VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 3 1200; 4 x 3100MHz; rumba3, supercop-20250415

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.864.864.87sha512
7.127.177.26shake128
11.7311.7311.73asconhashav12
11.7311.7311.73asconxofav12
15.9516.0016.00T:xoodyakv1
17.7517.7517.75asconhashv12
17.7517.7517.75asconxofv12
21.9121.9121.91asconhashabi32v12
32.2832.2832.28asconhashbi32v12
38.5638.5638.57T:esch256v2
38.8738.8738.87T:romulush
48.2248.2548.31T:esch384v2
223.85224.01224.16T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
5.075.085.09sha512
7.337.347.35shake128
11.8511.8511.85asconhashav12
11.8511.8511.86asconxofav12
16.0516.0816.19T:xoodyakv1
17.9017.9117.91asconxofv12
17.9117.9117.91asconhashv12
22.2122.2122.22asconhashabi32v12
32.6432.6432.64asconhashbi32v12
38.8138.8138.81T:esch256v2
39.2039.2039.20T:romulush
48.6948.7048.72T:esch384v2
223.46223.60223.69T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
5.415.425.43sha512
7.867.877.90shake128
12.0612.0612.06asconhashav12
12.0712.0712.07asconxofav12
16.1916.2216.29T:xoodyakv1
18.1518.1618.18asconxofv12
18.1718.1718.18asconhashv12
22.7222.7222.72asconhashabi32v12
33.2433.2433.24asconhashbi32v12
39.2139.2139.22T:esch256v2
39.7439.7539.76T:romulush
49.5149.5249.56T:esch384v2
222.81222.87222.90T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.302.312.31sha256
5.745.795.81sha512
8.408.408.41shake128
12.6212.6212.62asconhashav12
12.6212.6212.62asconxofav12
16.5516.5916.70T:xoodyakv1
18.8318.8518.87asconxofv12
18.8818.8818.88asconhashv12
24.0824.0824.09asconhashabi32v12
34.8434.8434.84asconhashbi32v12
40.3140.3240.34T:esch256v2
41.2041.2341.25T:romulush
51.6351.6651.69T:esch384v2
220.83221.05221.18T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.594.694.75sha256
12.2212.2312.23sha512
18.9718.9719.53asconhashav12
19.3019.4819.89asconxofav12
19.4819.4819.73shake128
21.2321.3921.44T:xoodyakv1
27.8027.8928.16asconhashv12
28.0028.2528.53asconxofv12
41.1241.1241.62asconhashabi32v12
54.4854.5254.52T:esch256v2
54.7855.7355.83asconhashbi32v12
59.6659.9460.02T:romulush
79.0679.1279.23T:esch384v2
196.70197.44197.56T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.7524.7524.75sha256
71.8871.8878.62asconhashav12
73.0073.3874.12T:xoodyakv1
72.6275.0075.00asconxofav12
95.6295.6295.62asconhashv12
97.7597.8898.50sha512
97.3898.88101.12asconxofv12
154.88155.38156.00shake128
170.62171.62173.25T:romulush
176.00176.00176.00asconhashabi32v12
200.62200.88201.62T:esch256v2
209.12209.12217.12asconhashbi32v12
228.38229.38229.88T:photonbeetlehash256rate32v1
341.75342.00342.62T:esch384v2