
32.9532.9532.95asconhashav12
49.1649.1649.16asconhashv12
49.1649.1649.16asconxofv12
68.3768.3768.37asconhashabi32v12
100.68100.69100.70asconhashbi32v12
112.20112.20112.20T:esch256v2
128.06128.06128.07T:esch384v2
155.07155.07155.08T:romulush
618.62618.78619.08T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.6020.6121.06shake128
20.6620.6620.66T:xoodyakv1
21.8121.9822.26sha512
24.1024.2624.33sha256
33.4833.4833.48asconxofav12
33.4833.4833.49asconhashav12
49.8349.8349.83asconhashv12
49.8349.8349.83asconxofv12
69.4069.4069.40asconhashabi32v12
102.03102.03102.03asconhashbi32v12
113.36113.36113.37T:esch256v2
130.14130.14130.15T:esch384v2
157.17157.17157.17T:romulush
616.59617.32617.53T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
21.3521.3521.35T:xoodyakv1
22.1822.1822.19shake128
27.3427.8528.33sha512
30.5130.7331.04sha256
34.9234.9234.92asconxofav12
34.9234.9235.05asconhashav12
51.6351.6351.63asconhashv12
51.6451.6451.64asconxofv12
72.1472.1472.15asconhashabi32v12
105.61105.62105.63asconhashbi32v12
116.46116.46116.47T:esch256v2
135.69135.69135.69T:esch384v2
162.77162.77162.77T:romulush
611.39611.68612.05T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
29.9729.9829.98T:xoodyakv1
51.4452.2352.25shake128
52.9852.9852.98asconxofav12
53.0053.0053.25asconhashav12
74.5274.5274.52asconhashv12
74.5374.5374.53asconxofv12
107.03107.05107.06asconhashabi32v12
105.28107.73111.36sha512
106.69109.02110.98sha256
151.20151.22151.42asconhashbi32v12
156.11156.11156.11T:esch256v2
206.73206.73206.73T:esch384v2
234.45234.53234.83T:romulush
543.67544.39545.23T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
115.62115.62115.88T:xoodyakv1
195.38195.38196.50asconxofav12
195.50195.62196.62asconhashav12
255.00255.00255.88asconhashv12
255.12255.12255.12asconxofv12
382.00382.00382.38asconhashabi32v12
408.75408.88410.00shake128
510.50510.88511.75asconhashbi32v12
582.62582.62582.75T:esch256v2
601.62602.50609.88T:photonbeetlehash256rate32v1
650.25650.25650.25T:romulush
708.25718.88750.00sha256
839.62848.62911.25sha512
896.75896.75897.12T:esch384v2