VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; cubi10, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.255.25sha512
6.256.266.26shake128
7.717.727.73sha256
13.1913.2013.21T:xoodyakv1
14.5214.5314.54asconxofav12
14.5214.5314.55asconhashav12
21.8621.8721.89asconxofv12
21.8621.8721.88asconhashv12
27.2927.9527.97asconhashabi32v12
37.5537.5737.59T:esch256v2
40.6841.0841.33asconhashbi32v12
41.9242.0742.08T:esch384v2
42.2142.2342.24T:romulush
231.63231.68231.90T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.465.47sha512
6.426.436.44shake128
8.248.258.26sha256
13.3013.3213.35T:xoodyakv1
14.6814.6914.70asconxofav12
14.6814.6914.71asconhashav12
22.0622.0722.08asconhashv12
22.0622.0722.09asconxofv12
27.6427.6628.20asconhashabi32v12
37.8537.9037.92T:esch256v2
40.9541.1641.56asconhashbi32v12
42.5242.5342.56T:esch384v2
42.6142.6342.65T:romulush
231.19231.26231.33T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.815.825.82sha512
6.916.926.94shake128
9.139.159.16sha256
13.4213.4713.50T:xoodyakv1
14.9314.9414.98asconxofav12
14.9314.9614.99asconhashav12
22.3722.4022.43asconxofv12
22.3822.4122.44asconhashv12
28.1228.1528.69asconhashabi32v12
38.2938.3738.45T:esch256v2
41.5441.7842.36asconhashbi32v12
43.2643.2743.31T:esch384v2
43.3043.3243.35T:romulush
230.50230.59230.67T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.286.306.31sha512
7.537.567.59shake128
11.6811.7111.77sha256
13.9013.9414.00T:xoodyakv1
15.6015.6315.69asconxofav12
15.6015.6415.68asconhashav12
23.1723.2123.26asconhashv12
23.1923.2423.32asconxofv12
29.4129.5330.03asconhashabi32v12
39.5339.6639.76T:esch256v2
43.2143.5143.93asconhashbi32v12
44.9645.0145.09T:romulush
45.0945.1645.21T:esch384v2
228.60228.76228.90T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
13.7313.9714.20sha512
18.0218.2318.47T:xoodyakv1
18.6118.7718.89shake128
24.2524.3824.52asconhashav12
24.1924.4424.77asconxofav12
33.6133.7834.27asconxofv12
33.6633.8634.36asconhashv12
44.0044.1244.44sha256
44.3344.5544.80asconhashabi32v12
53.4254.0054.42T:esch256v2
62.9463.3063.67asconhashbi32v12
65.5265.6765.97T:romulush
69.4769.6769.91T:esch384v2
202.73203.33203.92T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
64.5065.1265.88T:xoodyakv1
93.6294.5095.38asconhashav12
92.88?94.88?161.12?asconxofav12
100.25100.50101.12sha512
116.50117.62118.88asconhashv12
116.75118.00119.88asconxofv12
146.25147.00148.25shake128
162.00162.88164.25asconhashabi32v12
186.38187.38188.62T:romulush
199.25200.88202.75T:esch256v2
215.12216.50219.75asconhashbi32v12
233.62234.25235.00T:photonbeetlehash256rate32v1
280.50282.00285.38sha256
301.38302.00303.12T:esch384v2