VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Raptor Cove (b06a2-40); 2024 Intel Core 5 210H, P cores; 4 x 2200MHz; freshwrap,big, supercop-20260330

[Page version: 20260422 02:30:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
4.784.794.80shake128
5.045.045.05sha512
13.3213.3513.40asconxofav12
13.3213.3613.44asconhashav12
15.3015.3215.40T:xoodyakv1
19.8719.9920.08asconxofv12
19.8920.0320.08asconhashv12
24.5524.6024.64T:esch256v2
25.7425.7625.78asconhashabi32v12
34.0634.1134.15T:esch384v2
39.4339.4539.48asconhashbi32v12
44.3244.4244.46T:romulush
187.64190.19204.48T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.092.09sha256
4.904.914.92shake128
5.215.225.23sha512
13.4413.4713.50asconhashav12
13.4413.4713.50asconxofav12
15.3915.4115.63T:xoodyakv1
20.0720.1720.24asconhashv12
20.1120.2120.28asconxofv12
24.7224.7724.84T:esch256v2
26.0626.0826.11asconhashabi32v12
34.4234.4634.53T:esch384v2
39.7839.8239.85asconhashbi32v12
44.6744.7844.90T:romulush
189.17200.08205.26T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.152.16sha256
5.225.245.27shake128
5.515.525.53sha512
13.6213.6713.71asconxofav12
13.6413.6813.75asconhashav12
15.5015.5415.69T:xoodyakv1
20.3120.4420.53asconxofv12
20.3020.4520.54asconhashv12
25.0225.1225.19T:esch256v2
26.5526.5926.64asconhashabi32v12
34.9935.0835.16T:esch384v2
40.3440.3840.42asconhashbi32v12
45.2445.3445.49T:romulush
188.30188.38188.47T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.332.332.34sha256
5.565.595.65shake128
5.745.765.81sha512
14.1214.1714.23asconxofav12
14.1314.1814.25asconhashav12
15.8315.8715.99T:xoodyakv1
20.9921.1221.25asconhashv12
21.0521.1821.29asconxofv12
25.7025.8225.96T:esch256v2
27.8527.9227.99asconhashabi32v12
36.5236.6836.82T:esch384v2
41.8141.8942.01asconhashbi32v12
46.8246.8846.99T:romulush
189.00202.75203.20T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.684.724.77sha256
11.1211.2511.47sha512
12.8413.0013.60shake128
20.0620.1920.33T:xoodyakv1
20.5220.7620.99asconhashav12
20.5820.8021.03asconxofav12
29.7730.0930.35asconhashv12
29.7730.0930.36asconxofv12
33.8534.3635.02T:esch256v2
41.0841.2841.55asconhashabi32v12
55.3856.0656.87T:esch384v2
59.8260.1860.63asconhashbi32v12
67.6267.8868.13T:romulush
165.92166.17166.48T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
26.3426.7126.99sha256
67.8368.4768.99T:xoodyakv1
71.5472.5974.23asconhashav12
72.1472.9974.64asconxofav12
89.1789.7890.82sha512
98.67100.24102.99asconhashv12
99.08100.64102.26asconxofv12
103.25104.30105.39shake128
127.31130.11135.05T:esch256v2
144.04145.09147.61asconhashabi32v12
190.17191.40192.24T:romulush
191.80195.90199.39T:photonbeetlehash256rate32v1
199.83201.61203.77asconhashbi32v12
238.94242.18248.42T:esch384v2