VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N5105; 4 x 2000MHz; jasper3, supercop-20250415

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.092.092.09sha256
10.1210.1310.18shake128
10.4110.4510.49sha512
17.0917.1817.18T:xoodyakv1
19.3419.3719.38asconhashav12
19.3319.4119.53asconxofav12
28.8428.9529.29asconhashv12
28.8529.1829.31asconxofv12
43.6143.6243.64T:esch256v2
44.1244.4444.54asconhashabi32v12
51.1951.3251.56T:romulush
63.5763.8564.11T:esch384v2
67.3167.3167.31asconhashbi32v12
313.08313.51316.09T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.172.172.17sha256
10.5210.5310.56shake128
10.8010.8410.87sha512
17.2317.2317.23T:xoodyakv1
19.5319.5719.58asconhashav12
19.5719.7019.70asconxofav12
29.1429.1929.51asconxofv12
29.1429.3329.51asconhashv12
43.9043.9043.91T:esch256v2
44.9244.9945.17asconhashabi32v12
51.5851.8152.00T:romulush
64.2764.4864.70T:esch384v2
67.9867.9867.98asconhashbi32v12
312.63313.08314.48T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.292.302.30sha256
11.4811.5011.53sha512
11.5111.5311.60shake128
17.2717.3317.47T:xoodyakv1
19.8919.9120.03asconxofav12
19.8819.9120.04asconhashav12
29.5729.5729.79asconxofv12
29.5629.6129.92asconhashv12
44.3744.3944.40T:esch256v2
45.8345.9045.92asconhashabi32v12
52.5052.6052.81T:romulush
65.3365.5665.76T:esch384v2
69.1069.1069.10asconhashbi32v12
311.41311.61312.70T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.632.632.64sha256
12.1712.2012.26sha512
13.0213.0413.11shake128
17.7517.8117.82T:xoodyakv1
20.6820.9020.94asconhashav12
20.9020.9020.92asconxofav12
30.7230.7331.02asconxofv12
30.6930.7531.04asconhashv12
45.6345.6345.66T:esch256v2
47.9748.3148.46asconhashabi32v12
54.5254.6754.73T:romulush
68.1868.3068.59T:esch384v2
72.0372.0572.12asconhashbi32v12
309.30309.36311.80T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
6.836.866.89sha256
22.1222.2322.28T:xoodyakv1
25.8926.0526.16sha512
31.7331.8332.31asconxofav12
31.8932.0532.33asconhashav12
37.8037.9438.12shake128
44.9845.1645.41asconxofv12
45.2345.4545.77asconhashv12
61.3061.3461.55T:esch256v2
79.1679.3879.50asconhashabi32v12
79.9280.5880.78T:romulush
104.33104.50104.83T:esch384v2
109.92110.09110.09asconhashbi32v12
274.16274.72276.80T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
38.5038.8839.12sha256
75.5076.1279.25T:xoodyakv1
118.00120.00122.00asconxofav12
119.50120.88122.25asconhashav12
157.88158.88160.00asconxofv12
157.12159.00160.38asconhashv12
205.50206.50207.50sha512
226.38227.00228.75T:romulush
230.50230.88231.50T:esch256v2
300.25301.00304.00shake128
315.50317.00319.50T:photonbeetlehash256rate32v1
323.12323.62323.75asconhashabi32v12
407.38408.75410.00asconhashbi32v12
450.75452.38454.62T:esch384v2