VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
4.714.714.71sha512
6.276.286.28shake128
11.7711.7711.80asconxofav12
11.8011.8011.80asconhashav12
14.5314.5814.58T:xoodyakv1
17.7317.7317.73asconhashv12
17.8417.8417.85asconxofv12
21.8521.8521.85asconhashabi32v12
32.3732.3732.38asconhashbi32v12
37.5137.5137.51T:romulush
38.0938.1138.12T:esch256v2
47.3847.5247.61T:esch384v2
219.80219.86219.90T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
4.894.904.91sha512
6.436.446.47shake128
11.9011.9311.93asconxofav12
11.9311.9311.94asconhashav12
14.1714.6114.62T:xoodyakv1
17.8917.8917.90asconhashv12
18.0018.0018.02asconxofv12
22.0922.0922.09asconhashabi32v12
32.7332.7332.74asconhashbi32v12
37.8337.8337.84T:romulush
38.3438.3838.43T:esch256v2
47.9747.9948.01T:esch384v2
219.35219.38219.59T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
5.195.205.22sha512
6.936.936.99shake128
12.1212.1312.15asconhashav12
12.1412.1412.15asconxofav12
14.3114.3114.75T:xoodyakv1
18.1618.1618.17asconhashv12
18.2518.2718.32asconxofv12
22.4722.6022.60asconhashabi32v12
33.3333.3333.34asconhashbi32v12
38.3538.3738.45T:romulush
38.7438.7638.88T:esch256v2
48.7648.7648.80T:esch384v2
219.12219.19219.24T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.312.322.32sha256
5.395.395.45sha512
7.387.407.49shake128
12.6312.6312.66asconxofav12
12.6712.6812.70asconhashav12
14.5814.6915.14T:xoodyakv1
18.8318.8718.93asconhashv12
18.9418.9418.94asconxofv12
23.9423.9423.95asconhashabi32v12
34.8634.8734.94asconhashbi32v12
39.7739.7939.82T:romulush
39.8639.8739.93T:esch256v2
50.6950.7350.81T:esch384v2
216.60216.90217.06T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.674.724.80sha256
10.7210.7310.89sha512
17.1717.1717.19shake128
19.3619.4719.70asconxofav12
19.5019.5019.50T:xoodyakv1
19.8819.9220.19asconhashav12
27.2827.3427.42asconxofv12
27.6927.9728.17asconhashv12
40.9240.9241.33asconhashabi32v12
54.3854.3854.45T:esch256v2
54.7854.9255.56asconhashbi32v12
57.5057.9558.08T:romulush
76.9176.9477.03T:esch384v2
192.14192.42192.48T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.1227.6228.62sha256
66.7566.8866.88T:xoodyakv1
71.0071.0071.00asconxofav12
69.1272.8874.88asconhashav12
86.5086.6287.38sha512
94.8894.8895.12asconxofv12
94.5095.5097.38asconhashv12
136.50136.75136.75shake128
163.38164.50165.12T:romulush
174.75174.75175.62asconhashabi32v12
201.25201.25202.62T:esch256v2
209.88210.25212.50asconhashbi32v12
218.50221.62224.50T:photonbeetlehash256rate32v1
335.12335.25335.88T:esch384v2