VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.541.54sha256
4.374.384.39sha512
5.465.465.49shake128
12.1112.1112.12asconhashav12
12.1212.1312.13asconxofav12
15.5815.6115.75T:xoodyakv1
18.1118.1218.13asconhashv12
18.0918.1318.15asconxofv12
22.1022.1022.11asconhashabi32v12
32.8332.8932.94T:esch256v2
33.0733.0833.09asconhashbi32v12
41.9241.9342.21T:romulush
47.7147.7648.00T:esch384v2
214.30216.48220.18T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.57sha256
4.534.544.55sha512
5.595.595.60shake128
12.2312.2412.26asconhashav12
12.2512.2512.26asconxofav12
15.6115.7015.74T:xoodyakv1
18.2318.2518.27asconxofv12
18.2718.2718.28asconhashv12
22.3822.3822.39asconhashabi32v12
33.0233.0933.13T:esch256v2
33.3833.3933.40asconhashbi32v12
42.2742.2842.28T:romulush
48.1248.2348.33T:esch384v2
214.82215.32216.36T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.60sha256
4.784.804.83sha512
5.935.945.97shake128
12.4212.4312.45asconhashav12
12.4412.4612.49asconxofav12
15.7115.8015.92T:xoodyakv1
18.5218.5218.56asconxofv12
18.5318.5618.57asconhashv12
22.8222.8322.85asconhashabi32v12
33.4333.4433.46T:esch256v2
33.9033.9233.94asconhashbi32v12
42.8042.8242.85T:romulush
48.7548.9148.93T:esch384v2
213.42214.29214.71T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.711.711.72sha256
5.195.225.27sha512
6.356.376.39shake128
12.9212.9312.97asconxofav12
12.9012.9412.97asconhashav12
15.9416.0916.23T:xoodyakv1
19.1419.1919.23asconhashv12
19.1519.1919.23asconxofv12
23.9724.0124.05asconhashabi32v12
34.2434.3534.39T:esch256v2
35.2735.3035.35asconhashbi32v12
44.2744.3244.39T:romulush
50.0750.5650.68T:esch384v2
211.89212.38214.79T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.143.173.20sha256
11.5511.5911.70sha512
14.5614.6714.73shake128
19.2819.3819.47asconhashav12
19.3119.4219.52asconxofav12
20.2520.4120.52T:xoodyakv1
27.4827.6127.81asconxofv12
27.4827.6727.80asconhashv12
39.3339.4239.58asconhashabi32v12
45.3445.3845.44T:esch256v2
53.1653.2853.45asconhashbi32v12
63.5963.7563.95T:romulush
76.1676.2276.55T:esch384v2
188.42189.17190.16T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
18.5018.5018.50sha256
69.6269.7569.75T:xoodyakv1
69.7570.1270.75asconxofav12
69.8870.2571.00asconhashav12
79.7580.6281.00sha512
93.8894.2595.00asconhashv12
93.7594.3895.00asconxofv12
116.62117.38118.38shake128
160.62161.12162.25asconhashabi32v12
167.62167.88171.12T:esch256v2
177.00177.62178.12T:romulush
193.88195.00196.12asconhashbi32v12
220.00220.62222.88T:photonbeetlehash256rate32v1
325.50326.50330.00T:esch384v2