VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20251114

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
15.5215.5315.53shake128
16.9116.9316.94sha512
24.6624.6624.68sha256
26.2526.2526.25asconhashav12
26.2526.2526.26asconxofav12
39.1239.1339.18asconhashv12
39.1239.1339.19asconxofv12
42.2542.3142.37T:xoodyakv1
51.5051.5151.57asconhashabi32v12
76.2676.2676.33asconhashbi32v12
82.7882.8482.94T:esch256v2
121.45121.48121.62T:esch384v2
136.76136.77136.79T:romulush
522.37522.51522.89T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
15.8815.8915.90shake128
17.5017.5017.50sha512
25.1325.1325.14sha256
26.5126.5126.51asconhashav12
26.5126.5126.51asconxofav12
39.4639.4639.46asconxofv12
39.4739.4739.47asconhashv12
42.4842.4842.48T:xoodyakv1
52.1252.1252.12asconhashabi32v12
77.0177.0177.02asconhashbi32v12
83.1583.1583.27T:esch256v2
122.58122.61122.72T:esch384v2
137.86137.93138.34T:romulush
521.23521.50521.53T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
17.0017.0317.03shake128
18.4818.4818.49sha512
25.9225.9325.94sha256
26.9526.9526.95asconhashav12
26.9526.9526.95asconxofav12
40.0240.0240.02asconxofv12
40.0340.0340.03asconhashv12
42.8642.8642.87T:xoodyakv1
53.1553.1553.16asconhashabi32v12
78.2878.2878.29asconhashbi32v12
84.0284.0384.15T:esch256v2
124.73124.73124.74T:esch384v2
139.73139.73139.74T:romulush
519.52519.61520.31T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
18.3118.4018.40shake128
19.3019.3019.31sha512
28.0228.0228.08sha256
28.0828.0828.11asconhashav12
28.0828.0828.11asconxofav12
41.5141.5141.52asconxofv12
41.5541.5541.55asconhashv12
43.8843.8943.91T:xoodyakv1
55.9155.9155.92asconhashabi32v12
81.6781.6781.69asconhashbi32v12
86.3586.3586.48T:esch256v2
129.96129.98130.12T:esch384v2
144.79144.80144.81T:romulush
515.10515.13515.19T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
37.7037.7037.70sha512
42.4742.5842.77asconxofav12
42.5542.7242.78asconhashav12
43.1943.1943.47shake128
56.4556.6256.80T:xoodyakv1
57.1957.1957.47sha256
60.0860.1960.38asconxofv12
60.3960.4760.64asconhashv12
90.8690.8691.19asconhashabi32v12
116.12116.28118.03T:esch256v2
124.67124.67125.00asconhashbi32v12
198.66198.89201.41T:esch384v2
209.31209.33209.45T:romulush
458.77458.84458.89T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
158.25158.38159.25asconxofav12
158.25158.38160.25asconhashav12
194.88194.88197.62T:xoodyakv1
209.00209.12211.00asconxofv12
209.12209.25210.12asconhashv12
247.00247.00247.62sha256
302.50302.62303.62sha512
343.50343.50344.25shake128
366.38366.38368.62asconhashabi32v12
436.25436.25437.62T:esch256v2
463.62463.62465.88asconhashbi32v12
534.00534.25536.88T:photonbeetlehash256rate32v1
577.75579.75583.75T:romulush
864.00864.00865.25T:esch384v2