VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.202.202.21sha256
4.904.914.92shake128
5.545.555.56sha512
8.408.428.44T:xoodyakv1
14.3914.4114.42asconxofav12
14.4514.4814.50asconhashav12
21.6921.7121.73asconhashv12
21.6721.7121.73asconxofv12
29.2029.2129.22asconhashabi32v12
30.4830.5830.61T:esch256v2
38.0938.1238.14T:romulush
38.2638.2938.44T:esch384v2
43.3843.4143.43asconhashbi32v12
217.95218.73220.30T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.252.252.26sha256
5.035.055.05shake128
5.745.755.77sha512
8.438.458.49T:xoodyakv1
14.6014.6414.67asconxofav12
14.6314.6414.66asconhashav12
21.8421.8621.90asconxofv12
21.8421.8721.90asconhashv12
29.5629.5729.59asconhashabi32v12
30.7730.7930.83T:esch256v2
38.4338.4538.49T:romulush
38.7238.7938.97T:esch384v2
43.8343.8443.86asconhashbi32v12
217.79218.16218.84T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.342.342.34sha256
5.405.435.44shake128
6.066.086.10sha512
8.488.548.59T:xoodyakv1
14.8114.8414.87asconxofav12
14.8414.8714.90asconhashav12
22.1722.2122.26asconhashv12
22.1922.2322.26asconxofv12
30.1430.1630.19asconhashabi32v12
31.0831.1331.22T:esch256v2
38.9539.0039.05T:romulush
39.4139.4739.67T:esch384v2
44.5544.5744.63asconhashbi32v12
217.64217.71218.01T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.562.562.58sha256
5.905.915.94shake128
6.306.326.36sha512
8.658.718.80T:xoodyakv1
15.3915.4615.51asconxofav12
15.4815.5315.59asconhashav12
22.9923.0223.08asconxofv12
22.9623.0323.09asconhashv12
31.6531.7031.75asconhashabi32v12
32.0432.1632.24T:esch256v2
40.3340.4040.54T:romulush
41.0941.1841.26T:esch384v2
46.4346.4946.56asconhashbi32v12
214.16215.16222.52T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.485.535.62sha256
11.3011.4211.56T:xoodyakv1
12.0812.3012.45sha512
14.1914.3014.39shake128
23.3423.5223.72asconxofav12
23.4223.6223.88asconhashav12
33.5233.7033.89asconhashv12
33.5633.8834.27asconxofv12
43.6743.9245.70T:esch256v2
51.3151.4851.77asconhashabi32v12
58.1658.4158.64T:romulush
63.1763.3963.69T:esch384v2
70.4770.6670.95asconhashbi32v12
189.92190.36191.09T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
26.7527.1227.62sha256
40.5040.8841.75T:xoodyakv1
86.6287.5089.38asconhashav12
86.3887.7589.12asconxofav12
98.5099.38100.38sha512
111.38112.00113.00shake128
115.50117.12118.75asconhashv12
117.38118.75122.88asconxofv12
163.00164.00165.00T:romulush
164.00165.50168.12T:esch256v2
205.50207.38211.00asconhashabi32v12
218.25219.50224.12T:photonbeetlehash256rate32v1
261.25263.00264.50asconhashbi32v12
275.38277.25278.12T:esch384v2