VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Sandy Bridge (206a7); 2011 Intel Core i3-2310M; 2 x 2100MHz; h6sandy, supercop-20241022

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.967.977.98sha512
9.669.669.67shake128
11.4611.4711.48sha256
16.6916.7716.91T:xoodyakv1
19.6319.6519.66asconhashav12
19.7319.7519.75asconxofav12
29.4829.5029.51asconhashv12
29.4929.5129.53asconxofv12
36.0836.0936.11asconhashabi32v12
43.0243.0543.07T:romulush
53.3253.3453.40T:esch256v2
53.4153.4253.43asconhashbi32v12
67.9168.6468.87T:esch384v2
292.76292.92293.44T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.708.718.73sha512
9.899.909.91shake128
12.0912.1112.12sha256
16.8816.9417.01T:xoodyakv1
19.8419.8619.87asconhashav12
19.9319.9419.96asconxofav12
29.7529.7629.77asconhashv12
29.7429.7729.78asconxofv12
36.5236.5336.54asconhashabi32v12
43.4143.4443.45T:romulush
53.6353.6853.71T:esch256v2
53.9553.9653.98asconhashbi32v12
68.5669.3469.44T:esch384v2
292.19292.29292.60T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.939.959.96sha512
10.5810.6010.61shake128
13.1613.1813.19sha256
17.0317.0517.06T:xoodyakv1
20.1720.1920.21asconhashav12
20.2420.2820.30asconxofav12
30.1530.1730.20asconxofv12
30.1630.1930.23asconhashv12
37.2437.2737.30asconhashabi32v12
44.0644.0944.13T:romulush
54.2054.2454.32T:esch256v2
54.8554.8754.88asconhashbi32v12
69.5070.4070.44T:esch384v2
291.46292.18292.47T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.3811.4011.43shake128
12.3912.4312.46sha512
15.9515.9715.99sha256
17.4717.4917.52T:xoodyakv1
21.1021.1221.16asconxofav12
21.0821.1321.15asconhashav12
31.1431.2431.33asconhashv12
31.3431.4431.47asconxofv12
39.2039.2439.30asconhashabi32v12
45.7745.8245.89T:romulush
55.6755.7455.81T:esch256v2
57.2057.2757.34asconhashbi32v12
73.5473.7174.46T:esch384v2
289.26289.88290.27T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
23.1123.1723.36T:xoodyakv1
26.7826.8927.00shake128
31.8131.9132.16asconhashav12
31.8031.9232.12asconxofav12
45.2345.3945.78asconhashv12
45.0645.4245.59asconxofv12
47.8848.2048.55sha512
52.3152.3952.53sha256
64.3464.4564.59asconhashabi32v12
67.1967.3367.62T:romulush
75.2375.4875.86T:esch256v2
87.4787.6687.84asconhashbi32v12
111.56112.62112.95T:esch384v2
257.70258.38259.70T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
83.6284.0084.88T:xoodyakv1
116.75117.38118.12asconxofav12
117.12118.00118.62asconhashav12
155.50156.88158.00asconhashv12
156.25157.00157.62asconxofv12
192.88193.62194.75T:romulush
213.25214.00215.12shake128
257.25258.38259.75asconhashabi32v12
281.12282.00282.75T:esch256v2
300.62301.50303.12T:photonbeetlehash256rate32v1
324.50325.75332.38sha256
326.38327.00327.62asconhashbi32v12
385.38386.50388.12sha512
484.25489.12494.62T:esch384v2