VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.397.397.40sha512
8.508.518.51shake128
10.1310.1410.15sha256
14.9314.9414.95T:xoodyakv1
16.7016.7116.72asconxofav12
16.7016.7116.72asconhashav12
24.9524.9624.97asconhashv12
24.9824.9925.01asconxofv12
32.3832.4032.47asconhashabi32v12
40.6140.6640.92T:romulush
44.9845.0045.01T:esch256v2
48.4148.4448.54asconhashbi32v12
53.8753.8853.94T:esch384v2
281.64281.68281.88T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.178.178.18sha512
8.708.718.71shake128
10.8210.8410.86sha256
15.0215.0315.06T:xoodyakv1
16.8516.8716.90asconxofav12
16.8616.8816.91asconhashav12
25.1725.1925.20asconhashv12
25.2125.2225.26asconxofv12
32.8132.8232.84asconhashabi32v12
41.0041.0441.24T:romulush
45.2845.3045.31T:esch256v2
48.7448.8148.89asconhashbi32v12
54.4154.4254.47T:esch384v2
281.06281.12281.17T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.309.319.31shake128
9.439.459.48sha512
11.9511.9712.00sha256
15.1815.2015.22T:xoodyakv1
17.1317.1517.17asconxofav12
17.1317.1517.21asconhashav12
25.5525.5725.59asconhashv12
25.5825.6025.62asconxofv12
33.5033.5133.55asconhashabi32v12
41.5741.6841.82T:romulush
45.7745.7945.81T:esch256v2
49.3849.4149.42asconhashbi32v12
55.3055.3355.37T:esch384v2
280.18280.27280.32T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.0010.0110.04shake128
12.1012.1112.23sha512
15.0015.0515.12sha256
15.5815.6015.64T:xoodyakv1
17.9617.9718.00asconxofav12
17.9517.9817.99asconhashav12
26.4826.5226.55asconhashv12
26.6226.6626.71asconxofv12
35.2735.3235.41asconhashabi32v12
43.2443.3543.51T:romulush
47.0747.1047.12T:esch256v2
51.1451.1651.25asconhashbi32v12
57.6957.7357.76T:esch384v2
277.70277.84278.02T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
20.7220.9721.14T:xoodyakv1
23.3323.4123.53shake128
27.0327.1727.23asconhashav12
27.0327.1727.39asconxofav12
38.5038.6938.91asconxofv12
38.5938.7238.88asconhashv12
49.3649.5049.84sha512
53.9854.2055.03sha256
58.2758.4158.69asconhashabi32v12
63.3863.4463.81T:esch256v2
63.3663.5063.81T:romulush
73.2573.3873.56asconhashbi32v12
88.0888.2388.47T:esch384v2
247.05247.72248.38T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
76.1277.1278.75T:xoodyakv1
100.12100.50101.12asconhashav12
99.62100.75102.12asconxofav12
133.38134.25135.50asconxofv12
133.75134.75135.00asconhashv12
182.62184.38185.62T:romulush
186.12186.62187.38shake128
239.88241.00246.00asconhashabi32v12
240.75242.50243.75T:esch256v2
248.38249.00249.50asconhashbi32v12
286.00287.12288.25T:photonbeetlehash256rate32v1
349.50351.75357.75sha256
383.38384.25386.38T:esch384v2
394.75395.75397.25sha512