VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen (800f11); 2017 AMD Ryzen 7 1700; 8 x 3000MHz; rumba7, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
4.864.874.87sha512
7.167.187.19shake128
11.7311.7311.73asconhashav12
11.7311.7311.74asconxofav12
15.9916.0016.01T:xoodyakv1
17.7517.7517.75asconhashv12
17.7517.7517.75asconxofv12
21.9121.9121.91asconhashabi32v12
32.2832.2832.28asconhashbi32v12
38.5638.5638.56T:esch256v2
38.8738.8738.87T:romulush
48.2448.2748.32T:esch384v2
223.92224.01224.12T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
5.085.085.08sha512
7.327.337.34shake128
11.8511.8511.85asconhashav12
11.8511.8511.85asconxofav12
16.0516.0816.13T:xoodyakv1
17.9017.9017.91asconxofv12
17.9017.9117.91asconhashv12
22.2122.2122.21asconhashabi32v12
32.6432.6432.64asconhashbi32v12
38.8138.8138.81T:esch256v2
39.2039.2039.20T:romulush
48.7348.7648.79T:esch384v2
223.55223.58223.74T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
5.425.435.44sha512
7.837.857.86shake128
12.0612.0612.06asconhashav12
12.0712.0712.07asconxofav12
16.1916.2216.33T:xoodyakv1
18.1518.1518.18asconxofv12
18.1518.1718.17asconhashv12
22.7222.7222.73asconhashabi32v12
33.2433.2433.24asconhashbi32v12
39.2239.2339.23T:esch256v2
39.7439.7539.76T:romulush
49.5349.5649.60T:esch384v2
222.68222.84223.07T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.312.312.32sha256
6.046.056.07sha512
8.388.408.46shake128
12.6212.6212.62asconhashav12
12.6212.6212.62asconxofav12
16.5516.5916.70T:xoodyakv1
18.8318.8318.87asconxofv12
18.8418.8818.88asconhashv12
24.0824.0824.10asconhashabi32v12
34.8434.8434.84asconhashbi32v12
40.3140.3340.33T:esch256v2
41.2341.2541.25T:romulush
51.6551.7051.76T:esch384v2
220.93221.02221.14T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.724.814.89sha256
14.6414.8614.92sha512
18.9718.9719.70asconhashav12
19.3019.4819.97asconxofav12
19.5219.5219.88shake128
21.2321.4421.52T:xoodyakv1
27.8027.8928.02asconhashv12
28.0028.2728.47asconxofv12
41.1241.2241.69asconhashabi32v12
54.4554.5654.64T:esch256v2
54.7854.7855.77asconhashbi32v12
59.7059.9460.02T:romulush
79.0879.1679.33T:esch384v2
197.50197.53197.77T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
26.1226.7528.62sha256
71.8871.8875.62asconhashav12
73.0073.2573.62T:xoodyakv1
72.6275.0075.00asconxofav12
95.6295.6298.38asconhashv12
95.6297.2598.00asconxofv12
102.12104.25105.62sha512
154.88154.88154.88shake128
170.25171.38172.88T:romulush
176.00176.00176.88asconhashabi32v12
200.88201.25201.25T:esch256v2
209.12209.12209.12asconhashbi32v12
228.75230.50230.75T:photonbeetlehash256rate32v1
342.12342.88344.38T:esch384v2