VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.977.987.98sha512
9.689.709.72shake128
11.4611.4811.49sha256
16.6416.6416.81T:xoodyakv1
19.6519.6619.66asconhashav12
19.6519.6619.67asconxofav12
29.4829.4929.50asconhashv12
29.5129.5229.53asconxofv12
36.0936.0936.10asconhashabi32v12
43.0343.0643.22T:romulush
53.2953.3453.37T:esch256v2
53.4253.4253.44asconhashbi32v12
67.7368.0368.66T:esch384v2
304.28304.69305.97T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.708.708.72sha512
9.919.929.97shake128
12.1112.1212.13sha256
16.7416.7416.75T:xoodyakv1
19.8519.8619.88asconxofav12
19.8519.8619.88asconhashav12
29.7429.7529.78asconxofv12
29.7529.7529.77asconhashv12
36.5236.5436.55asconhashabi32v12
43.4243.4543.60T:romulush
53.6353.6953.72T:esch256v2
53.9453.9653.99asconhashbi32v12
68.4168.4769.27T:esch384v2
303.90304.13305.08T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.919.929.93sha512
10.5910.6010.66shake128
13.1613.1813.22sha256
16.9016.9016.92T:xoodyakv1
20.1620.1920.22asconxofav12
20.1820.2020.21asconhashav12
30.1430.1630.20asconxofv12
30.1730.1930.21asconhashv12
37.2437.2637.29asconhashabi32v12
44.0744.1344.22T:romulush
54.2054.2454.34T:esch256v2
54.8554.8754.91asconhashbi32v12
69.8369.8870.64T:esch384v2
303.22303.49304.74T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.3611.4111.59shake128
12.3312.3712.43sha512
15.9415.9716.00sha256
17.3317.3517.36T:xoodyakv1
21.0921.1221.14asconxofav12
21.0821.1221.15asconhashav12
31.1431.1931.32asconhashv12
31.3831.4431.46asconxofv12
39.1839.2239.27asconhashabi32v12
45.8245.8946.00T:romulush
55.7255.7655.91T:esch256v2
57.2457.2857.33asconhashbi32v12
72.6172.7473.66T:esch384v2
300.52301.05301.87T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.8422.8822.95T:xoodyakv1
26.3326.4527.80shake128
31.7731.8932.05asconxofav12
31.8131.9832.17asconhashav12
45.0645.2845.48asconxofv12
45.3845.5645.78asconhashv12
47.6447.8648.09sha512
52.3652.6653.06sha256
64.3964.5664.75asconhashabi32v12
67.0567.3667.80T:romulush
75.1675.3975.47T:esch256v2
87.4887.6787.80asconhashbi32v12
111.41111.73112.56T:esch384v2
269.73271.08271.86T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
82.6283.2584.00T:xoodyakv1
116.62117.38118.50asconxofav12
117.38118.25119.50asconhashav12
155.50156.50157.38asconxofv12
155.75156.50157.88asconhashv12
193.12193.88195.88T:romulush
209.75211.50220.38shake128
257.50258.50260.00asconhashabi32v12
280.38281.50283.50T:esch256v2
290.62292.38295.00T:photonbeetlehash256rate32v1
326.38327.12328.75asconhashbi32v12
326.00327.88332.62sha256
380.88385.75388.88sha512
484.38489.50493.38T:esch384v2