VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
4.704.714.72sha512
6.416.426.42shake128
11.7911.9111.92asconhashav12
11.9111.9111.91asconxofav12
16.1616.1616.16T:xoodyakv1
17.7317.7317.75asconhashv12
17.7817.7917.79asconxofv12
22.0222.0222.03asconhashabi32v12
32.2432.2532.40asconhashbi32v12
34.5634.5834.60T:esch256v2
39.7939.7939.79T:romulush
46.7046.7146.71T:esch384v2
222.08222.12222.47T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
4.894.904.91sha512
6.576.586.59shake128
11.9512.0312.03asconhashav12
12.0212.0312.03asconxofav12
16.2416.2416.24T:xoodyakv1
17.9017.9017.91asconhashv12
17.9317.9417.95asconxofv12
22.3322.3322.34asconhashabi32v12
32.6032.6032.72asconhashbi32v12
34.8134.8334.85T:esch256v2
40.1240.1340.14T:romulush
47.1547.1647.16T:esch384v2
221.62221.67222.03T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.122.13sha256
5.215.235.26sha512
7.027.037.04shake128
12.1512.2212.23asconhashav12
12.2212.2312.23asconxofav12
16.3816.3816.38T:xoodyakv1
18.1718.1718.20asconhashv12
18.1918.1918.21asconxofv12
22.8522.8522.87asconhashabi32v12
33.1933.1933.28asconhashbi32v12
35.2135.2235.27T:esch256v2
40.7040.7040.71T:romulush
47.9047.9047.91T:esch384v2
220.95220.99221.20T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.312.312.31sha256
5.465.515.57sha512
7.527.537.56shake128
12.7212.7212.74asconxofav12
12.6912.7312.74asconhashav12
16.7416.7516.75T:xoodyakv1
18.8118.8118.81asconxofv12
18.9418.9418.98asconhashv12
24.1724.2024.26asconhashabi32v12
34.9034.9034.94asconhashbi32v12
36.2736.3036.40T:esch256v2
42.1942.2742.30T:romulush
49.8849.8949.91T:esch384v2
219.01219.04219.17T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.594.614.67sha256
11.0911.0911.36sha512
17.6417.6817.85shake128
19.6019.6619.73asconxofav12
19.5919.6619.79asconhashav12
21.4921.5021.53T:xoodyakv1
27.4727.4927.78asconxofv12
27.9228.0828.40asconhashv12
41.4741.4741.98asconhashabi32v12
49.4149.4149.41T:esch256v2
54.6054.6754.80asconhashbi32v12
61.3561.5661.69T:romulush
75.4775.5375.61T:esch384v2
194.75194.79194.81T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.4627.6427.88sha256
70.7571.2871.71asconxofav12
71.3171.4672.99asconhashav12
73.6974.0974.58T:xoodyakv1
90.6192.4795.96sha512
94.5794.7595.42asconxofv12
95.7696.2598.83asconhashv12
139.83140.03140.15shake128
174.78174.98176.15T:romulush
178.62178.62181.47asconhashabi32v12
183.00183.11183.75T:esch256v2
209.12209.12209.27asconhashbi32v12
223.03223.50225.09T:photonbeetlehash256rate32v1
328.93329.22329.78T:esch384v2