VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
6.936.946.95shake128
7.667.687.70sha256
14.5114.5214.54asconhashav12
14.5114.5214.54asconxofav12
15.0215.0315.05T:xoodyakv1
21.7321.7521.80asconxofv12
21.7321.7521.76asconhashv12
26.9627.0327.64asconhashabi32v12
34.1734.2234.53T:esch256v2
40.0740.2440.91asconhashbi32v12
44.5144.5344.81T:romulush
47.8447.9848.19T:esch384v2
224.04225.07231.64T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.465.46sha512
7.087.097.10shake128
8.238.258.26sha256
14.6614.6814.69asconhashav12
14.6714.6814.71asconxofav12
15.1515.1715.18T:xoodyakv1
21.9321.9521.97asconhashv12
21.9321.9521.96asconxofv12
27.3427.3727.76asconhashabi32v12
34.4134.4634.50T:esch256v2
40.5640.5740.98asconhashbi32v12
44.9144.9344.96T:romulush
48.2548.4448.47T:esch384v2
223.87225.21230.31T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.795.805.82sha512
7.587.587.59shake128
9.149.169.18sha256
14.8514.9014.95asconhashav12
14.9014.9214.96asconxofav12
15.3115.3415.36T:xoodyakv1
22.2422.2822.31asconxofv12
22.2522.2822.32asconhashv12
27.8728.2928.51asconhashabi32v12
34.8834.9334.98T:esch256v2
41.1941.6742.14asconhashbi32v12
45.5745.6145.65T:romulush
49.0449.2249.27T:esch384v2
223.14223.67230.25T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.106.126.15sha512
8.128.148.17shake128
11.7711.7811.81sha256
15.5115.5715.63asconxofav12
15.5315.5715.63asconhashav12
15.8515.9115.95T:xoodyakv1
23.0723.1323.19asconhashv12
23.0723.1523.22asconxofv12
29.1629.2229.64asconhashabi32v12
36.0636.1536.22T:esch256v2
42.8642.9443.57asconhashbi32v12
47.3647.4247.47T:romulush
51.2051.3551.44T:esch384v2
221.28221.56228.38T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.5212.5812.67sha512
18.5318.6018.83shake128
20.4120.6920.84T:xoodyakv1
23.3423.6024.05asconhashav12
23.5723.8924.37asconxofav12
33.5433.7434.23asconhashv12
33.5433.8634.30asconxofv12
43.2943.7243.98asconhashabi32v12
44.6044.8245.08sha256
48.6848.9849.39T:esch256v2
61.2661.4962.07asconhashbi32v12
69.8070.0870.90T:romulush
78.2578.7279.11T:esch384v2
196.48197.07201.89T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.1472.4773.74T:xoodyakv1
90.3891.0991.99asconhashav12
91.2091.9993.25asconxofav12
101.95103.41104.81sha512
119.40120.49123.45asconxofv12
119.85121.02122.29asconhashv12
146.38147.09148.10shake128
156.01156.62157.88asconhashabi32v12
181.31182.75186.30T:esch256v2
206.39208.95211.77T:romulush
208.44210.15212.99asconhashbi32v12
226.25227.85233.69T:photonbeetlehash256rate32v1
286.80288.04289.78sha256
336.78337.90339.56T:esch384v2