VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.374.374.39sha512
5.445.465.46shake128
12.1112.1212.13asconxofav12
12.1212.1312.13asconhashav12
15.5915.6315.75T:xoodyakv1
18.0918.1018.14asconxofv12
18.1218.1318.13asconhashv12
22.0922.1322.24asconhashabi32v12
32.7932.8232.92T:esch256v2
33.0633.0733.08asconhashbi32v12
41.9341.9342.47T:romulush
47.5247.5948.27T:esch384v2
218.67220.01220.77T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.534.534.54sha512
5.58?5.59?10.27?shake128
12.2412.2412.25asconhashav12
12.2412.2512.26asconxofav12
15.7215.7615.89T:xoodyakv1
18.2318.2618.28asconxofv12
18.2518.2718.29asconhashv12
22.3822.3822.41asconhashabi32v12
33.0433.0533.10T:esch256v2
33.3633.3833.39asconhashbi32v12
42.2642.2642.28T:romulush
47.9248.1748.22T:esch384v2
215.47216.80219.55T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.60sha256
4.794.804.81sha512
5.945.955.98shake128
12.4312.4412.46asconhashav12
12.4312.4512.46asconxofav12
15.8115.9016.00T:xoodyakv1
18.4718.5218.56asconxofv12
18.5018.5318.57asconhashv12
22.8322.8622.94asconhashabi32v12
33.3733.3933.46T:esch256v2
33.8633.9133.94asconhashbi32v12
42.8242.8342.85T:romulush
48.6548.8149.01T:esch384v2
214.24215.76218.07T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.721.72sha256
5.175.185.20sha512
6.356.376.41shake128
12.9512.9813.03asconhashav12
12.9713.0013.04asconxofav12
15.9716.2316.40T:xoodyakv1
19.1419.1819.25asconxofv12
19.2019.2619.28asconhashv12
24.0624.1024.17asconhashabi32v12
34.2334.2634.28T:esch256v2
35.2635.3035.36asconhashbi32v12
44.2444.2944.40T:romulush
50.5550.6550.95T:esch384v2
212.35212.61212.90T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.193.223.25sha256
11.2011.2711.36sha512
14.5914.6214.73shake128
19.5619.7020.05asconhashav12
19.5819.7719.98asconxofav12
20.1920.5920.78T:xoodyakv1
27.5627.6627.72asconxofv12
28.0328.2028.38asconhashv12
39.3339.4839.58asconhashabi32v12
45.2045.3345.44T:esch256v2
53.2253.3453.50asconhashbi32v12
63.4763.6463.86T:romulush
76.0576.1777.80T:esch384v2
188.80189.30189.88T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
19.0019.0019.12sha256
68.5068.8869.00T:xoodyakv1
69.7570.3871.25asconxofav12
70.1270.6271.25asconhashav12
79.3880.1280.88sha512
93.8894.3895.12asconhashv12
94.1294.5095.50asconxofv12
116.25117.00118.00shake128
160.25160.75162.38asconhashabi32v12
167.12167.50167.88T:esch256v2
177.00177.62177.75T:romulush
193.88194.88195.50asconhashbi32v12
219.50220.75222.50T:photonbeetlehash256rate32v1
325.00325.38326.12T:esch384v2