VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
4.714.724.72sha512
6.296.306.30shake128
11.8011.8011.80asconhashav12
11.8011.8011.80asconxofav12
14.1914.1914.19T:xoodyakv1
17.7317.7317.73asconhashv12
17.8417.8417.85asconxofv12
21.7821.7821.78asconhashabi32v12
32.3732.3732.38asconhashbi32v12
37.5037.5137.51T:romulush
38.0938.1138.12T:esch256v2
47.4947.5047.64T:esch384v2
219.87219.93220.14T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
4.904.904.91sha512
6.476.486.49shake128
11.9311.9311.96asconhashav12
11.9311.9411.95asconxofav12
14.2714.2714.27T:xoodyakv1
17.8917.8917.89asconhashv12
18.0118.0118.02asconxofv12
22.0922.0922.09asconhashabi32v12
32.7332.7332.73asconhashbi32v12
37.8337.8337.84T:romulush
38.3638.3938.41T:esch256v2
47.9848.0348.05T:esch384v2
219.45219.87219.90T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
5.195.215.23sha512
6.957.037.04shake128
12.1412.1512.16asconhashav12
12.1612.1612.17asconxofav12
14.4014.4014.40T:xoodyakv1
18.1518.1618.17asconhashv12
18.2718.3018.31asconxofv12
22.6022.6022.60asconhashabi32v12
33.3333.3333.34asconhashbi32v12
38.3638.3738.39T:romulush
38.7238.7638.85T:esch256v2
48.7548.7648.86T:esch384v2
218.79218.87218.89T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.322.322.32sha256
5.685.695.74sha512
7.497.507.72shake128
12.6312.6412.71asconhashav12
12.7212.7512.76asconxofav12
14.7614.7614.76T:xoodyakv1
18.8418.8618.88asconhashv12
18.9418.9419.01asconxofv12
23.9023.9023.91asconhashabi32v12
34.8634.8734.94asconhashbi32v12
39.7539.7939.85T:romulush
39.9339.9540.04T:esch256v2
50.8650.9350.98T:esch384v2
216.72216.83216.90T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.734.734.77sha256
12.9513.0613.58sha512
17.0617.1417.14shake128
19.1719.2219.28T:xoodyakv1
19.2819.4819.59asconhashav12
19.9420.0620.47asconxofav12
27.2827.3427.34asconxofv12
27.7027.7328.02asconhashv12
40.9240.9241.03asconhashabi32v12
54.3854.5054.94T:esch256v2
54.7854.9255.66asconhashbi32v12
57.4857.7257.89T:romulush
77.2077.2577.31T:esch384v2
191.98192.12192.20T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
26.5027.8827.88sha256
67.6267.6267.88T:xoodyakv1
71.6272.1272.75asconhashav12
73.3873.8875.62asconxofav12
89.6290.6292.12sha512
95.1295.1295.12asconxofv12
94.6295.5099.62asconhashv12
135.62135.62135.75shake128
163.25163.88164.12T:romulush
173.38174.75174.75asconhashabi32v12
202.50202.62203.25T:esch256v2
209.88209.88210.25asconhashbi32v12
218.88221.75224.12T:photonbeetlehash256rate32v1
335.88336.75337.75T:esch384v2