VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.232.232.24sha256
10.3110.3610.40sha512
10.5310.5310.54shake128
17.1617.1717.21T:xoodyakv1
19.6219.6319.63asconxofav12
19.6219.6319.63asconhashav12
29.3429.3429.35asconhashv12
29.3429.3429.35asconxofv12
39.5739.6639.68asconhashabi32v12
43.6243.6543.66T:esch256v2
51.1251.3351.44T:romulush
58.3158.5758.97asconhashbi32v12
63.5863.9464.25T:esch384v2
313.18313.55314.60T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.282.282.29sha256
10.7610.7710.77shake128
11.2211.2811.34sha512
17.3017.3117.34T:xoodyakv1
19.8219.8219.83asconxofav12
19.8219.8219.83asconhashav12
29.5929.5929.60asconhashv12
29.5929.5929.60asconxofv12
39.9440.0340.06asconhashabi32v12
43.9143.9243.93T:esch256v2
51.7451.8452.12T:romulush
58.8259.3559.38asconhashbi32v12
64.2864.5864.83T:esch384v2
312.57312.71313.73T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.352.362.37sha256
11.4811.4911.50shake128
12.7012.7812.84sha512
17.2617.3317.47T:xoodyakv1
20.1420.1420.16asconhashav12
20.1420.1520.17asconxofav12
30.0030.0130.02asconhashv12
30.0130.0130.03asconxofv12
40.5640.6540.67asconhashabi32v12
44.3944.4044.42T:esch256v2
52.5352.6052.72T:romulush
59.6560.1560.18asconhashbi32v12
65.3165.7965.92T:esch384v2
311.69312.53312.76T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.572.572.61sha256
12.2712.2712.30shake128
15.5315.6415.71sha512
17.7417.7417.74T:xoodyakv1
21.0021.0221.06asconhashav12
21.0021.0321.07asconxofav12
31.1031.1331.15asconhashv12
31.1131.1331.16asconxofv12
42.1942.2542.28asconhashabi32v12
45.6845.6945.71T:esch256v2
54.5354.6854.88T:romulush
61.7862.2662.30asconhashbi32v12
68.2768.6768.79T:esch384v2
308.92309.07311.55T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.365.785.91sha256
22.1222.2722.34T:xoodyakv1
28.0828.1128.14shake128
31.7231.8932.25asconhashav12
31.7832.0532.38asconxofav12
45.1245.2845.48asconhashv12
44.9545.3145.62asconxofv12
56.9758.2759.25sha512
60.9861.0561.28T:esch256v2
62.4462.6162.78asconhashabi32v12
79.4279.4580.17T:romulush
88.3988.6989.00asconhashbi32v12
104.25104.72104.83T:esch384v2
274.14274.31276.44T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
29.2530.1231.12sha256
75.1275.1276.12T:xoodyakv1
114.38115.38116.88asconhashav12
114.50116.12118.50asconxofav12
153.88157.12159.50asconxofv12
157.00157.62158.75asconhashv12
221.50223.88224.50asconhashabi32v12
224.25224.38224.75shake128
226.12226.12227.00T:romulush
230.62231.00233.00T:esch256v2
297.00299.38300.62asconhashbi32v12
315.75317.38318.88T:photonbeetlehash256rate32v1
450.88452.50454.88T:esch384v2
448.25459.38475.62sha512