VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20251222

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.329.359.38sha512
10.4510.4510.45shake128
14.6614.7014.71sha256
18.5818.6018.61asconhashav12
18.5818.6018.64asconxofav12
28.0028.0328.03asconxofv12
28.0128.0328.05asconhashv12
31.1031.2131.33T:xoodyakv1
37.0337.0437.04asconhashabi32v12
55.5455.5555.57asconhashbi32v12
70.3770.4170.57T:esch256v2
101.73101.77102.01T:esch384v2
131.47131.49131.50T:romulush
403.41403.76406.39T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.3010.3210.37sha512
10.7010.7010.70shake128
15.5015.5115.60sha256
18.7618.7618.78asconxofav12
18.7618.7618.78asconhashav12
28.2328.2328.27asconxofv12
28.2328.2428.28asconhashv12
31.3431.4731.47T:xoodyakv1
37.3437.3437.40asconhashabi32v12
55.9655.9756.05asconhashbi32v12
70.8570.8771.03T:esch256v2
102.76102.80102.99T:esch384v2
132.44132.48132.53T:romulush
402.76403.01404.90T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.4511.4511.45shake128
11.8811.8811.90sha512
16.9116.9116.93sha256
19.0619.0619.06asconxofav12
19.0619.0619.06asconhashav12
28.6228.6228.63asconxofv12
28.6228.6228.63asconhashv12
31.5431.5631.72T:xoodyakv1
37.9037.9037.93asconhashabi32v12
56.7156.7156.75asconhashbi32v12
71.6371.6571.83T:esch256v2
104.45104.48104.70T:esch384v2
134.06134.09134.11T:romulush
402.13402.64403.86T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.3312.3512.37shake128
15.1915.2115.46sha512
19.8519.8519.85asconhashav12
19.8519.8519.86asconxofav12
20.6420.6920.72sha256
29.6429.6429.65asconxofv12
29.6429.6429.67asconhashv12
32.3032.4232.53T:xoodyakv1
39.4139.4139.42asconhashabi32v12
58.6958.6958.72asconhashbi32v12
73.6573.7373.89T:esch256v2
108.92108.94109.19T:esch384v2
138.46138.51138.55T:romulush
398.00398.97399.97T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
28.7328.7429.08shake128
29.7329.7329.95asconhashav12
29.7329.7330.00asconxofav12
41.1741.2141.27T:xoodyakv1
42.5642.5642.66asconxofv12
42.5642.5642.68asconhashv12
58.3058.3158.75asconhashabi32v12
60.7561.1561.37sha512
68.4068.8969.54sha256
83.7683.7784.11asconhashbi32v12
99.7899.86100.17T:esch256v2
166.24166.32166.53T:esch384v2
194.36194.44194.79T:romulush
354.44355.24355.87T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
107.75107.75109.85asconhashav12
107.75107.75110.21asconxofav12
137.38137.91140.62T:xoodyakv1
144.38144.38147.31asconhashv12
144.38144.38148.23asconxofv12
207.38207.50210.44asconhashabi32v12
228.88228.99230.82shake128
281.45281.50282.96asconhashbi32v12
372.57373.65374.32T:esch256v2
402.40404.38411.52T:photonbeetlehash256rate32v1
423.34423.74424.49sha256
486.65488.47490.26sha512
503.50504.24505.05T:romulush
714.43715.30715.98T:esch384v2