VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20250415

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
14.3614.3814.50sha512
18.4618.4818.51sha256
18.9618.9718.99shake128
26.7526.7526.75asconhashav12
26.7526.7526.75asconxofav12
39.7539.7539.75asconxofv12
39.7539.7539.76asconhashv12
47.5047.5147.53T:xoodyakv1
63.0063.0063.11asconhashabi32v12
94.2594.2794.80asconhashbi32v12
123.32123.35124.01T:esch256v2
159.87160.60162.04T:esch384v2
196.01196.32196.80T:romulush
929.21929.85930.54T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
16.5716.6116.69sha512
19.3919.3919.39shake128
20.4920.5120.54sha256
27.0227.0227.02asconhashav12
27.0227.0227.02asconxofav12
40.1040.1040.10asconhashv12
40.1040.1040.10asconxofv12
47.7647.7647.76T:xoodyakv1
63.7963.8063.80asconhashabi32v12
95.2195.2195.22asconhashbi32v12
124.08124.09124.10T:esch256v2
161.39161.39161.40T:esch384v2
197.60197.60197.62T:romulush
926.32928.86930.57T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.3820.4520.52sha512
20.7420.7420.75shake128
23.9023.9524.00sha256
27.4627.4627.46asconhashav12
27.4627.4627.47asconxofav12
40.6740.6740.67asconxofv12
40.6740.6740.68asconhashv12
48.1948.1948.19T:xoodyakv1
65.1265.1265.14asconhashabi32v12
96.8296.8296.83asconhashbi32v12
125.37125.37125.38T:esch256v2
164.02164.02164.04T:esch384v2
200.28200.28200.30T:romulush
923.26923.44923.64T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
22.2922.3022.32shake128
28.6328.6328.63asconxofav12
28.6328.6428.64asconhashav12
28.9829.1229.28sha512
33.0833.2533.41sha256
42.2142.2142.22asconhashv12
42.2142.2142.22asconxofv12
49.3449.3449.38T:xoodyakv1
68.6568.6668.70asconhashabi32v12
101.10101.11101.17asconhashbi32v12
128.80128.80128.83T:esch256v2
171.04171.04171.05T:esch384v2
207.41207.41207.44T:romulush
915.36915.40915.70T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
43.5343.6443.64asconhashav12
43.5343.6443.64asconxofav12
51.7351.7352.06shake128
61.6961.8061.80asconhashv12
61.6961.8061.80asconxofv12
64.0964.0964.20T:xoodyakv1
113.64113.64113.75asconhashabi32v12
146.89147.98149.19sha512
149.84151.16152.03sha256
155.64155.75155.75asconhashbi32v12
172.70172.70172.70T:esch256v2
260.86260.86263.16T:esch384v2
298.59298.59298.81T:romulush
814.30814.30814.41T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
161.00161.00161.88asconxofav12
161.00161.00162.75asconhashav12
212.62212.62215.25asconxofv12
212.62213.50215.25asconhashv12
218.75218.75221.38T:xoodyakv1
411.25411.25413.88shake128
467.25468.12470.75asconhashabi32v12
585.38585.38589.75asconhashbi32v12
645.75646.62647.50T:esch256v2
826.00826.00826.88T:romulush
942.38942.38943.25T:photonbeetlehash256rate32v1
1063.121075.381082.38sha256
1129.621129.621130.50T:esch384v2
1173.381181.251195.25sha512