VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (106ca); 2011 Intel Atom N435; 1 x 1330MHz; h4atom, supercop-20250922

[Page version: 20251128 09:21:58]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
18.5018.5118.58sha256
18.8618.8818.93shake128
19.2319.2519.31sha512
27.5027.5027.51asconhashav12
27.5027.5027.60asconxofav12
40.5040.5040.64asconhashv12
40.5040.5040.60asconxofv12
48.8548.8749.05T:xoodyakv1
64.8864.9965.14asconhashabi32v12
94.0494.1794.26asconhashbi32v12
117.49117.51117.57T:esch256v2
166.18166.23166.33T:esch384v2
197.86197.90197.97T:romulush
848.17848.83850.04T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
19.3019.3019.32shake128
19.9519.9619.97sha512
21.0421.0721.11sha256
27.7827.7827.78asconhashav12
27.7827.7827.78asconxofav12
40.8640.8640.86asconxofv12
40.8640.8640.87asconhashv12
49.1249.1349.15T:xoodyakv1
65.6865.6865.70asconhashabi32v12
94.9394.9394.94asconhashbi32v12
118.15118.16118.20T:esch256v2
167.69167.73167.75T:esch384v2
199.34199.37202.30T:romulush
846.67846.78848.68T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.6720.6920.71shake128
21.1621.1721.19sha512
25.3725.4625.57sha256
28.2428.2428.24asconxofav12
28.2428.2428.25asconhashav12
41.4741.4741.47asconxofv12
41.4741.4741.47asconhashv12
49.5949.6049.62T:xoodyakv1
67.0267.0267.04asconhashabi32v12
96.4796.4896.62asconhashbi32v12
119.41119.45119.49T:esch256v2
170.43170.48170.51T:esch384v2
202.07202.08202.13T:romulush
843.55844.42845.22T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
22.3122.3322.35shake128
22.3522.3722.42sha512
29.4829.4829.48asconxofav12
29.4829.4829.49asconhashav12
36.8837.1037.34sha256
43.0843.0843.08asconhashv12
43.0843.0843.08asconxofv12
50.8650.8850.92T:xoodyakv1
70.5970.5970.61asconhashabi32v12
100.58100.59100.67asconhashbi32v12
122.68122.73122.80T:esch256v2
177.83177.89178.01T:esch384v2
209.38209.38209.40T:romulush
836.41836.60838.88T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
45.1445.1445.14asconhashav12
45.1445.1445.19asconxofav12
47.1647.3847.47sha512
52.6152.7353.06shake128
63.5663.5663.56asconhashv12
63.5663.5663.56asconxofv12
67.0867.2067.30T:xoodyakv1
116.03116.03116.14asconhashabi32v12
153.00153.00153.12asconhashbi32v12
165.03165.23165.55T:esch256v2
183.75185.44186.75sha256
271.75272.06272.30T:esch384v2
302.67302.69302.78T:romulush
744.73745.38745.81T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
167.75167.75167.75asconhashav12
167.75167.75167.75asconxofav12
225.00225.00225.00asconxofv12
225.00225.00225.88asconhashv12
235.12235.12236.75T:xoodyakv1
375.12376.75377.75sha512
418.50420.12421.88shake128
474.12474.12475.88asconhashabi32v12
565.50566.38568.25asconhashbi32v12
618.50620.12621.12T:esch256v2
840.00840.00840.12T:romulush
863.88866.50869.75T:photonbeetlehash256rate32v1
1178.381180.881182.88T:esch384v2
1342.881352.881370.12sha256