VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.275.45sha512
7.127.127.12shake128
7.787.797.80sha256
14.0714.0914.10asconxofav12
14.0714.0914.09asconhashav12
16.4116.4116.42T:xoodyakv1
21.1621.1721.18asconxofv12
21.1621.1821.20asconhashv12
28.1028.5828.64asconhashabi32v12
36.82?37.35?42.21?T:esch256v2
41.5241.6142.46asconhashbi32v12
42.4242.4442.62T:romulush
47.0747.0847.09T:esch384v2
253.37258.33259.10T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.545.565.69sha512
7.297.307.31shake128
8.238.248.26sha256
14.2214.2314.25asconhashav12
14.2214.2414.25asconxofav12
16.4916.4916.50T:xoodyakv1
21.3421.3621.39asconxofv12
21.3821.3921.40asconhashv12
28.4628.8528.87asconhashabi32v12
37.57?37.58?42.01?T:esch256v2
41.9741.9842.00asconhashbi32v12
42.8042.8242.97T:romulush
47.5547.5547.57T:esch384v2
253.08257.68257.81T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
6.016.056.12sha512
7.827.847.85shake128
9.089.099.12sha256
14.4614.4814.49asconhashav12
14.4614.4914.52asconxofav12
16.6316.6416.65T:xoodyakv1
21.6621.6821.71asconxofv12
21.6421.6821.72asconhashv12
28.9029.2929.31asconhashabi32v12
37.98?38.02?42.44?T:esch256v2
42.5442.5743.35asconhashbi32v12
43.5743.6043.61T:romulush
48.3448.3548.37T:esch384v2
252.30256.90257.03T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.346.406.49sha512
8.468.508.59shake128
11.3111.3511.40sha256
15.0515.0815.11asconhashav12
15.0615.0915.12asconxofav12
16.9917.0017.02T:xoodyakv1
22.4122.4922.53asconxofv12
22.4422.4922.56asconhashv12
30.0630.4230.49asconhashabi32v12
39.03?39.12?43.56?T:esch256v2
44.1644.2244.87asconhashbi32v12
45.1545.2245.24T:romulush
50.4050.4250.46T:esch384v2
250.55254.78254.99T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.8813.1213.31sha512
20.0620.1920.81shake128
21.7521.8121.88T:xoodyakv1
22.3822.4422.69asconxofav12
22.4422.5623.00asconhashav12
32.1932.4432.56asconxofv12
32.3132.5032.75asconhashv12
38.6238.8139.12sha256
45.2545.4445.69asconhashabi32v12
52.25?53.00?58.25?T:esch256v2
62.6962.9463.50asconhashbi32v12
64.9465.1265.31T:romulush
76.8877.0077.12T:esch384v2
222.94226.31226.69T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
75.0075.5075.50T:xoodyakv1
81.0082.0083.00asconhashav12
81.5082.0083.00asconxofav12
103.50105.00107.00sha512
110.00110.50112.50asconhashv12
110.50111.50112.50asconxofv12
158.00159.50164.50shake128
160.00161.00162.50asconhashabi32v12
180.50181.50182.00T:romulush
196.00197.00217.00T:esch256v2
211.00211.50213.50asconhashbi32v12
236.50244.50253.50sha256
256.50259.00260.00T:photonbeetlehash256rate32v1
332.50333.00334.00T:esch384v2