VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 5 1600; 6 x 3200MHz; rumba5, supercop-20241022

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.864.874.87sha512
7.167.167.17shake128
11.7311.7311.73asconhashav12
11.48?11.73?14.25?asconxofav12
15.9916.0016.02T:xoodyakv1
17.7517.7517.75asconxofv12
17.7517.7517.75asconhashv12
21.9021.9121.91asconhashabi32v12
32.2832.2832.28asconhashbi32v12
38.5638.5638.56T:esch256v2
38.8738.8738.87T:romulush
48.2148.2448.31T:esch384v2
223.96224.03224.17T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
5.075.085.09sha512
7.327.337.33shake128
11.8511.8511.85asconhashav12
11.85?11.86?14.12?asconxofav12
15.9716.0816.12T:xoodyakv1
17.9117.9117.91asconhashv12
17.9117.9117.91asconxofv12
22.2122.2122.21asconhashabi32v12
32.6432.6432.64asconhashbi32v12
38.8138.8138.81T:esch256v2
39.2039.2039.20T:romulush
48.7048.7348.80T:esch384v2
223.40223.66223.72T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
5.435.445.44sha512
7.867.877.92shake128
12.0612.0612.06asconhashav12
12.07?12.09?14.33?asconxofav12
16.2116.2216.32T:xoodyakv1
18.1618.1718.17asconhashv12
18.1718.1718.17asconxofv12
22.7222.7222.75asconhashabi32v12
33.2433.2433.24asconhashbi32v12
39.2239.2239.22T:esch256v2
39.7539.7539.76T:romulush
49.5249.5649.59T:esch384v2
222.82222.88222.98T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.312.312.32sha256
5.845.845.85sha512
8.388.398.40shake128
12.6212.6212.62asconhashav12
12.62?12.65?14.88?asconxofav12
16.5516.5916.70T:xoodyakv1
18.8818.8818.88asconhashv12
18.9018.9018.90asconxofv12
24.0724.0824.16asconhashabi32v12
34.8434.8434.84asconhashbi32v12
40.3240.3340.33T:esch256v2
41.2241.2341.25T:romulush
51.6551.6951.76T:esch384v2
220.89220.97221.16T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.614.674.70sha256
12.4412.4412.45sha512
18.9718.9719.58asconhashav12
19.6219.6619.81shake128
19.8420.1421.91asconxofav12
21.2321.4121.44T:xoodyakv1
27.7527.7528.22asconxofv12
27.8027.8928.16asconhashv12
41.1941.8942.05asconhashabi32v12
54.2054.4854.56T:esch256v2
54.7854.7855.33asconhashbi32v12
59.7759.9460.16T:romulush
79.1479.2779.34T:esch384v2
197.12197.52197.62T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.7524.7524.75sha256
71.8871.8876.25asconhashav12
72.8873.3874.12T:xoodyakv1
74.8876.7578.25asconxofav12
95.6295.6295.62asconhashv12
95.8895.8895.88asconxofv12
98.3898.5098.50sha512
155.50155.50158.00shake128
170.50171.62173.00T:romulush
176.00176.25183.00asconhashabi32v12
199.75200.88200.88T:esch256v2
209.12209.12209.12asconhashbi32v12
229.00229.50230.12T:photonbeetlehash256rate32v1
341.75342.25345.62T:esch384v2