VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.064.064.07sha256
10.8010.8210.90sha512
11.2311.2411.24shake128
17.1217.1317.19T:xoodyakv1
19.3719.3719.38asconhashav12
19.3719.3819.38asconxofav12
29.0029.0029.00asconxofv12
29.0029.0029.06asconhashv12
40.9341.0841.12asconhashabi32v12
52.9253.1453.19T:romulush
54.2354.8059.94T:esch256v2
61.9461.9662.13asconhashbi32v12
67.9968.6768.91T:esch384v2
397.17397.41399.36T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
4.154.154.15sha256
11.4811.4811.49shake128
11.8511.8811.95sha512
16.8816.8817.18T:xoodyakv1
19.5719.5719.57asconxofav12
19.5719.5719.57asconhashav12
29.2529.2529.25asconxofv12
29.2529.2529.25asconhashv12
41.3341.4541.46asconhashabi32v12
53.1553.5753.60T:romulush
55.0855.0859.67T:esch256v2
62.4562.4562.49asconhashbi32v12
68.6369.6169.61T:esch384v2
396.44396.61398.25T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
4.274.284.28sha256
12.2612.2612.30shake128
13.6213.6913.76sha512
17.0617.0617.46T:xoodyakv1
19.8819.8819.90asconxofav12
19.8919.8919.89asconhashav12
29.6529.6629.66asconxofv12
29.6529.6629.66asconhashv12
41.9741.9842.13asconhashabi32v12
53.9354.1854.30T:romulush
55.6755.6860.13T:esch256v2
63.3163.3163.32asconhashbi32v12
69.7870.7470.74T:esch384v2
395.20395.22396.98T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
4.624.634.64sha256
13.1513.1913.21shake128
17.4017.5017.56sha512
17.9218.0918.21T:xoodyakv1
20.7320.7320.76asconxofav12
20.7320.7520.76asconhashav12
30.7430.7430.78asconxofv12
30.7430.7530.78asconhashv12
43.7143.7243.87asconhashabi32v12
56.1156.1656.30T:romulush
57.2157.2261.90T:esch256v2
65.5965.6065.61asconhashbi32v12
72.7473.6573.65T:esch384v2
391.86391.89393.54T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
9.129.149.22sha256
22.9723.2024.33T:xoodyakv1
30.0630.1930.31shake128
31.0631.2831.94asconxofav12
31.1631.5831.97asconhashav12
44.1944.5544.89asconhashv12
44.2344.6445.03asconxofv12
65.3165.4865.73asconhashabi32v12
70.1270.4771.69sha512
76.8977.0877.66T:esch256v2
81.2581.6982.25T:romulush
94.4594.9595.02asconhashbi32v12
111.23111.33111.42T:esch384v2
348.36348.56349.84T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
42.7542.7543.38sha256
80.1282.1282.12T:xoodyakv1
112.75113.50114.50asconhashav12
113.25115.38116.00asconxofav12
150.38150.88151.38asconxofv12
150.88150.88152.25asconhashv12
228.25229.62230.50T:romulush
233.25233.25234.38asconhashabi32v12
240.25241.12241.25shake128
287.38287.38289.75T:esch256v2
320.12320.12320.25asconhashbi32v12
402.50403.50404.25T:photonbeetlehash256rate32v1
478.62478.62478.75T:esch384v2
552.12559.12565.62sha512