VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Xeon E3-1275 V2; 4 x 3500MHz; hydra8, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.137.147.15sha512
8.808.818.81shake128
10.1310.1410.15sha256
16.6116.6116.62T:xoodyakv1
16.5116.7216.94asconxofav12
16.7816.9116.94asconhashav12
24.6625.1725.34asconxofv12
25.0625.2725.34asconhashv12
32.3532.3632.42asconhashabi32v12
44.7044.7645.02T:romulush
44.7944.8145.07T:esch256v2
48.5648.5848.80asconhashbi32v12
65.3865.4065.74T:esch384v2
283.09283.40283.63T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.867.887.92sha512
9.009.019.02shake128
10.7710.7810.82sha256
16.7016.7116.72T:xoodyakv1
16.7316.9517.07asconhashav12
16.7717.1017.10asconxofav12
24.9625.4825.51asconhashv12
24.9625.4825.51asconxofv12
32.7632.7732.79asconhashabi32v12
45.0645.0945.12T:esch256v2
45.2145.2645.28T:romulush
48.9748.9849.00asconhashbi32v12
66.0466.0766.10T:esch384v2
282.18282.33283.54T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.079.109.17sha512
9.619.639.65shake128
11.7911.8111.83sha256
16.8616.8716.88T:xoodyakv1
17.0017.2917.37asconhashav12
17.2317.3717.38asconxofav12
25.3225.7225.87asconhashv12
25.3225.7725.88asconxofv12
33.4533.4833.52asconhashabi32v12
45.5245.5445.61T:esch256v2
45.8645.9646.00T:romulush
49.6249.6249.66asconhashbi32v12
67.1367.1767.22T:esch384v2
281.28281.37281.58T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.3110.3310.34shake128
11.5511.6411.85sha512
14.5514.6014.68sha256
17.2817.3017.32T:xoodyakv1
18.0118.0718.12asconhashav12
17.9618.1018.12asconxofav12
26.7426.8326.88asconxofv12
26.7526.8626.94asconhashv12
35.3835.4035.42asconhashabi32v12
46.7846.8546.91T:esch256v2
47.8047.8647.93T:romulush
51.4451.4751.53asconhashbi32v12
70.1970.2370.26T:esch384v2
278.95279.06279.20T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.6722.7422.84T:xoodyakv1
23.9223.9224.02shake128
27.2627.4527.46asconxofav12
27.3727.8127.81asconhashav12
38.3038.8039.07asconhashv12
39.1139.1139.15asconxofv12
45.8546.5348.47sha512
49.6749.9550.44sha256
59.3159.3859.63asconhashabi32v12
63.2863.4863.67T:esch256v2
71.0871.2971.61T:romulush
73.6173.6173.77asconhashbi32v12
108.61108.89109.18T:esch384v2
248.84249.30249.67T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
81.7482.3882.95T:xoodyakv1
99.92100.49101.58asconxofav12
100.47100.95101.80asconhashav12
133.15133.90135.14asconxofv12
133.03134.06136.36asconhashv12
190.71191.12193.64shake128
217.86218.46219.42T:romulush
235.04235.79236.91T:esch256v2
247.15247.72249.17asconhashabi32v12
249.43249.97250.52asconhashbi32v12
289.39290.22291.21T:photonbeetlehash256rate32v1
315.45317.81321.41sha256
365.34368.41389.67sha512
473.46474.24476.32T:esch384v2