VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20251114

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.339.359.37sha512
10.4510.4510.45shake128
14.6614.7014.71sha256
18.5818.5918.61asconhashav12
18.5918.6118.63asconxofav12
28.0028.0228.03asconxofv12
28.0128.0328.03asconhashv12
31.1031.1631.33T:xoodyakv1
37.0337.0337.04asconhashabi32v12
55.5555.5555.57asconhashbi32v12
70.3770.4170.59T:esch256v2
101.74101.78102.04T:esch384v2
131.48131.49131.50T:romulush
403.40403.65406.35T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.3010.3110.34sha512
10.7010.7010.70shake128
15.5015.5115.53sha256
18.7618.7618.76asconxofav12
18.7618.7618.76asconhashav12
28.2328.2328.24asconxofv12
28.2328.2428.25asconhashv12
31.2831.4731.47T:xoodyakv1
37.3437.3437.39asconhashabi32v12
55.9655.9756.07asconhashbi32v12
70.8570.8571.04T:esch256v2
102.76102.77103.01T:esch384v2
132.45132.51132.53T:romulush
402.78403.02405.15T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.4411.4511.45shake128
11.8811.8811.89sha512
16.9116.9116.91sha256
19.0619.0619.06asconhashav12
19.0619.0619.06asconxofav12
28.6228.6228.62asconxofv12
28.6228.6228.63asconhashv12
31.5431.5431.72T:xoodyakv1
37.9037.9137.91asconhashabi32v12
56.7156.7156.72asconhashbi32v12
71.6371.6471.83T:esch256v2
104.45104.46104.70T:esch384v2
134.05134.08134.11T:romulush
402.21402.44403.84T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.3212.3412.35shake128
15.1915.2115.22sha512
19.8519.8519.85asconhashav12
19.8519.8519.85asconxofav12
20.6220.6820.72sha256
29.6429.6429.64asconxofv12
29.6429.6429.65asconhashv12
32.2532.4132.53T:xoodyakv1
39.4239.4239.45asconhashabi32v12
58.6958.7058.71asconhashbi32v12
73.6473.7173.89T:esch256v2
108.92108.93109.19T:esch384v2
138.42138.51138.53T:romulush
397.67398.69399.95T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
28.7328.7529.09shake128
29.7329.7329.73asconhashav12
29.7329.7329.73asconxofav12
41.1441.2041.22T:xoodyakv1
42.5642.5642.56asconhashv12
42.5642.5642.56asconxofv12
58.2858.2858.34asconhashabi32v12
60.7261.2061.30sha512
68.3368.9169.17sha256
83.7283.7883.94asconhashbi32v12
99.7899.81100.17T:esch256v2
166.27166.31166.50T:esch384v2
194.36194.41194.61T:romulush
354.20355.22355.86T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
107.75107.75107.75asconhashav12
107.75107.75109.75asconxofav12
137.38138.25140.12T:xoodyakv1
144.38144.38146.12asconhashv12
144.38144.38147.50asconxofv12
207.25207.25207.75asconhashabi32v12
228.88229.00230.88shake128
281.12281.25281.38asconhashbi32v12
372.62374.00374.25T:esch256v2
401.75404.38411.62T:photonbeetlehash256rate32v1
423.50423.75424.25sha256
486.50488.25490.12sha512
503.50504.38505.12T:romulush
714.38715.25715.62T:esch384v2