VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
7.097.097.10shake128
7.677.697.70sha256
14.4514.5214.54asconxofav12
14.4714.5214.53asconhashav12
15.0215.0315.04T:xoodyakv1
21.7321.7521.76asconhashv12
21.7321.7521.76asconxofv12
27.0127.7027.72asconhashabi32v12
34.5134.5434.56T:esch256v2
40.9141.2341.29asconhashbi32v12
44.4844.5144.54T:romulush
48.0548.2349.57T:esch384v2
223.59231.58232.39T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.455.46sha512
7.237.247.25shake128
8.238.248.25sha256
14.6514.6614.68asconhashav12
14.6414.6814.70asconxofav12
15.1415.1615.17T:xoodyakv1
21.9421.9521.97asconhashv12
21.9521.9621.99asconxofv12
27.4128.0128.03asconhashabi32v12
34.7734.8034.83T:esch256v2
40.5540.6541.37asconhashbi32v12
44.8844.9044.91T:romulush
48.6648.6849.91T:esch384v2
224.10231.11231.20T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.785.795.81sha512
7.727.747.76shake128
9.159.179.21sha256
14.8614.9114.93asconxofav12
14.8714.9114.94asconhashav12
15.3115.3415.36T:xoodyakv1
22.2422.2722.31asconxofv12
22.2622.2922.30asconhashv12
28.4928.5228.54asconhashabi32v12
35.2235.2535.28T:esch256v2
41.2141.2442.02asconhashbi32v12
45.5545.5845.61T:romulush
49.4449.4950.72T:esch384v2
223.39230.36230.43T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.126.136.15sha512
8.288.288.32shake128
11.7911.8111.84sha256
15.5115.5815.62asconhashav12
15.5215.5915.64asconxofav12
15.8715.9115.96T:xoodyakv1
23.1123.1523.21asconhashv12
23.0923.1523.19asconxofv12
29.7929.8129.85asconhashabi32v12
36.4136.4536.52T:esch256v2
42.8943.0043.78asconhashbi32v12
47.3147.3547.39T:romulush
51.5851.6752.82T:esch384v2
221.37228.39228.48T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.5912.6612.75sha512
18.6118.7319.03shake128
20.6920.8621.02T:xoodyakv1
23.6223.7724.20asconhashav12
23.6923.8824.36asconxofav12
33.6434.0234.34asconxofv12
33.8334.1934.59asconhashv12
43.7043.8644.12asconhashabi32v12
44.8145.0245.25sha256
48.9849.1949.45T:esch256v2
61.3361.4861.77asconhashbi32v12
69.7269.9770.14T:romulush
78.7779.5280.22T:esch384v2
196.97203.02203.53T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
75.2576.8877.38T:xoodyakv1
90.6291.2592.38asconhashav12
91.7592.3893.12asconxofav12
100.38101.50102.25sha512
120.12120.88121.75asconhashv12
120.50120.88122.50asconxofv12
147.25148.25149.62shake128
156.12156.75157.50asconhashabi32v12
182.88184.62186.12T:esch256v2
202.25203.00204.00T:romulush
208.88209.62210.50asconhashbi32v12
228.12234.12235.25T:photonbeetlehash256rate32v1
288.38289.75290.88sha256
339.00341.38346.00T:esch384v2