VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260217

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
4.164.174.18sha512
5.405.415.41shake128
10.2510.2510.25asconhashav12
10.2510.2510.25asconxofav12
12.2512.4212.60T:xoodyakv1
15.2515.2515.25asconxofv12
15.2515.2515.25asconhashv12
24.6224.6324.63asconhashabi32v12
33.5733.7633.80T:esch256v2
36.6236.6336.64asconhashbi32v12
43.5443.8646.93T:esch384v2
44.4244.4944.60T:romulush
206.03206.17206.81T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.524.544.56sha512
5.495.495.55shake128
10.3610.3610.36asconxofav12
10.3610.3610.36asconhashav12
12.1012.4412.87T:xoodyakv1
15.3915.3915.39asconxofv12
15.3915.3915.39asconhashv12
24.9224.9224.93asconhashabi32v12
33.7433.7533.77T:esch256v2
36.9536.9536.96asconhashbi32v12
44.3844.6747.37T:esch384v2
44.8244.8344.86T:romulush
205.50205.66206.51T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.102.112.11sha256
5.105.145.15sha512
5.865.875.87shake128
10.5410.5410.55asconhashav12
10.5410.5410.55asconxofav12
12.4112.5412.68T:xoodyakv1
15.6215.6215.63asconhashv12
15.6215.6215.62asconxofv12
25.4125.4125.42asconhashabi32v12
34.1534.1934.34T:esch256v2
37.4937.5037.50asconhashbi32v12
45.0345.0747.88T:esch384v2
45.4345.4545.47T:romulush
204.90204.99206.06T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.252.252.27sha256
6.196.246.30sha512
6.316.326.34shake128
11.0211.0211.04asconxofav12
11.0211.0211.03asconhashav12
12.5212.8213.27T:xoodyakv1
16.2316.2316.24asconhashv12
16.2316.2316.27asconxofv12
26.7126.7126.73asconhashabi32v12
35.2335.3035.38T:esch256v2
38.9438.9438.97asconhashbi32v12
46.8546.9149.84T:esch384v2
46.9947.0447.09T:romulush
203.06203.44204.21T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.084.134.22sha256
14.6114.6515.41shake128
16.0416.7917.08T:xoodyakv1
17.1917.1917.24asconxofav12
17.1917.1917.27asconhashav12
22.3922.8323.35sha512
24.0724.0824.10asconxofv12
24.0724.0824.11asconhashv12
43.3943.3943.48asconhashabi32v12
48.9049.1849.42T:esch256v2
57.4257.4257.48asconhashbi32v12
67.6867.8168.05T:romulush
70.7570.9775.38T:esch384v2
180.10180.26180.54T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.7024.9925.38sha256
58.1259.4562.02T:xoodyakv1
65.7565.7766.12asconhashav12
65.8165.8866.96asconxofav12
85.7585.8186.93asconhashv12
85.8085.8886.92asconxofv12
117.12117.12122.61shake128
174.75174.75175.53asconhashabi32v12
182.51184.66186.00sha512
183.16185.08186.99T:esch256v2
190.06190.96191.58T:romulush
203.00203.00203.62asconhashbi32v12
204.96205.14205.79T:photonbeetlehash256rate32v1
307.19311.23331.79T:esch384v2