VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260627

[Page version: 20260713 22:20:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.164.184.20sha512
5.365.375.37shake128
10.2510.2510.25asconhashav12
10.2510.2510.25asconxofav12
12.3212.5112.98T:xoodyakv1
15.2515.2515.25asconhashv12
15.2515.2515.25asconxofv12
24.6324.6324.63asconhashabi32v12
33.5033.5633.59T:esch256v2
36.6236.6336.64asconhashbi32v12
44.3844.4644.70T:romulush
45.3445.7746.01T:esch384v2
212.50212.82214.31T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.504.524.55sha512
5.475.485.51shake128
10.3610.3610.36asconhashav12
10.3610.3610.37asconxofav12
12.3212.5212.69T:xoodyakv1
15.3915.3915.39asconhashv12
15.3915.3915.39asconxofv12
24.9224.9224.92asconhashabi32v12
33.7733.8134.05T:esch256v2
36.9536.9536.96asconhashbi32v12
44.7444.7945.16T:romulush
45.8646.1646.28T:esch384v2
212.32212.48213.68T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.102.112.11sha256
5.095.125.15sha512
5.855.865.87shake128
10.5410.5410.54asconxofav12
10.54?10.55?16.43?asconhashav12
12.3812.5112.63T:xoodyakv1
15.6215.6215.63asconhashv12
15.6215.6215.63asconxofv12
25.4125.4125.42asconhashabi32v12
34.1734.2134.39T:esch256v2
37.5037.5037.50asconhashbi32v12
45.4245.4445.64T:romulush
46.6846.9547.21T:esch384v2
211.40211.92212.51T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.252.262.26sha256
6.216.256.31sha512
6.306.316.31shake128
11.0211.0211.06asconxofav12
11.0211.0211.04asconhashav12
12.8712.9913.37T:xoodyakv1
16.2316.2316.24asconxofv12
16.2316.2316.27asconhashv12
26.7126.7126.74asconhashabi32v12
35.2735.3835.52T:esch256v2
38.9438.9438.97asconhashbi32v12
47.0947.1447.42T:romulush
48.8748.9449.04T:esch384v2
209.08209.59211.02T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.124.144.17sha256
14.7114.7715.56shake128
16.2916.4616.66T:xoodyakv1
17.1917.2017.25asconhashav12
17.1717.2117.45asconxofav12
21.9822.3822.68sha512
24.0624.0724.08asconxofv12
24.0724.0824.10asconhashv12
43.3943.3943.50asconhashabi32v12
48.9249.2349.51T:esch256v2
57.4257.4257.48asconhashbi32v12
68.5868.8768.89T:romulush
73.4874.2274.92T:esch384v2
186.19187.25188.78T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
25.0625.4325.79sha256
55.0057.8858.95T:xoodyakv1
65.8166.0366.97asconhashav12
66.0367.8669.32asconxofav12
85.7585.7786.07asconxofv12
85.7585.7986.28asconhashv12
117.25117.25123.61shake128
174.75174.75175.53asconhashabi32v12
177.47179.96184.17sha512
183.70185.54187.35T:esch256v2
191.38193.49195.09T:romulush
203.00203.03203.61asconhashbi32v12
207.48210.26213.76T:photonbeetlehash256rate32v1
318.53321.28327.94T:esch384v2