VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen (820f01); 2020 AMD Athlon Silver 3050e; 2 x 1400MHz; dali, supercop-20260217

[Page version: 20260403 18:07:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.864.874.87sha512
7.157.157.16shake128
11.7311.7311.73asconxofav12
11.7311.7311.73asconhashav12
15.9516.0916.13T:xoodyakv1
17.7517.7517.75asconhashv12
17.7517.7517.75asconxofv12
21.7521.7521.75asconhashabi32v12
32.6032.6032.60asconhashbi32v12
38.4038.4538.86T:esch256v2
38.8738.8738.87T:romulush
48.1948.2448.34T:esch384v2
239.31240.21241.24T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
5.085.085.09sha512
7.327.337.34shake128
11.8611.8711.87asconhashav12
11.8611.8711.87asconxofav12
16.0316.1816.20T:xoodyakv1
17.9117.9117.91asconhashv12
17.9117.9117.91asconxofv12
22.0522.0522.06asconhashabi32v12
32.9432.9632.96asconhashbi32v12
38.9639.1139.12T:esch256v2
39.2039.2139.21T:romulush
48.6948.7248.81T:esch384v2
237.57237.97238.80T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.132.13sha256
5.435.445.44sha512
7.847.847.84shake128
12.0812.0812.09asconhashav12
12.0912.1112.11asconxofav12
16.1716.3116.34T:xoodyakv1
18.1718.1718.18asconhashv12
18.1818.1818.18asconxofv12
22.5622.5622.57asconhashabi32v12
33.5633.5633.56asconhashbi32v12
39.3839.4839.51T:esch256v2
39.7639.7739.78T:romulush
49.5249.6149.74T:esch384v2
236.79237.01237.86T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.302.312.31sha256
6.026.046.05sha512
8.388.398.42shake128
12.6512.6612.67asconhashav12
12.6612.7212.73asconxofav12
16.5516.6016.69T:xoodyakv1
18.8618.8618.86asconxofv12
18.8518.8718.89asconhashv12
23.9223.9223.93asconhashabi32v12
35.1635.1635.16asconhashbi32v12
40.3740.6140.65T:esch256v2
41.2541.2941.32T:romulush
51.6551.7451.78T:esch384v2
234.68234.95235.82T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.714.925.15sha256
14.6114.6214.63sha512
19.3019.4120.01asconhashav12
19.3219.4419.47shake128
19.5519.7720.28asconxofav12
21.3421.5221.72T:xoodyakv1
27.2727.5828.14asconxofv12
27.9528.2228.74asconhashv12
41.1841.2141.65asconhashabi32v12
54.6054.7254.95T:esch256v2
55.1655.1655.52asconhashbi32v12
59.9760.3860.87T:romulush
79.2279.4079.55T:esch384v2
209.40209.77210.88T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
25.9127.7628.72sha256
73.0374.0775.92T:xoodyakv1
74.7574.7574.98asconhashav12
72.49?75.18?92.74?asconxofav12
95.8895.8896.95asconxofv12
96.8896.8898.39sha512
97.74100.07102.48asconhashv12
154.72155.03155.38shake128
173.04174.10177.01T:romulush
174.75175.07176.88asconhashabi32v12
202.71202.88203.00T:esch256v2
210.88210.88212.31asconhashbi32v12
236.23237.67239.85T:photonbeetlehash256rate32v1
342.36343.89344.98T:esch384v2