VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.255.26sha512
7.277.277.28shake128
7.697.707.72sha256
13.1913.2113.22T:xoodyakv1
14.4814.4914.51asconhashav12
14.5214.5314.55asconxofav12
21.6621.6721.68asconxofv12
21.6521.6721.69asconhashv12
27.9227.9428.01asconhashabi32v12
37.7937.8637.90T:esch256v2
40.9741.3041.54asconhashbi32v12
41.02?42.11?52.74?T:esch384v2
42.2142.2242.24T:romulush
230.51230.59230.94T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.475.475.48sha512
7.447.467.47shake128
8.128.168.18sha256
13.3013.3113.33T:xoodyakv1
14.5414.5514.64asconhashav12
14.6814.7014.71asconxofav12
21.8621.8821.90asconxofv12
21.8621.8921.90asconhashv12
27.6628.2428.25asconhashabi32v12
38.0338.0838.14T:esch256v2
40.9741.2641.59asconhashbi32v12
42.55?42.57?52.14?T:esch384v2
42.6242.6442.65T:romulush
230.11230.23230.43T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.825.835.85sha512
7.977.998.00shake128
8.878.898.92sha256
13.4413.4813.49T:xoodyakv1
14.8314.8814.92asconhashav12
14.9214.9314.96asconxofav12
22.1922.2222.24asconxofv12
22.1922.2422.31asconhashv12
28.7528.7828.79asconhashabi32v12
38.5638.6138.66T:esch256v2
41.5841.7542.52asconhashbi32v12
43.24?43.30?53.06?T:esch384v2
43.3043.3243.34T:romulush
229.40229.59229.79T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.156.166.23sha512
8.558.578.64shake128
10.9911.0111.05sha256
13.9513.9914.06T:xoodyakv1
15.4715.5215.57asconhashav12
15.5915.6415.68asconxofav12
23.0623.1023.15asconhashv12
23.0523.1123.17asconxofv12
29.8029.8730.13asconhashabi32v12
39.5639.6539.74T:esch256v2
43.2643.3444.23asconhashbi32v12
45.0345.0745.13T:romulush
45.27?45.32?55.33?T:esch384v2
227.60227.80227.94T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.6912.9713.14sha512
17.9818.1118.30T:xoodyakv1
20.1220.2720.45shake128
23.7323.8623.97asconhashav12
24.2024.3624.56asconxofav12
33.8034.1434.38asconhashv12
33.8934.1734.52asconxofv12
37.6937.8138.00sha256
44.7845.1245.33asconhashabi32v12
54.1154.3454.70T:esch256v2
62.3462.7363.02asconhashbi32v12
65.3865.5565.92T:romulush
69.45?69.92?85.58?T:esch384v2
201.95202.50203.16T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
65.1266.0066.88T:xoodyakv1
90.6291.2592.00asconhashav12
93.6294.6295.38asconxofav12
101.75103.88107.25sha512
119.62120.50121.50asconxofv12
120.50121.50122.00asconhashv12
159.62160.50165.75shake128
161.25162.38163.50asconhashabi32v12
187.12187.50188.38T:romulush
201.38203.00204.75T:esch256v2
214.50215.25216.50asconhashbi32v12
231.38231.75232.38sha256
232.25233.88237.12T:photonbeetlehash256rate32v1
301.50?303.25?369.12?T:esch384v2