VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.255.27sha512
7.087.097.10shake128
7.687.707.71sha256
14.6214.6714.69asconhashav12
14.6714.6814.69asconxofav12
15.0215.0315.04T:xoodyakv1
21.9521.9721.98asconxofv12
21.9621.9821.98asconhashv12
26.9927.0727.52asconhashabi32v12
34.5834.6034.63T:esch256v2
40.9541.2841.52asconhashbi32v12
42.4342.5042.55T:romulush
45.3645.3845.39T:esch384v2
219.90219.96220.05T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.475.48sha512
7.227.247.25shake128
8.238.258.26sha256
14.7814.8214.85asconhashav12
14.8214.8514.86asconxofav12
15.1115.1315.15T:xoodyakv1
22.1622.1722.18asconhashv12
22.1622.1822.19asconxofv12
27.3327.3627.98asconhashabi32v12
34.8334.8734.91T:esch256v2
40.9040.9441.46asconhashbi32v12
42.9242.9542.96T:romulush
45.8145.8345.86T:esch384v2
219.57219.67219.80T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.805.825.83sha512
7.727.737.75shake128
9.169.189.20sha256
15.0215.0515.09asconhashav12
15.0615.0815.11asconxofav12
15.2515.2715.29T:xoodyakv1
22.4722.4922.53asconhashv12
22.4622.4922.52asconxofv12
27.8227.8527.98asconhashabi32v12
35.2835.3535.42T:esch256v2
41.5441.5842.08asconhashbi32v12
43.5943.6243.64T:romulush
46.5846.6046.64T:esch384v2
218.97219.11219.24T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.266.296.32sha512
8.258.278.31shake128
11.7811.8011.84sha256
15.6415.6915.73T:xoodyakv1
15.6815.7215.78asconhashav12
15.7015.7415.80asconxofav12
23.2823.3123.40asconhashv12
23.2823.3223.37asconxofv12
29.1029.1529.61asconhashabi32v12
36.4336.5236.69T:esch256v2
43.1843.5744.07asconhashbi32v12
45.1445.1945.26T:romulush
48.5948.6248.67T:esch384v2
217.32217.44217.59T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
13.4513.5613.78sha512
18.5818.6618.75shake128
20.6920.9221.08T:xoodyakv1
23.8824.1624.55asconxofav12
24.0324.1624.47asconhashav12
33.5933.9134.52asconxofv12
33.7734.0934.28asconhashv12
43.2543.3943.81asconhashabi32v12
45.0545.2045.36sha256
49.3649.8150.44T:esch256v2
61.7062.1162.33asconhashbi32v12
65.9266.1266.28T:romulush
74.3374.4774.70T:esch384v2
193.08193.31193.59T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.3874.3877.25T:xoodyakv1
90.6291.1292.12asconhashav12
90.8891.2592.38asconxofav12
100.25101.12105.38sha512
118.00118.62120.38asconxofv12
118.62121.50123.00asconhashv12
146.88147.38148.38shake128
157.75158.25159.25asconhashabi32v12
184.75186.38190.88T:esch256v2
186.62187.88189.12T:romulush
212.00213.12214.12asconhashbi32v12
224.00224.50225.62T:photonbeetlehash256rate32v1
288.88290.62293.00sha256
322.38322.88324.25T:esch384v2