VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.232.232.24sha256
10.3310.3610.37sha512
10.5210.5310.53shake128
17.1617.2017.20T:xoodyakv1
19.6219.6319.63asconhashav12
19.6219.6319.64asconxofav12
29.3429.3429.35asconxofv12
29.3429.3429.35asconhashv12
39.5339.5739.66asconhashabi32v12
43.6043.6343.69T:esch256v2
51.1551.3751.49T:romulush
58.4958.8859.00asconhashbi32v12
63.7064.0764.25T:esch384v2
313.17313.38313.93T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.282.282.29sha256
10.7610.7610.77shake128
11.2111.2211.25sha512
17.2317.3117.34T:xoodyakv1
19.8219.8219.83asconxofav12
19.8219.8219.83asconhashav12
29.5929.5929.60asconxofv12
29.5929.5929.60asconhashv12
40.0140.0240.03asconhashabi32v12
43.9143.9344.01T:esch256v2
51.7251.8452.05T:romulush
58.6958.8159.37asconhashbi32v12
64.3364.5964.84T:esch384v2
312.58313.12313.32T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.352.362.36sha256
11.4811.4811.49shake128
12.6412.6712.76sha512
17.2617.3317.47T:xoodyakv1
20.1420.1420.16asconxofav12
20.1420.1520.16asconhashav12
30.0030.0130.02asconxofv12
30.0130.0230.03asconhashv12
40.5440.6040.64asconhashabi32v12
44.4044.4144.45T:esch256v2
52.4652.5852.77T:romulush
60.1660.1760.19asconhashbi32v12
65.3765.6765.91T:esch384v2
311.66312.15312.51T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.562.572.58sha256
12.2612.2712.29shake128
15.6415.8215.89sha512
17.7417.8117.82T:xoodyakv1
20.9820.9921.03asconxofav12
21.0121.0321.07asconhashav12
31.1131.1331.16asconxofv12
31.1131.1431.18asconhashv12
42.1742.2142.28asconhashabi32v12
45.6945.7345.82T:esch256v2
54.5154.7254.88T:romulush
62.0062.3162.35asconhashbi32v12
68.2968.6868.78T:esch384v2
308.94309.53309.72T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.235.275.33sha256
22.1222.2722.34T:xoodyakv1
28.0628.0828.08shake128
31.8332.2232.67asconhashav12
31.8432.3832.72asconxofav12
45.2245.4545.97asconhashv12
45.1145.5045.61asconxofv12
57.3958.0959.62sha512
61.2861.3461.72T:esch256v2
62.3062.4862.77asconhashabi32v12
79.6180.0680.77T:romulush
88.3188.8689.14asconhashbi32v12
104.55104.61104.86T:esch384v2
274.23274.48274.69T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.3827.5028.00sha256
75.1275.6280.00T:xoodyakv1
114.00114.62118.50asconxofav12
114.75115.62116.12asconhashav12
153.75154.50157.88asconhashv12
153.75157.00157.88asconxofv12
221.25222.00224.25asconhashabi32v12
224.25224.50224.75shake128
226.12227.38230.12T:romulush
228.62228.88232.00T:esch256v2
297.50298.88300.88asconhashbi32v12
316.75318.25319.25T:photonbeetlehash256rate32v1
451.88453.38455.00T:esch384v2
451.62459.25469.75sha512