VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Quad Q6600; 4 x 2404MHz; margaux, supercop-20250922

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.779.779.78sha512
9.869.879.88shake128
13.7713.7813.80sha256
19.8619.8619.86asconxofav12
19.9419.9419.94asconhashav12
29.6529.6529.76asconxofv12
29.6629.6629.66asconhashv12
32.2632.2632.26T:xoodyakv1
37.5837.5837.58asconhashabi32v12
55.5555.5655.89asconhashbi32v12
63.2363.3563.88T:esch256v2
81.2981.3381.49T:romulush
90.0690.4190.45T:esch384v2
379.14379.36380.94T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.0810.1110.14shake128
10.7910.8010.82sha512
14.6514.6714.68sha256
20.0520.0520.05asconxofav12
20.1420.1420.14asconhashav12
29.9129.9129.91asconxofv12
29.9129.9129.91asconhashv12
32.4232.4332.44T:xoodyakv1
38.0238.0338.04asconhashabi32v12
56.1156.1156.12asconhashbi32v12
63.7563.7764.26T:esch256v2
81.9582.0882.15T:romulush
91.0191.2891.30T:esch384v2
378.52378.55380.05T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.7910.8110.81shake128
12.5212.5412.56sha512
16.1816.2016.22sha256
20.3620.3620.36asconxofav12
20.4820.4820.48asconhashav12
30.3130.3130.31asconxofv12
30.3430.3430.34asconhashv12
32.6932.7032.72T:xoodyakv1
38.7838.7838.80asconhashabi32v12
57.0657.0957.09asconhashbi32v12
64.5064.5165.05T:esch256v2
82.7383.1383.24T:romulush
92.5392.7792.78T:esch384v2
377.33377.47378.80T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.6611.6611.66shake128
16.0516.1016.17sha512
20.1620.2520.32sha256
21.2221.2221.22asconxofav12
21.3821.3921.40asconhashav12
31.4531.4531.45asconhashv12
31.4931.4931.49asconxofv12
33.3733.4233.43T:xoodyakv1
40.7840.7840.81asconhashabi32v12
59.5659.5759.57asconhashbi32v12
66.4966.5366.85T:esch256v2
85.0686.0186.12T:romulush
96.5696.6096.61T:esch384v2
374.17374.38375.83T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
27.4827.5227.73shake128
32.0332.0532.59asconhashav12
32.0532.0532.05asconxofav12
42.7342.8043.41T:xoodyakv1
45.5945.5945.59asconhashv12
45.9545.9545.95asconxofv12
65.9766.2766.64sha512
66.3966.3966.39asconhashabi32v12
71.8372.2072.56sha256
90.6690.8191.03T:esch256v2
91.1691.2791.28asconhashbi32v12
124.69124.80124.88T:romulush
146.52146.98148.67T:esch384v2
333.70334.31335.41T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
118.62118.75119.75asconhashav12
119.75119.75120.00asconxofav12
146.00146.75146.75T:xoodyakv1
156.25156.75156.75asconhashv12
158.38158.38158.38asconxofv12
218.50218.75219.00shake128
270.50270.50270.88asconhashabi32v12
344.38345.00345.38asconhashbi32v12
345.12348.50350.88T:esch256v2
346.88350.25350.75T:romulush
389.75390.00390.12T:photonbeetlehash256rate32v1
462.62464.12465.50sha256
529.50532.50535.75sha512
643.00645.38651.38T:esch384v2