VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.107.147.42sha512
8.848.858.85shake128
10.1310.1410.17sha256
16.6016.6116.62T:xoodyakv1
16.5216.9116.92asconhashav12
16.8216.9116.92asconxofav12
24.6624.7325.33asconhashv12
24.9625.2725.27asconxofv12
32.4532.4632.47asconhashabi32v12
43.5743.6043.63T:romulush
44.6844.6944.72T:esch256v2
47.9647.9848.00asconhashbi32v12
65.4565.4765.51T:esch384v2
280.36280.43280.58T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.868.058.12sha512
9.049.059.06shake128
10.6810.6910.70sha256
16.7016.7116.72T:xoodyakv1
16.8317.0917.10asconxofav12
16.8317.0917.10asconhashav12
24.9625.0925.50asconhashv12
25.4725.4925.50asconxofv12
32.8532.8632.87asconhashabi32v12
43.9643.9744.00T:romulush
44.9644.9744.97T:esch256v2
48.4148.4148.45asconhashbi32v12
66.1366.1666.18T:esch384v2
279.84279.93280.02T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.099.249.34sha512
9.669.679.68shake128
11.5711.5911.61sha256
16.8516.8616.87T:xoodyakv1
17.2817.3617.40asconhashav12
17.3417.3617.39asconxofav12
25.3025.3625.87asconhashv12
25.8425.8625.87asconxofv12
33.5033.5133.54asconhashabi32v12
44.5844.6344.67T:romulush
45.4045.4145.43T:esch256v2
49.2049.2149.21asconhashbi32v12
67.2567.2867.33T:esch384v2
278.91279.02279.09T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.3610.3810.40shake128
11.4911.7311.95sha512
14.0214.0514.10sha256
17.2617.2817.30T:xoodyakv1
17.8617.9217.96asconxofav12
17.8717.9217.96asconhashav12
26.2926.3526.83asconhashv12
26.4526.5026.54asconxofv12
35.2135.2935.36asconhashabi32v12
46.3246.4046.45T:romulush
46.7146.7246.73T:esch256v2
51.2651.2651.30asconhashbi32v12
70.3270.3870.40T:esch384v2
276.53276.66276.78T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.5822.6622.77T:xoodyakv1
24.1424.1924.30shake128
27.2827.4527.70asconxofav12
27.4527.4527.69asconhashav12
38.7738.8638.91asconxofv12
38.7039.0939.56asconhashv12
45.2545.3645.69sha256
43.5545.5645.80sha512
57.8458.0058.11asconhashabi32v12
63.0263.2363.36T:esch256v2
68.1768.3968.62T:romulush
77.5677.6677.66asconhashbi32v12
108.88109.30109.62T:esch384v2
246.06246.19246.70T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
80.5080.8881.62T:xoodyakv1
99.88100.00101.12asconxofav12
100.00100.62101.88asconhashav12
133.88135.38135.88asconxofv12
137.00137.88139.25asconhashv12
191.88192.38192.88shake128
194.38194.50196.00T:romulush
235.38236.75236.75asconhashabi32v12
236.00237.12238.25T:esch256v2
278.88280.88284.25sha256
284.38285.50286.25T:photonbeetlehash256rate32v1
283.88285.62286.50asconhashbi32v12
355.12363.75365.12sha512
475.62477.12479.00T:esch384v2