VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.137.147.15sha512
8.748.748.75shake128
10.1210.1410.21sha256
16.5516.5716.95asconhashav12
16.5516.5716.94asconxofav12
16.7516.7616.92T:xoodyakv1
25.2525.2725.33asconhashv12
24.6725.3225.33asconxofv12
32.3932.3932.41asconhashabi32v12
43.0543.0643.07T:romulush
45.8845.9345.97T:esch256v2
48.5848.6248.68asconhashbi32v12
66.7766.8066.83T:esch384v2
281.86281.90281.95T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.877.887.88sha512
8.948.958.96shake128
10.7710.7910.80sha256
16.7216.7416.77asconhashav12
16.7316.8217.08asconxofav12
16.8817.0017.01T:xoodyakv1
24.9324.9725.50asconxofv12
24.9325.4725.50asconhashv12
32.8132.8132.83asconhashabi32v12
43.4143.4343.44T:romulush
46.1846.2246.25T:esch256v2
48.9748.9749.01asconhashbi32v12
67.4567.4967.67T:esch384v2
281.37281.44281.48T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.049.059.07sha512
9.559.559.58shake128
11.8211.8411.86sha256
17.0017.0217.07asconxofav12
16.9917.0317.08asconhashav12
17.0217.0417.05T:xoodyakv1
25.3025.8325.87asconxofv12
25.4325.8525.87asconhashv12
33.5233.5333.54asconhashabi32v12
44.0644.1044.13T:romulush
46.6646.6846.76T:esch256v2
49.6249.6449.69asconhashbi32v12
68.5668.5868.61T:esch384v2
280.50280.55280.60T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.2610.2610.28shake128
11.5211.5411.56sha512
14.6514.6614.67sha256
17.4517.4717.49T:xoodyakv1
17.7417.8018.06asconxofav12
17.7517.8117.93asconhashav12
26.4426.5226.80asconxofv12
26.7726.8626.91asconhashv12
35.3135.3635.38asconhashabi32v12
45.7745.8545.96T:romulush
47.9948.0548.16T:esch256v2
51.3851.4251.46asconhashbi32v12
71.5371.5771.60T:esch384v2
278.09278.22278.32T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.9223.0323.11T:xoodyakv1
23.8123.8123.91shake128
27.0627.3827.80asconhashav12
27.3427.5527.94asconxofav12
38.6138.9139.14asconxofv12
39.0239.1439.14asconhashv12
45.4545.5245.75sha512
50.6450.8150.94sha256
59.1959.2359.44asconhashabi32v12
64.5264.7364.91T:esch256v2
66.7366.9567.31T:romulush
73.5273.8374.09asconhashbi32v12
109.55109.59109.81T:esch384v2
248.03248.55249.08T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
82.2582.7583.88T:xoodyakv1
103.38103.88104.50asconhashav12
103.75105.25107.25asconxofav12
133.88134.62135.00asconxofv12
134.00134.62136.12asconhashv12
189.25189.38189.88shake128
190.62192.25194.62T:romulush
241.75243.75243.88T:esch256v2
247.38248.00249.38asconhashabi32v12
248.88249.50250.12asconhashbi32v12
290.00291.62293.75T:photonbeetlehash256rate32v1
321.88323.88324.25sha256
363.00364.12365.12sha512
475.50475.88476.38T:esch384v2