VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
17.2317.2317.23sha512
18.7819.1019.10shake128
20.2520.2520.25T:xoodyakv1
20.4620.4720.47sha256
32.3832.3832.38asconhashav12
32.3832.3832.38asconxofav12
48.1248.1248.13asconhashv12
48.1248.1248.13asconxofv12
67.8767.8867.99asconhashabi32v12
102.98103.03103.19asconhashbi32v12
111.51111.54111.59T:esch256v2
126.82126.86126.93T:esch384v2
153.81153.82153.94T:romulush
619.62620.34620.66T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
17.9017.9017.90sha512
19.2619.2619.27shake128
20.4120.4120.42T:xoodyakv1
20.8920.8920.89sha256
32.6932.6932.69asconhashav12
32.6932.6932.69asconxofav12
48.5348.5348.53asconhashv12
48.5348.5348.53asconxofv12
68.7168.7168.73asconhashabi32v12
104.04104.05104.10asconhashbi32v12
112.20112.20112.20T:esch256v2
128.06128.06128.07T:esch384v2
155.07155.07155.09T:romulush
618.69618.97619.33T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
19.0119.0119.03sha512
20.6620.6620.66T:xoodyakv1
20.6220.9221.87shake128
21.6021.6121.61sha256
33.2133.2133.21asconxofav12
33.2133.2133.24asconhashav12
49.2149.2149.21asconxofv12
49.2149.2149.21asconhashv12
70.0970.1270.12asconhashabi32v12
105.77105.80105.91asconhashbi32v12
113.36113.36113.37T:esch256v2
130.14130.14130.14T:esch384v2
157.17157.19157.43T:romulush
616.95617.15617.31T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
20.1220.1520.16sha512
21.3521.3521.35T:xoodyakv1
22.1622.1922.30shake128
23.5223.5323.53sha256
34.6034.6034.60asconhashav12
34.6034.6034.60asconxofav12
51.0151.0151.01asconhashv12
51.0151.0151.01asconxofv12
73.7873.7973.99asconhashabi32v12
110.42110.47110.97asconhashbi32v12
116.46116.46116.47T:esch256v2
135.69135.69135.69T:esch384v2
162.77162.77162.77T:romulush
611.59611.90612.04T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
29.9829.9830.91T:xoodyakv1
42.5242.5342.77sha512
47.8147.8847.89sha256
51.2551.6653.03shake128
52.2352.2352.23asconhashav12
52.2352.2352.23asconxofav12
73.8673.8673.86asconxofv12
73.8673.8674.17asconhashv12
120.78120.78120.80asconhashabi32v12
156.11156.11156.11T:esch256v2
169.09169.09169.09asconhashbi32v12
206.73206.73206.73T:esch384v2
234.45234.45234.45T:romulush
544.83545.36546.16T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
115.62115.62115.88T:xoodyakv1
191.25191.25191.25asconxofav12
191.25191.25193.88asconhashav12
216.00216.38216.75sha256
254.00254.00254.00asconxofv12
254.00254.00256.00asconhashv12
340.12340.62343.00sha512
409.00409.00409.00shake128
491.12491.12493.62asconhashabi32v12
582.62582.62582.75T:esch256v2
598.62600.00614.12T:photonbeetlehash256rate32v1
631.75631.75632.50asconhashbi32v12
650.25650.25655.62T:romulush
896.75896.75897.00T:esch384v2