VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.714.724.72sha512
6.416.436.44shake128
11.9111.9111.91asconhashav12
11.9011.9111.91asconxofav12
16.1616.1616.16T:xoodyakv1
17.7317.7317.74asconxofv12
17.7817.7917.79asconhashv12
22.0222.0222.02asconhashabi32v12
32.2432.2532.36asconhashbi32v12
34.5634.5734.58T:esch256v2
39.7739.7939.79T:romulush
46.7046.7346.74T:esch384v2
222.20222.34222.67T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
4.894.904.91sha512
6.566.576.58shake128
11.9612.0312.03asconxofav12
12.0312.0312.03asconhashav12
16.2416.2416.24T:xoodyakv1
17.8917.8917.90asconxofv12
17.9417.9517.95asconhashv12
22.3322.3422.34asconhashabi32v12
32.6032.6032.69asconhashbi32v12
34.8134.8334.85T:esch256v2
40.1340.1440.14T:romulush
47.1747.1847.18T:esch384v2
221.79221.80221.84T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.132.13sha256
5.195.205.21sha512
7.047.057.09shake128
12.2312.2312.23asconxofav12
12.2212.2312.24asconhashav12
16.3816.3816.38T:xoodyakv1
18.1418.1518.17asconxofv12
18.2118.2118.21asconhashv12
22.8522.8522.87asconhashabi32v12
33.1933.1933.29asconhashbi32v12
35.1835.2035.27T:esch256v2
40.6740.7140.74T:romulush
47.9047.9147.93T:esch384v2
221.17221.19221.52T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.312.312.31sha256
5.435.455.46sha512
7.567.587.58shake128
12.6812.7112.75asconhashav12
12.7212.7212.72asconxofav12
16.7416.7516.76T:xoodyakv1
18.8018.8318.84asconhashv12
18.9118.9418.96asconxofv12
24.1524.1624.23asconhashabi32v12
34.9034.9034.94asconhashbi32v12
36.2536.3036.38T:esch256v2
42.2042.2542.27T:romulush
49.9149.9249.93T:esch384v2
219.14219.21219.49T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.634.644.74sha256
10.8110.8310.89sha512
17.5717.6317.67shake128
19.5819.6619.68asconhashav12
19.6519.6619.66asconxofav12
21.4521.5321.56T:xoodyakv1
27.6927.6927.69asconhashv12
27.7527.7828.11asconxofv12
41.5041.5041.65asconhashabi32v12
49.0349.2249.73T:esch256v2
54.6254.6754.89asconhashbi32v12
61.1861.4961.78T:romulush
75.4275.4975.56T:esch384v2
194.35194.61194.93T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
25.3427.5027.73sha256
70.8871.8172.92asconxofav12
71.4272.2572.25asconhashav12
73.7374.2274.55T:xoodyakv1
87.5488.4689.24sha512
94.6895.3298.06asconxofv12
95.3895.3895.38asconhashv12
139.62139.65139.75shake128
174.99175.08176.91T:romulush
178.62178.62181.12asconhashabi32v12
183.00183.12184.30T:esch256v2
209.12209.23210.20asconhashbi32v12
223.27223.74225.07T:photonbeetlehash256rate32v1
329.29329.65329.95T:esch384v2