VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20241022

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
18.00?19.32?32.21?shake128
16.10?27.90?29.37?sha512
33.1233.1333.13asconxofav12
30.86?33.13?55.26?asconhashav12
48.9148.9148.91asconhashv12
48.9148.9148.91asconxofv12
49.3149.3249.37sha256
49.40?52.99?88.33?T:xoodyakv1
88.8195.3295.99asconhashbi32v12
60.11?103.01?107.44?asconhashabi32v12
96.29103.30103.94T:esch256v2
141.41?151.47?160.90?T:esch384v2
161.49?173.94?289.14?T:romulush
682.13?1217.07?1218.04?T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
19.78?19.79?31.64?shake128
19.48?30.79?30.81?sha512
33.46?33.46?53.53?asconhashav12
33.4633.4733.47asconxofav12
49.3349.3349.34asconxofv12
49.3349.3349.34asconhashv12
50.2850.2950.31sha256
53.25?53.26?85.20?T:xoodyakv1
96.2996.2996.29asconhashbi32v12
103.95103.95103.96T:esch256v2
65.17?104.26?104.26?asconhashabi32v12
153.24153.25161.52T:esch384v2
174.71?174.72?279.54?T:romulush
727.38?729.94?1163.43?T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
21.22?21.22?33.92?shake128
34.03?34.03?54.42?asconhashav12
34.0334.0434.04asconxofav12
22.35?35.64?35.68?sha512
50.0450.0450.05asconxofv12
50.04?50.05?80.04?asconhashv12
51.9051.9151.95sha256
53.73?53.73?85.95?T:xoodyakv1
97.91?97.91?156.63?asconhashbi32v12
105.07?105.08?168.09?T:esch256v2
66.49?106.36?106.36?asconhashabi32v12
155.78?164.18?249.47?T:esch384v2
177.21?177.23?283.55?T:romulush
724.86?1159.69?1160.31?T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
22.88?22.90?36.61?shake128
35.5335.5335.53asconxofav12
35.53?35.53?56.80?asconhashav12
28.71?45.91?46.44?sha512
51.9251.9451.95asconxofv12
51.93?51.95?83.02?asconhashv12
56.1356.2256.32sha256
55.02?87.93?87.93?T:xoodyakv1
102.23?102.24?163.52?asconhashbi32v12
108.05?108.05?172.82?T:esch256v2
70.01?111.95?111.97?asconhashabi32v12
162.59?171.28?260.01?T:esch384v2
183.89?183.93?294.14?T:romulush
1149.941149.991151.78T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
54.1954.4155.00asconxofav12
54.27?55.00?86.31?asconhashav12
54.62?55.67?86.61?shake128
75.6276.0076.36asconxofv12
75.64?76.08?120.45?asconhashv12
71.09?112.81?112.89?T:xoodyakv1
114.59115.03115.56sha256
146.22?146.58?233.42?T:esch256v2
115.86?182.95?183.62?asconhashabi32v12
124.62?184.14?188.59?sha512
157.88?250.94?251.53?asconhashbi32v12
249.16?262.22?399.00?T:esch384v2
268.75?269.48?429.28?T:romulush
1024.881025.271026.22T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
203.12?204.88?319.50?asconhashav12
203.75206.00207.75asconxofav12
265.38265.50268.38asconxofv12
263.62?267.75?420.38?asconhashv12
247.50?387.75?388.38?T:xoodyakv1
432.88?435.25?687.62?shake128
502.25502.38502.38sha256
549.25?552.25?874.62?T:esch256v2
469.75?742.75?742.88?asconhashabi32v12
762.38?764.25?1217.75?T:romulush
593.12?939.88?944.12?asconhashbi32v12
1086.00?1138.88?1732.00?T:esch384v2
1193.381194.001198.12T:photonbeetlehash256rate32v1
992.25?1469.62?1616.75?sha512