VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a70f41); 2023 AMD Ryzen 5 7640HS; 6 x 4300MHz; phoenix, supercop-20260217

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.184.204.22sha512
5.505.505.50shake128
10.2510.2510.25asconhashav12
10.2510.2510.25asconxofav12
11.7611.7911.80T:xoodyakv1
15.2515.2515.25asconxofv12
15.2515.2515.25asconhashv12
24.6324.6324.64asconhashabi32v12
34.1634.2734.35T:esch256v2
36.8736.8836.88asconhashbi32v12
44.3744.4844.56T:romulush
48.0148.0748.29T:esch384v2
206.29207.51207.78T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.544.564.58sha512
5.635.635.64shake128
10.3610.3610.36asconxofav12
10.3610.3610.37asconhashav12
11.8512.1612.45T:xoodyakv1
15.3915.3915.39asconhashv12
15.3915.3915.39asconxofv12
24.8824.8824.88asconhashabi32v12
34.3734.4234.48T:esch256v2
37.2037.2037.20asconhashbi32v12
44.8144.8644.94T:romulush
48.5448.5748.76T:esch384v2
206.25206.66206.80T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.112.112.11sha256
5.185.215.23sha512
6.016.016.03shake128
10.5410.5410.55asconxofav12
10.5410.5410.55asconhashav12
11.7912.1412.44T:xoodyakv1
15.6215.6215.62asconhashv12
15.6215.6215.62asconxofv12
25.2825.2925.31asconhashabi32v12
34.7034.7534.80T:esch256v2
37.7437.7437.75asconhashbi32v12
45.4645.5045.56T:romulush
49.3649.4349.56T:esch384v2
205.31205.83205.93T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.252.262.26sha256
6.466.466.49shake128
6.436.466.50sha512
11.0211.0211.03asconxofav12
11.0211.0211.04asconhashav12
12.3212.4112.97T:xoodyakv1
16.2316.2316.24asconxofv12
16.2316.2316.24asconhashv12
26.3926.4226.47asconhashabi32v12
35.8135.9336.02T:esch256v2
39.1739.1839.21asconhashbi32v12
47.1347.1747.22T:romulush
51.6151.8152.71T:esch384v2
203.40203.99204.46T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.154.174.21sha256
15.12?15.15?17.58?shake128
17.1717.1717.21asconxofav12
17.1717.1717.23asconhashav12
17.1617.4317.71T:xoodyakv1
24.0524.0524.05asconhashv12
24.0524.0524.05asconxofv12
24.5124.7225.09sha512
39.9640.2840.70asconhashabi32v12
48.8249.3649.78T:esch256v2
57.5557.6257.71asconhashbi32v12
68.1768.5768.92T:romulush
78.5578.6978.95T:esch384v2
180.91181.18181.36T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
25.4425.7625.95sha256
59.5960.8562.05T:xoodyakv1
65.6265.6266.33asconxofav12
65.6265.6267.77asconhashav12
85.6285.6285.88asconxofv12
85.6285.6286.26asconhashv12
120.18120.57126.72shake128
143.55143.84146.51asconhashabi32v12
183.62183.95186.35T:esch256v2
191.82192.38193.28T:romulush
195.97198.05200.84sha512
202.25202.25203.15asconhashbi32v12
206.73207.48208.19T:photonbeetlehash256rate32v1
339.16340.33342.26T:esch384v2