VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (106ca); 2011 Intel Atom N435; 1 x 1330MHz; h4atom, supercop-20250922

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
18.5018.5118.58sha256
18.8618.8818.93shake128
19.2319.2519.31sha512
27.5027.5027.51asconhashav12
27.5027.5027.60asconxofav12
40.5040.5040.64asconhashv12
40.5040.5040.60asconxofv12
48.8548.8749.05T:xoodyakv1
64.8864.9965.14asconhashabi32v12
94.0494.1794.26asconhashbi32v12
117.49117.51117.57T:esch256v2
166.18166.23166.33T:esch384v2
197.86197.90197.97T:romulush
848.17848.83850.04T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
19.3019.3019.32shake128
19.9519.9619.97sha512
21.0421.0721.11sha256
27.7827.7827.78asconhashav12
27.7827.7827.78asconxofav12
40.8640.8640.86asconxofv12
40.8640.8640.87asconhashv12
49.1249.1349.15T:xoodyakv1
65.6865.6865.70asconhashabi32v12
94.9394.9394.94asconhashbi32v12
118.15118.16118.20T:esch256v2
167.69167.73167.75T:esch384v2
199.34199.37202.30T:romulush
846.67846.78848.68T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.6720.6920.71shake128
21.1621.1721.19sha512
25.3725.4625.57sha256
28.2428.2428.24asconxofav12
28.2428.2428.25asconhashav12
41.4741.4741.47asconxofv12
41.4741.4741.47asconhashv12
49.5949.6049.62T:xoodyakv1
67.0267.0267.04asconhashabi32v12
96.4796.4896.62asconhashbi32v12
119.41119.45119.49T:esch256v2
170.43170.48170.51T:esch384v2
202.07202.08202.13T:romulush
843.55844.42845.22T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
22.3122.3322.35shake128
22.3522.3722.42sha512
29.4829.4829.48asconxofav12
29.4829.4829.49asconhashav12
36.8837.1037.34sha256
43.0843.0843.08asconhashv12
43.0843.0843.08asconxofv12
50.8650.8850.92T:xoodyakv1
70.5970.5970.61asconhashabi32v12
100.58100.59100.67asconhashbi32v12
122.68122.73122.80T:esch256v2
177.83177.89178.01T:esch384v2
209.38209.38209.40T:romulush
836.41836.60838.88T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
45.1445.1445.14asconhashav12
45.1445.1445.19asconxofav12
47.1647.3847.47sha512
52.6152.7353.06shake128
63.5663.5663.56asconhashv12
63.5663.5663.56asconxofv12
67.0867.2067.30T:xoodyakv1
116.03116.03116.14asconhashabi32v12
153.00153.00153.12asconhashbi32v12
165.03165.23165.55T:esch256v2
183.75185.44186.75sha256
271.75272.06272.30T:esch384v2
302.67302.69302.78T:romulush
744.73745.38745.81T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
167.75167.75167.75asconhashav12
167.75167.75167.75asconxofav12
225.00225.00225.00asconxofv12
225.00225.00225.88asconhashv12
235.12235.12236.75T:xoodyakv1
375.12376.75377.75sha512
418.50420.12421.88shake128
474.12474.12475.88asconhashabi32v12
565.50566.38568.25asconhashbi32v12
618.50620.12621.12T:esch256v2
840.00840.00840.12T:romulush
863.88866.50869.75T:photonbeetlehash256rate32v1
1178.381180.881182.88T:esch384v2
1342.881352.881370.12sha256