VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.299.309.34sha512
10.5310.5410.61shake128
14.6314.6714.69sha256
18.3818.3818.42asconhashav12
18.3818.3818.42asconxofav12
27.6327.6627.67asconhashv12
27.6327.6727.68asconxofv12
29.5629.6329.63T:xoodyakv1
36.2536.2536.29asconhashabi32v12
54.4154.4254.45asconhashbi32v12
62.8462.9363.22T:esch256v2
91.9091.9792.12T:esch384v2
128.06128.08128.09T:romulush
387.35387.47387.61T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.2310.2510.26sha512
10.7710.7710.78shake128
15.4715.4815.63sha256
18.5518.5518.55asconhashav12
18.5518.5518.55asconxofav12
27.8527.8527.86asconxofv12
27.8527.8627.86asconhashv12
29.7129.7729.77T:xoodyakv1
36.7036.7036.70asconhashabi32v12
54.9254.9255.14asconhashbi32v12
63.2963.3063.60T:esch256v2
92.8192.8893.07T:esch384v2
128.99129.00129.02T:romulush
386.20386.39386.74T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.5211.5211.53shake128
11.7911.8111.82sha512
16.8516.8916.92sha256
18.8518.8518.85asconhashav12
18.8518.8518.85asconxofav12
28.2428.2428.24asconxofv12
28.2428.2428.25asconhashv12
29.9530.0130.01T:xoodyakv1
37.4537.4537.45asconhashabi32v12
55.8255.8355.85asconhashbi32v12
63.9864.0064.28T:esch256v2
94.3994.4694.58T:esch384v2
130.58130.60130.61T:romulush
385.14385.43385.85T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.4112.4312.45shake128
15.0615.1115.16sha512
19.6319.6319.63asconhashav12
19.6319.6319.64asconxofav12
20.6420.6720.73sha256
29.2629.2629.26asconxofv12
29.2629.2629.26asconhashv12
30.6530.6530.66T:xoodyakv1
39.4539.4539.45asconhashabi32v12
58.2458.2458.26asconhashbi32v12
65.8165.8666.10T:esch256v2
98.4898.5098.74T:esch384v2
134.74134.77134.81T:romulush
381.93382.19382.77T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
28.7028.8128.94shake128
29.4129.4129.41asconhashav12
29.4129.4129.45asconxofav12
38.7738.8038.89T:xoodyakv1
42.0642.0642.06asconxofv12
42.0642.0642.08asconhashv12
58.7258.9160.09sha512
64.7364.7364.73asconhashabi32v12
67.9868.0368.11sha256
88.8888.8988.91asconhashbi32v12
89.2889.5389.58T:esch256v2
151.12151.31151.61T:esch384v2
188.41188.48188.69T:romulush
338.86340.30341.56T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
106.38106.38108.38asconhashav12
106.38106.75108.38asconxofav12
129.00129.12129.75T:xoodyakv1
143.25143.25143.25asconxofv12
143.25143.38146.62asconhashv12
227.12228.75230.00shake128
264.12264.12266.50asconhashabi32v12
330.38331.38332.00asconhashbi32v12
334.12335.38336.38T:esch256v2
382.62384.00385.75T:photonbeetlehash256rate32v1
425.75426.38427.00sha256
473.00475.50477.12sha512
485.75487.38487.62T:romulush
652.25653.62654.50T:esch384v2