VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.714.714.71sha512
5.605.615.63shake128
12.2712.2712.28asconxofav12
12.3912.4012.41asconhashav12
14.5315.0015.43T:xoodyakv1
18.5118.5318.55asconxofv12
18.5218.5318.53asconhashv12
21.9922.0322.04asconhashabi32v12
32.8232.8232.83asconhashbi32v12
32.8532.8632.94T:esch256v2
41.8341.8542.02T:romulush
47.3348.2950.50T:esch384v2
222.78223.32225.34T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.884.884.89sha512
5.735.745.76shake128
12.3812.3912.40asconxofav12
12.4912.5212.57asconhashav12
14.6514.8915.30T:xoodyakv1
18.6618.6818.70asconxofv12
18.6918.6918.69asconhashv12
22.2622.2822.31asconhashabi32v12
33.0633.0733.07T:esch256v2
33.1433.1433.15asconhashbi32v12
42.2442.2942.36T:romulush
48.0148.8050.69T:esch384v2
222.35222.69224.55T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.60sha256
5.155.165.17sha512
6.136.146.15shake128
12.6012.6212.62asconxofav12
12.7112.7312.76asconhashav12
14.8815.0415.13T:xoodyakv1
18.9318.9318.99asconxofv12
18.9518.9519.00asconhashv12
22.7122.7322.75asconhashabi32v12
33.4033.4133.47T:esch256v2
33.6633.6933.70asconhashbi32v12
42.8742.9142.93T:romulush
48.8549.5151.44T:esch384v2
221.61221.72223.90T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.721.72sha256
5.395.395.40sha512
6.576.576.59shake128
13.0913.1013.18asconxofav12
13.2213.2313.32asconhashav12
15.1915.3315.40T:xoodyakv1
19.5919.6219.72asconxofv12
19.6019.6419.71asconhashv12
23.8923.9324.01asconhashabi32v12
34.3034.3334.38T:esch256v2
35.0535.1035.13asconhashbi32v12
44.4644.5244.58T:romulush
51.0251.6853.60T:esch384v2
219.89220.05221.96T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.253.283.31sha256
10.5510.5810.59sha512
15.0615.1215.20shake128
19.6919.7820.31asconxofav12
19.7019.8620.09asconhashav12
19.7719.8619.97T:xoodyakv1
28.1728.3928.73asconhashv12
28.2528.4228.55asconxofv12
39.3139.4540.14asconhashabi32v12
46.0346.0646.25T:esch256v2
53.2353.4253.80asconhashbi32v12
63.7263.8363.98T:romulush
78.0878.6981.58T:esch384v2
195.73196.14197.25T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
19.3819.3819.50sha256
70.2570.8871.25T:xoodyakv1
72.1273.0074.75asconxofav12
71.8875.7577.00asconhashav12
85.0085.3887.50sha512
96.2597.1298.12asconhashv12
96.5097.75101.00asconxofv12
120.00120.38120.88shake128
159.88160.75161.88asconhashabi32v12
166.88167.88168.38T:esch256v2
177.88179.75180.38T:romulush
195.88196.38197.38asconhashbi32v12
225.25226.38227.38T:photonbeetlehash256rate32v1
334.38338.25351.25T:esch384v2