VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.255.25sha512
6.256.266.27shake128
7.707.717.73sha256
14.6114.6214.63asconhashav12
14.6014.6214.63asconxofav12
14.9414.9614.97T:xoodyakv1
21.8621.8721.89asconxofv12
21.8621.8721.89asconhashv12
27.3727.5627.72asconhashabi32v12
34.9334.9734.99T:esch256v2
40.6140.7040.90asconhashbi32v12
42.7042.7442.99T:romulush
44.6544.7445.43T:esch384v2
220.58220.79220.91T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.475.47sha512
6.416.446.45shake128
8.258.278.28sha256
14.7614.7814.79asconxofav12
14.7614.7814.79asconhashav12
15.0315.0415.06T:xoodyakv1
22.0522.0722.09asconhashv12
22.0722.0822.10asconxofv12
27.7427.9528.20asconhashabi32v12
35.2235.2535.28T:esch256v2
40.7740.9441.22asconhashbi32v12
43.1043.1343.30T:romulush
45.1645.1845.79T:esch384v2
220.26220.38220.56T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.795.805.82sha512
6.926.936.95shake128
9.169.189.20sha256
15.0015.0315.05asconxofav12
15.0115.0415.06asconhashav12
15.1615.1715.21T:xoodyakv1
22.3822.4022.43asconhashv12
22.3822.4122.43asconxofv12
28.4628.6628.71asconhashabi32v12
35.6635.7335.77T:esch256v2
41.5341.5541.59asconhashbi32v12
43.7543.8143.98T:romulush
45.9345.9546.52T:esch384v2
219.64219.71219.86T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.136.146.16sha512
7.547.577.60shake128
11.7411.7711.79sha256
15.5215.5615.60T:xoodyakv1
15.6315.6815.74asconxofav12
15.6515.6915.73asconhashav12
23.1923.2523.32asconhashv12
23.2223.2623.34asconxofv12
29.4829.7829.99asconhashabi32v12
36.8136.9336.99T:esch256v2
43.1843.2443.51asconhashbi32v12
45.3345.4145.62T:romulush
47.9448.0148.53T:esch384v2
217.99218.06218.16T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.5812.6212.69sha512
18.5318.6218.75shake128
20.4420.7520.95T:xoodyakv1
23.9124.1224.55asconhashav12
23.9124.1724.69asconxofav12
33.5033.7334.38asconhashv12
33.6433.9734.34asconxofv12
44.2344.3944.64sha256
44.4144.6245.03asconhashabi32v12
49.9550.5350.77T:esch256v2
61.9462.0962.66asconhashbi32v12
66.3066.4566.75T:romulush
73.3673.6773.91T:esch384v2
193.69194.09194.28T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.2573.1275.38T:xoodyakv1
90.3890.8891.62asconhashav12
90.2591.0092.00asconxofav12
100.50101.12101.50sha512
117.62118.12119.38asconxofv12
118.25119.00121.25asconhashv12
146.38147.38148.25shake128
161.75162.50163.38asconhashabi32v12
185.25187.62191.12T:esch256v2
187.88188.38189.50T:romulush
212.00212.88213.75asconhashbi32v12
225.25225.62226.50T:photonbeetlehash256rate32v1
278.75280.00281.38sha256
320.12320.88321.50T:esch384v2