VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.864.874.87sha512
7.107.117.11shake128
11.7311.7311.73asconhashav12
11.7311.7311.73asconxofav12
13.8414.0314.03T:xoodyakv1
17.7517.7517.75asconxofv12
17.7517.7517.75asconhashv12
22.5022.5022.50asconhashabi32v12
32.4932.5732.66asconhashbi32v12
37.1837.1837.18T:romulush
41.1241.4741.70T:esch256v2
49.4149.8150.85T:esch384v2
234.70235.62237.02T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
5.075.085.08sha512
7.317.327.37shake128
11.8511.8611.87asconxofav12
11.8711.8711.87asconhashav12
14.1114.2314.23T:xoodyakv1
17.9117.9117.91asconhashv12
17.9117.9117.91asconxofv12
22.8022.8022.80asconhashabi32v12
32.8633.0033.00asconhashbi32v12
37.5037.5037.50T:romulush
41.2841.3642.70T:esch256v2
50.0450.6151.05T:esch384v2
232.90233.27233.65T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.132.13sha256
5.435.435.45sha512
7.897.907.95shake128
12.0412.0512.08asconxofav12
12.0912.0912.09asconhashav12
14.2314.3314.35T:xoodyakv1
18.1618.1718.17asconxofv12
18.1718.1818.18asconhashv12
23.3023.3023.30asconhashabi32v12
33.4533.4533.59asconhashbi32v12
38.0238.0338.05T:romulush
42.1442.2742.39T:esch256v2
50.8851.7152.07T:esch384v2
232.34232.58233.57T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.312.312.32sha256
5.765.775.82sha512
8.668.678.81shake128
12.5812.5912.66asconxofav12
12.6912.6912.69asconhashav12
14.5714.5814.68T:xoodyakv1
18.8518.8618.91asconhashv12
18.8518.8618.88asconxofv12
24.6424.6424.64asconhashabi32v12
35.0335.0335.18asconhashbi32v12
39.4439.4639.50T:romulush
43.4343.5343.61T:esch256v2
52.9654.1554.45T:esch384v2
229.99230.53230.62T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.614.674.72sha256
12.1912.1912.19sha512
18.8318.8818.94T:xoodyakv1
19.7719.9220.30asconhashav12
19.6420.0520.16asconxofav12
21.5021.5921.84shake128
27.7528.0528.27asconhashv12
28.2828.4128.75asconxofv12
41.3641.3641.94asconhashabi32v12
54.9454.9756.00asconhashbi32v12
57.3157.3857.55T:romulush
58.2258.4158.67T:esch256v2
81.4283.0683.31T:esch384v2
204.88205.25205.27T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.3824.3824.50sha256
64.7565.2566.38T:xoodyakv1
74.0075.3877.25asconhashav12
74.7576.6279.25asconxofav12
96.3896.3896.88sha512
95.6298.00101.12asconhashv12
96.7599.88101.50asconxofv12
164.00165.12166.12T:romulush
172.62172.88175.00shake128
177.12177.12177.12asconhashabi32v12
210.00210.00211.62asconhashbi32v12
218.00218.50219.12T:esch256v2
235.75241.38242.38T:photonbeetlehash256rate32v1
354.62359.88365.25T:esch384v2