VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20260627

[Page version: 20260713 22:20:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.714.714.72sha512
5.625.625.63shake128
12.4212.4412.45asconhashav12
12.4412.4512.46asconxofav12
14.7115.2115.52T:xoodyakv1
18.5118.5118.52asconxofv12
18.5118.5218.54asconhashv12
21.9922.0322.04asconhashabi32v12
32.8232.8432.98asconhashbi32v12
32.8632.9933.02T:esch256v2
41.8441.8942.02T:romulush
47.7947.8847.89T:esch384v2
223.12224.59225.00T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.884.884.89sha512
5.755.755.76shake128
12.5412.5512.57asconxofav12
12.5312.5612.58asconhashav12
14.6514.8515.24T:xoodyakv1
18.6718.6718.70asconxofv12
18.6818.7018.70asconhashv12
22.2722.3022.31asconhashabi32v12
33.1433.1533.16asconhashbi32v12
33.1033.2233.23T:esch256v2
42.2442.2542.34T:romulush
48.3848.3948.40T:esch384v2
222.69224.42224.48T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.60sha256
5.165.165.18sha512
6.146.156.17shake128
12.7312.7512.77asconxofav12
12.7412.7612.80asconhashav12
14.8515.0115.32T:xoodyakv1
18.9618.9718.98asconxofv12
18.9618.9919.01asconhashv12
22.7222.7422.76asconhashabi32v12
33.4333.5533.56T:esch256v2
33.6633.6933.70asconhashbi32v12
42.8742.9042.93T:romulush
49.1949.2549.29T:esch384v2
222.06223.17223.61T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.721.72sha256
5.395.405.44sha512
6.556.566.59shake128
13.2413.2713.33asconhashav12
13.2113.2813.33asconxofav12
15.2315.3515.67T:xoodyakv1
19.5919.6319.70asconhashv12
19.6019.6419.71asconxofv12
23.9023.9423.99asconhashabi32v12
34.3534.4334.47T:esch256v2
35.0835.1535.31asconhashbi32v12
44.4544.5144.57T:romulush
50.7451.0551.41T:esch384v2
220.31221.45221.59T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.233.253.29sha256
10.6810.7110.87sha512
15.0415.0915.24shake128
19.7219.8620.05T:xoodyakv1
19.7319.8820.12asconhashav12
19.7519.8920.27asconxofav12
28.1728.3628.63asconhashv12
28.1928.3728.78asconxofv12
39.2739.4339.84asconhashabi32v12
45.9345.9946.29T:esch256v2
53.1553.3553.59asconhashbi32v12
63.7263.9064.10T:romulush
79.7480.1980.77T:esch384v2
196.27197.19197.61T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
19.0619.1219.28sha256
68.2669.0670.62T:xoodyakv1
71.3472.0774.30asconhashav12
71.3372.2474.36asconxofav12
84.3884.6986.71sha512
95.6796.6298.53asconhashv12
95.7796.9398.97asconxofv12
119.89120.17120.65shake128
160.03160.75163.51asconhashabi32v12
167.35167.54169.10T:esch256v2
177.44177.77178.70T:romulush
195.62196.29197.68asconhashbi32v12
225.32226.05227.35T:photonbeetlehash256rate32v1
342.43344.94346.59T:esch384v2