VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.864.874.87sha512
7.167.177.20shake128
11.7311.7311.73asconxofav12
11.7311.7311.74asconhashav12
15.8715.9516.03T:xoodyakv1
17.7517.7517.76asconhashv12
17.7517.7517.75asconxofv12
22.0022.0022.00asconhashabi32v12
32.4432.5032.50asconhashbi32v12
38.5638.5638.61T:esch256v2
38.8738.8738.87T:romulush
48.1948.2348.28T:esch384v2
224.10224.35225.06T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
5.075.075.08sha512
7.357.367.36shake128
11.8611.8611.86asconxofav12
11.8611.8611.86asconhashav12
15.9716.0416.12T:xoodyakv1
17.9117.9117.91asconxofv12
17.9117.9117.91asconhashv12
22.3122.3122.31asconhashabi32v12
32.8532.8532.85asconhashbi32v12
38.6738.8138.86T:esch256v2
39.2039.2039.21T:romulush
48.7048.7448.76T:esch384v2
223.68223.73223.82T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.132.13sha256
5.425.435.44sha512
7.897.907.90shake128
12.0712.0812.08asconxofav12
12.0812.0812.10asconhashav12
16.2116.2416.33T:xoodyakv1
18.1718.1718.18asconxofv12
18.1718.1718.18asconhashv12
22.8122.8222.82asconhashabi32v12
33.4533.4533.45asconhashbi32v12
39.2139.2239.22T:esch256v2
39.7539.7639.77T:romulush
49.5049.5449.58T:esch384v2
222.86223.08223.17T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.312.312.32sha256
5.815.835.88sha512
8.508.518.52shake128
12.6512.6712.68asconxofav12
12.6712.6712.73asconhashav12
16.5716.5916.69T:xoodyakv1
18.85?18.86?21.40?asconxofv12
18.8618.8818.89asconhashv12
24.1824.1824.18asconhashabi32v12
35.0235.0235.02asconhashbi32v12
40.3040.3040.32T:esch256v2
41.2341.2641.28T:romulush
51.6151.6551.68T:esch384v2
221.06221.14221.25T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.644.684.76sha256
12.4712.4812.48sha512
19.4619.6120.27asconxofav12
19.5219.7820.37asconhashav12
20.4420.4420.44shake128
21.1521.1921.28T:xoodyakv1
27.8328.1530.12asconxofv12
27.9828.2028.59asconhashv12
41.2241.2241.71asconhashabi32v12
54.1454.2154.32T:esch256v2
54.6754.6755.24asconhashbi32v12
59.9260.0760.35T:romulush
79.0579.1479.23T:esch384v2
196.55196.93197.38T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.8824.8824.91sha256
71.6273.0074.76asconxofav12
73.0673.4775.01T:xoodyakv1
72.2274.6677.83asconhashav12
94.5095.4197.71asconxofv12
96.9798.81100.78asconhashv12
99.2599.25100.32sha512
161.09161.98162.38shake128
170.11171.36172.62T:romulush
177.00177.00177.00asconhashabi32v12
201.79202.07203.38T:esch256v2
209.47209.75210.94asconhashbi32v12
230.84230.99232.23T:photonbeetlehash256rate32v1
341.36341.66342.90T:esch384v2