VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H, P cores; 4 x 2200MHz; freshwrap,big, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
4.774.784.79shake128
5.045.045.05sha512
13.3413.4513.48asconhashav12
13.4313.4713.54asconxofav12
15.2815.3315.52T:xoodyakv1
19.8919.9420.05asconhashv12
19.9120.0120.11asconxofv12
24.5024.5424.57T:esch256v2
25.7425.7525.77asconhashabi32v12
33.9934.0634.12T:esch384v2
39.4639.4939.53asconhashbi32v12
44.5144.5444.59T:romulush
188.63192.28203.67T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.092.10sha256
4.894.904.91shake128
5.215.225.23sha512
13.5713.5913.63asconhashav12
13.5713.6313.66asconxofav12
15.3915.4115.78T:xoodyakv1
20.0620.1220.23asconhashv12
20.0820.1720.21asconxofv12
24.6524.7024.76T:esch256v2
26.0126.0426.07asconhashabi32v12
34.3634.4334.47T:esch384v2
39.7839.8139.85asconhashbi32v12
44.9144.9644.98T:romulush
189.36199.11206.25T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.162.18sha256
5.235.255.26shake128
5.505.525.53sha512
13.7113.7813.81asconhashav12
13.7113.8013.86asconxofav12
15.5115.5415.58T:xoodyakv1
20.3320.4520.55asconxofv12
20.3720.4820.56asconhashv12
24.9325.0025.08T:esch256v2
26.4726.5226.58asconhashabi32v12
34.9134.9635.03T:esch384v2
40.3440.3940.45asconhashbi32v12
45.5345.5745.63T:romulush
188.77188.98189.05T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.332.342.40sha256
5.715.735.75sha512
5.655.795.83shake128
14.1914.3114.37asconhashav12
14.1814.3614.44asconxofav12
15.8415.9015.98T:xoodyakv1
20.9921.0621.13asconhashv12
21.0721.1421.24asconxofv12
25.6725.7825.89T:esch256v2
27.8927.9528.02asconhashabi32v12
36.5036.5936.76T:esch384v2
41.7841.8941.98asconhashbi32v12
47.2747.3447.43T:romulush
186.94187.18187.26T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.61?4.67?5.22?sha256
10.6910.7810.91sha512
12.9413.0513.33shake128
20.1120.2220.36T:xoodyakv1
20.7720.9521.20asconhashav12
20.7821.0021.28asconxofav12
29.8030.0230.23asconxofv12
29.6930.0530.28asconhashv12
33.9134.2534.86T:esch256v2
41.2341.5041.61asconhashabi32v12
55.4555.7856.25T:esch384v2
59.8960.1760.69asconhashbi32v12
68.3668.7369.09T:romulush
166.55167.08177.16T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.25?27.75?31.50?sha256
68.1268.7569.38T:xoodyakv1
72.6273.7575.62asconxofav12
73.0074.0076.25asconhashav12
90.5091.8892.75sha512
99.12100.25101.25asconxofv12
98.75100.50101.88asconhashv12
103.25104.38105.62shake128
127.88130.12134.12T:esch256v2
144.38145.25146.25asconhashabi32v12
195.75198.12201.00T:photonbeetlehash256rate32v1
196.75198.12200.00T:romulush
200.25202.00203.75asconhashbi32v12
238.62240.38244.62T:esch384v2