VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Redwood Cove (a06a4-40); 2023 Intel Core Ultra 5 125H, P cores; 4 x 1200MHz; meteor,big, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
5.035.045.04sha512
5.255.285.31shake128
13.2213.2513.30asconxofav12
13.2213.2513.29asconhashav12
15.3015.3215.33T:xoodyakv1
19.8119.8419.87asconhashv12
19.8219.8519.87asconxofv12
25.5125.5725.67T:esch256v2
26.1926.6226.68asconhashabi32v12
35.7135.8435.98T:esch384v2
39.2839.3939.46asconhashbi32v12
44.3744.3944.42T:romulush
194.26194.80195.73T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.092.10sha256
5.215.225.23sha512
5.385.415.44shake128
13.3513.3813.41asconxofav12
13.3713.4013.45asconhashav12
15.3915.4015.42T:xoodyakv1
19.9720.0020.04asconxofv12
19.9820.0120.05asconhashv12
25.6325.7025.78T:esch256v2
26.5026.8526.90asconhashabi32v12
36.0936.2036.32T:esch384v2
39.6539.7039.74asconhashbi32v12
44.7644.7944.81T:romulush
194.23194.72195.07T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.162.18sha256
5.505.515.52sha512
5.755.785.82shake128
13.5513.5813.64asconhashav12
13.5313.5913.64asconxofav12
15.5215.5415.55T:xoodyakv1
20.2420.2720.37asconxofv12
20.2320.2820.32asconhashv12
25.9426.0026.03T:esch256v2
26.9727.1627.36asconhashabi32v12
36.5736.6936.84T:esch384v2
40.2640.3140.38asconhashbi32v12
45.4245.4445.50T:romulush
193.30193.89194.32T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.332.342.40sha256
5.735.765.78sha512
6.136.196.41shake128
14.0214.0814.17asconhashav12
14.0714.1614.21asconxofav12
15.8515.9115.95T:xoodyakv1
20.8920.9421.04asconhashv12
20.8920.9821.05asconxofv12
26.7826.8626.96T:esch256v2
28.0528.1728.40asconhashabi32v12
38.2538.4538.68T:esch384v2
41.6241.7541.87asconhashbi32v12
47.1347.2247.30T:romulush
191.56192.25193.02T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.58?4.64?5.23?sha256
11.2511.3111.42sha512
14.06?15.67?16.66?shake128
20.1620.3420.72T:xoodyakv1
20.6620.8821.05asconhashav12
20.6420.9121.08asconxofav12
29.7830.0630.25asconhashv12
29.8630.2030.56asconxofv12
35.5535.7336.14T:esch256v2
42.1442.4142.64asconhashabi32v12
58.1259.2059.80T:esch384v2
59.9260.3060.59asconhashbi32v12
68.5868.9869.38T:romulush
170.80171.22171.64T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.00?27.88?31.88?sha256
68.5069.5073.00T:xoodyakv1
73.1273.8875.00asconxofav12
72.8874.0075.38asconhashav12
89.5090.3891.75sha512
99.88101.50105.38asconhashv12
100.25102.00106.62asconxofv12
122.00123.75128.38shake128
135.25136.12137.62T:esch256v2
147.88149.12150.50asconhashabi32v12
193.12195.38197.38T:photonbeetlehash256rate32v1
194.38196.12198.25T:romulush
199.25201.62204.12asconhashbi32v12
250.88254.62259.12T:esch384v2