VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251114

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
18.3818.4018.40shake128
20.5320.5320.54sha512
27.4327.5027.54asconhashav12
27.4327.5327.56asconxofav12
30.2530.2630.35sha256
41.1941.2041.30asconhashv12
41.1941.2341.33asconxofv12
47.5047.5147.60T:xoodyakv1
63.8763.9964.07asconhashabi32v12
94.9094.9995.22asconhashbi32v12
123.36123.42123.52T:esch256v2
177.34177.39178.22T:esch384v2
196.14196.16196.23T:romulush
848.14848.79849.09T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
18.8218.8218.82shake128
21.2521.2521.25sha512
27.6927.6927.70asconhashav12
27.6927.6927.71asconxofav12
30.7830.7930.79sha256
41.3641.3641.42asconxofv12
41.3641.3641.45asconhashv12
47.7747.7747.77T:xoodyakv1
64.6964.6964.70asconhashabi32v12
95.8595.8595.87asconhashbi32v12
124.09124.09124.14T:esch256v2
178.89178.89179.15T:esch384v2
197.62197.63198.18T:romulush
846.55846.69847.13T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.1620.1620.17shake128
22.4622.4622.49sha512
28.2128.2128.21asconhashav12
28.2128.2128.21asconxofav12
31.6831.6831.69sha256
41.9541.9541.98asconxofv12
41.9541.9541.98asconhashv12
48.2248.2248.22T:xoodyakv1
66.0666.0666.07asconhashabi32v12
97.4797.4797.52asconhashbi32v12
125.40125.40125.44T:esch256v2
181.74181.74181.75T:esch384v2
200.31200.31200.34T:romulush
843.56843.74844.71T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
21.7521.7521.75shake128
23.4323.4323.44sha512
29.6029.6029.60asconhashav12
29.6029.6029.60asconxofav12
34.0234.0234.03sha256
43.5443.5443.59asconhashv12
43.5443.5443.61asconxofv12
49.4149.4149.41T:xoodyakv1
69.6969.6969.72asconhashabi32v12
101.79101.79101.82asconhashbi32v12
128.87128.87128.87T:esch256v2
189.32189.32189.34T:esch384v2
207.49207.49207.51T:romulush
836.35836.54836.60T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
46.5046.5046.59sha512
47.1947.1947.19asconhashav12
47.1947.1947.19asconxofav12
51.4251.4251.42shake128
63.6963.6963.69asconhashv12
63.6963.6963.69asconxofv12
64.7564.7564.75T:xoodyakv1
65.1665.1665.23sha256
115.95115.95115.95asconhashabi32v12
156.86156.86156.86asconhashbi32v12
173.31173.31173.31T:esch256v2
286.36286.36286.36T:esch384v2
299.27299.27299.27T:romulush
745.14745.14745.36T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
186.50186.50186.50asconhashav12
186.50186.50186.50asconxofav12
221.62221.62221.62asconhashv12
221.62221.62221.62asconxofv12
223.88223.88226.38T:xoodyakv1
277.50277.62279.12sha256
373.12373.12375.38sha512
409.88409.88412.12shake128
480.12480.12482.38asconhashabi32v12
590.62590.62592.88asconhashbi32v12
651.12651.12652.75T:esch256v2
828.25828.25830.25T:romulush
865.62866.50867.38T:photonbeetlehash256rate32v1
1220.501220.501220.50T:esch384v2