VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20261018

[Page version: 20261023 08:50:23]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.174.184.20sha512
5.365.365.37shake128
10.2510.2510.25asconxofav12
10.2510.2510.25asconhashav12
12.3012.5312.84T:xoodyakv1
15.2515.2515.25asconhashv12
15.2515.2515.25asconxofv12
24.6324.6324.63asconhashabi32v12
33.4633.5033.52T:esch256v2
36.6236.6336.63asconhashbi32v12
44.4544.4944.60T:romulush
47.1647.1847.23T:esch384v2
206.00206.09206.45T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.474.494.53sha512
5.485.485.52shake128
10.3610.3610.36asconhashav12
10.3610.3610.37asconxofav12
12.4712.6213.06T:xoodyakv1
15.3915.3915.39asconxofv12
15.3915.3915.39asconhashv12
24.9224.9224.93asconhashabi32v12
33.7633.8234.04T:esch256v2
36.9536.9536.96asconhashbi32v12
44.8344.8344.84T:romulush
47.6447.6547.67T:esch384v2
205.49205.66205.94T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.102.102.11sha256
5.045.095.11sha512
5.865.865.87shake128
10.5410.5410.56asconhashav12
10.5410.5410.55asconxofav12
12.6012.7313.14T:xoodyakv1
15.6215.6215.63asconxofv12
15.6215.6215.63asconhashv12
25.4125.4125.42asconhashabi32v12
34.1534.2434.69T:esch256v2
37.5037.5037.50asconhashbi32v12
45.4345.4445.47T:romulush
48.5648.5948.64T:esch384v2
204.97205.22205.33T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.252.252.26sha256
6.146.186.22sha512
6.296.306.31shake128
11.0211.0211.05asconhashav12
11.0211.0211.06asconxofav12
12.9913.1913.39T:xoodyakv1
16.2316.2316.24asconhashv12
16.2316.2316.27asconxofv12
26.7126.7126.73asconhashabi32v12
35.2235.2735.33T:esch256v2
38.9438.9438.97asconhashbi32v12
46.9947.0447.08T:romulush
50.3950.4350.53T:esch384v2
203.06203.23203.64T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.084.124.14sha256
14.7414.8615.64shake128
16.2616.4516.65T:xoodyakv1
17.1817.2117.44asconxofav12
17.1717.2317.38asconhashav12
21.8522.0122.31sha512
24.0624.0624.27asconxofv12
24.0824.0824.08asconhashv12
43.3943.3943.49asconhashabi32v12
48.8049.1049.56T:esch256v2
57.4257.4257.49asconhashbi32v12
67.7167.8468.01T:romulush
76.1176.2776.46T:esch384v2
180.06180.29180.68T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.6024.9625.19sha256
57.6159.5060.06T:xoodyakv1
66.0868.0770.45asconxofav12
66.6868.1269.65asconhashav12
85.7585.7587.22asconhashv12
85.9388.0088.48asconxofv12
116.92117.43123.23shake128
174.75174.75175.83asconhashabi32v12
175.18176.23178.41sha512
183.45185.26187.39T:esch256v2
190.19190.97191.96T:romulush
203.00203.00203.62asconhashbi32v12
205.41206.06206.32T:photonbeetlehash256rate32v1
330.93332.42337.68T:esch384v2