VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
7.097.097.09shake128
7.667.677.68sha256
14.4614.5214.53asconhashav12
14.5114.5214.53asconxofav12
15.2315.2415.25T:xoodyakv1
21.7321.7421.76asconxofv12
21.7321.7421.76asconhashv12
26.9727.7027.72asconhashabi32v12
34.5234.5334.55T:esch256v2
40.4141.0041.23asconhashbi32v12
44.8744.8944.91T:romulush
47.6647.7648.25T:esch384v2
224.29224.47224.52T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.465.46sha512
7.247.247.25shake128
8.228.248.25sha256
14.6514.6714.68asconxofav12
14.6414.6714.69asconhashav12
15.3415.3615.38T:xoodyakv1
21.9421.9521.96asconhashv12
21.9221.9521.96asconxofv12
28.0028.0128.04asconhashabi32v12
34.8034.8234.84T:esch256v2
40.5740.6541.26asconhashbi32v12
45.2845.3045.31T:romulush
48.1848.2148.63T:esch384v2
223.89224.03224.06T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.775.785.80sha512
7.727.747.76shake128
9.169.199.21sha256
14.8614.9014.94asconxofav12
14.8914.9214.96asconhashav12
15.5215.5515.58T:xoodyakv1
22.2522.2822.32asconhashv12
22.2622.2822.32asconxofv12
28.5128.5328.55asconhashabi32v12
35.2435.2735.29T:esch256v2
41.2041.2442.13asconhashbi32v12
45.9545.9846.02T:romulush
48.9448.9949.41T:esch384v2
223.24223.29223.37T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.126.146.15sha512
8.268.288.32shake128
11.7911.8211.91sha256
15.5415.6015.65asconxofav12
15.5415.6015.62asconhashav12
16.0816.1216.17T:xoodyakv1
23.0923.1423.21asconhashv12
23.1023.1423.23asconxofv12
29.7729.8229.88asconhashabi32v12
36.5937.0537.13T:esch256v2
42.9043.0543.77asconhashbi32v12
47.6247.7047.76T:romulush
51.1051.1651.56T:esch384v2
221.34221.46221.62T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.7812.8312.89sha512
18.6418.7518.92shake128
20.6620.8020.97T:xoodyakv1
23.7524.0324.47asconhashav12
23.8324.3124.64asconxofav12
33.7533.9734.28asconxofv12
34.0334.2034.47asconhashv12
43.6643.9244.27asconhashabi32v12
45.0345.3146.05sha256
49.1649.5049.80T:esch256v2
61.3161.3961.84asconhashbi32v12
69.4769.6769.91T:romulush
77.7278.4478.77T:esch384v2
196.62196.88197.16T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
75.2575.8877.25T:xoodyakv1
90.3891.1291.88asconhashav12
91.7592.2592.75asconxofav12
100.25100.75103.62sha512
120.25121.12122.00asconhashv12
120.25121.50122.12asconxofv12
148.00148.62150.12shake128
156.00156.88157.62asconhashabi32v12
183.12185.12186.62T:esch256v2
196.25196.88199.00T:romulush
209.00209.75211.00asconhashbi32v12
227.00227.50228.50T:photonbeetlehash256rate32v1
290.25293.88296.25sha256
336.12338.00340.88T:esch384v2