VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 2 (830f10); 2019 AMD EPYC 7742; 64 x 2250MHz; rome0, supercop-20260217

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
4.714.724.72sha512
6.406.416.43shake128
11.7711.7711.78asconxofav12
11.9111.9111.91asconhashav12
16.1616.1616.16T:xoodyakv1
17.7317.7317.74asconhashv12
17.7417.7817.79asconxofv12
22.0222.0222.02asconhashabi32v12
32.2432.2532.41asconhashbi32v12
34.5734.5834.60T:esch256v2
39.8039.8039.81T:romulush
46.7346.7746.79T:esch384v2
222.11222.21222.32T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
4.904.904.90sha512
6.556.566.57shake128
11.9011.9011.92asconxofav12
12.0312.0312.03asconhashav12
16.2416.2416.24T:xoodyakv1
17.9017.9017.91asconhashv12
17.9417.9417.95asconxofv12
22.3322.3322.33asconhashabi32v12
32.6032.6032.70asconhashbi32v12
34.8034.8234.84T:esch256v2
40.1440.1440.14T:romulush
47.1847.2247.23T:esch384v2
221.72221.75221.80T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.122.13sha256
5.205.215.22sha512
7.027.037.03shake128
12.1012.1112.16asconxofav12
12.2312.2312.24asconhashav12
16.3816.3816.38T:xoodyakv1
18.1718.1718.20asconhashv12
18.2018.2118.21asconxofv12
22.8522.8522.86asconhashabi32v12
33.1933.1933.31asconhashbi32v12
35.1935.2335.27T:esch256v2
40.6840.7040.72T:romulush
47.9247.9447.97T:esch384v2
220.97221.03221.04T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.302.312.31sha256
5.665.675.72sha512
7.527.527.54shake128
12.6412.7112.76asconhashav12
12.7112.7212.76asconxofav12
16.7516.7616.76T:xoodyakv1
18.8118.8318.83asconxofv12
18.9418.9518.98asconhashv12
24.1724.2024.25asconhashabi32v12
34.9034.9034.93asconhashbi32v12
36.2536.3136.33T:esch256v2
42.1442.1442.19T:romulush
49.9449.9549.96T:esch384v2
219.09219.18219.23T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.644.674.70sha256
12.9513.0113.55sha512
17.5717.6417.75shake128
19.5919.6619.79asconhashav12
20.1220.2120.53asconxofav12
21.4921.5221.56T:xoodyakv1
27.6927.6927.74asconxofv12
27.9928.0828.43asconhashv12
41.4741.5341.70asconhashabi32v12
49.0349.0449.74T:esch256v2
54.6254.6754.95asconhashbi32v12
61.4161.4561.65T:romulush
75.4575.4875.55T:esch384v2
194.60194.86194.96T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
25.4227.6227.82sha256
70.5071.2773.03asconhashav12
71.7573.9975.84asconxofav12
73.9674.3474.69T:xoodyakv1
88.5089.1890.95sha512
94.1694.5897.98asconhashv12
94.6794.8595.67asconxofv12
140.27140.40140.62shake128
173.99175.86177.48T:romulush
178.62178.62181.10asconhashabi32v12
183.00183.02183.56T:esch256v2
209.12209.12209.31asconhashbi32v12
224.82227.51229.19T:photonbeetlehash256rate32v1
328.88328.88328.96T:esch384v2