VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20250415

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.299.299.29sha512
10.4210.4210.42shake128
14.6214.6314.63sha256
17.8817.8817.88asconhashav12
17.8717.8817.88asconxofav12
26.6226.6226.63asconhashv12
26.6226.6326.63asconxofv12
28.9028.9028.90T:xoodyakv1
35.8735.8835.88asconhashabi32v12
53.8753.8853.92asconhashbi32v12
65.5065.6666.89T:esch256v2
94.7395.6595.84T:esch384v2
128.03128.05128.07T:romulush
398.35398.83399.58T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
9.669.669.66sha512
10.6510.6510.66shake128
14.9214.9214.92sha256
18.0518.0518.05asconhashav12
18.0518.0518.05asconxofav12
26.8626.8626.86asconxofv12
26.8626.8626.86asconhashv12
29.0429.0429.05T:xoodyakv1
36.3436.3436.34asconhashabi32v12
54.4354.4354.43asconhashbi32v12
66.0166.0367.17T:esch256v2
94.5495.8096.50T:esch384v2
128.95128.96128.99T:romulush
397.85398.08398.53T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.2810.2810.28sha512
11.3811.3811.42shake128
15.4115.4115.42sha256
18.3518.3518.35asconhashav12
18.3518.3518.35asconxofav12
27.2427.2427.26asconxofv12
27.2527.2527.25asconhashv12
29.2829.2829.29T:xoodyakv1
37.1237.1237.12asconhashabi32v12
55.3555.3555.36asconhashbi32v12
66.9066.9067.86T:esch256v2
96.0597.3498.03T:esch384v2
130.53130.53130.54T:romulush
396.75396.76397.27T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.9410.9510.97sha512
12.2512.2612.29shake128
16.7216.7316.74sha256
19.1519.1519.15asconhashav12
19.1519.1519.15asconxofav12
28.2628.2628.32asconxofv12
28.2828.2828.28asconhashv12
29.9229.9329.93T:xoodyakv1
39.1939.1939.19asconhashabi32v12
57.8257.8257.82asconhashbi32v12
68.5168.7069.70T:esch256v2
100.08101.37102.15T:esch384v2
134.78134.83134.86T:romulush
392.90393.41394.10T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
23.5623.5623.58sha512
28.6128.6129.12shake128
29.4729.4729.47asconhashav12
29.4729.4729.48asconxofav12
33.5633.5633.61sha256
38.0238.0338.03T:xoodyakv1
41.0041.0041.52asconxofv12
41.0541.0541.05asconhashv12
65.3865.5065.50asconhashabi32v12
89.1689.1689.17asconhashbi32v12
91.7891.8093.30T:esch256v2
151.70153.72154.84T:esch384v2
188.81188.84188.92T:romulush
349.89350.30351.72T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
106.62106.62106.88asconhashav12
106.62106.75109.00asconxofav12
127.62127.62130.00T:xoodyakv1
141.62141.62143.75asconhashv12
141.62145.75145.88asconxofv12
147.12147.12147.25sha256
188.50188.50188.50sha512
227.75227.75230.50shake128
271.88271.88273.62asconhashabi32v12
336.12336.12340.00asconhashbi32v12
334.38336.62341.38T:esch256v2
398.50399.88401.12T:photonbeetlehash256rate32v1
486.25488.12488.62T:romulush
647.25659.00663.62T:esch384v2