VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Gracemont (b06a2-20); 2024 Intel Core 5 210H, E cores; 4 x 1600MHz; freshwrap,little, supercop-20260330

[Page version: 20260422 02:30:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.112.112.11sha256
6.496.496.49sha512
7.737.747.74shake128
17.0717.0817.09asconxofav12
17.0617.0817.10asconhashav12
20.1020.6021.28T:xoodyakv1
25.5025.5325.54asconhashv12
25.5125.5325.54asconxofv12
30.2930.3330.37asconhashabi32v12
45.2445.2845.48asconhashbi32v12
45.2845.3445.50T:esch256v2
57.6757.6857.94T:romulush
65.9265.9666.04T:esch384v2
306.87307.68309.92T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.152.152.15sha256
6.736.746.74sha512
7.917.927.93shake128
17.2317.2417.26asconhashav12
17.2317.2517.27asconxofav12
20.3620.8321.09T:xoodyakv1
25.7325.7525.78asconhashv12
25.7425.7525.78asconxofv12
30.6530.7130.74asconhashabi32v12
45.5945.6445.75T:esch256v2
45.6745.6945.70asconhashbi32v12
58.1858.2158.31T:romulush
66.5166.6266.66T:esch384v2
306.64307.03309.18T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.212.222.22sha256
7.117.127.15sha512
8.478.498.51shake128
17.4817.5217.57asconhashav12
17.5117.5417.59asconxofav12
20.4820.5120.76T:xoodyakv1
26.1126.1426.17asconxofv12
26.1526.1826.20asconhashv12
31.3431.3731.41asconhashabi32v12
46.1146.1346.15T:esch256v2
46.4146.4446.45asconhashbi32v12
59.0559.1059.14T:romulush
67.6267.6567.68T:esch384v2
305.53305.83307.85T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.382.392.39sha256
7.467.477.48sha512
9.099.109.13shake128
18.2118.2618.32asconhashav12
18.3118.3618.44asconxofav12
20.9220.9621.28T:xoodyakv1
27.1227.1727.23asconxofv12
27.1827.2427.28asconhashv12
33.0033.0833.18asconhashabi32v12
47.3747.4447.50T:esch256v2
48.2948.3548.47asconhashbi32v12
61.2661.3061.41T:romulush
70.8670.9671.05T:esch384v2
302.89303.22305.08T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.614.895.00sha256
14.7914.8314.88sha512
21.2321.3021.41shake128
27.3427.4627.64T:xoodyakv1
27.4927.7427.95asconxofav12
27.6727.8528.01asconhashav12
39.4239.7240.49asconhashv12
39.6039.8940.25asconxofv12
54.4554.6754.89asconhashabi32v12
63.4063.5563.91T:esch256v2
73.4473.6574.01asconhashbi32v12
87.9488.2288.49T:romulush
110.07110.28110.57T:esch384v2
270.02270.74272.08T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.2227.5227.68sha256
94.7295.8098.16T:xoodyakv1
101.36102.45103.74asconhashav12
101.91102.72104.21asconxofav12
118.97119.27120.19sha512
135.25136.43138.00asconhashv12
135.49136.62138.04asconxofv12
169.10169.79170.81shake128
222.53224.54226.92asconhashabi32v12
233.57234.02234.76T:esch256v2
245.58247.21249.20T:romulush
272.44273.47274.93asconhashbi32v12
312.62313.88315.16T:photonbeetlehash256rate32v1
474.47475.22476.40T:esch384v2