VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.097.107.11sha512
9.149.159.15shake128
11.5411.5811.59sha256
18.4718.4818.51asconhashav12
18.4918.4918.50asconxofav12
22.8122.8122.81T:xoodyakv1
27.4727.4827.55asconxofv12
27.4727.4827.51asconhashv12
37.4937.5037.50asconhashabi32v12
56.1156.1156.11asconhashbi32v12
57.8757.8857.88T:esch256v2
64.9864.9965.93T:esch384v2
78.0478.0578.06T:romulush
402.77403.64405.18T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.078.088.09sha512
9.339.339.35shake128
12.3412.3912.42sha256
18.6118.6118.61asconxofav12
18.6118.6118.61asconhashav12
22.9522.9522.96T:xoodyakv1
27.6927.6927.69asconhashv12
27.6927.6927.69asconxofv12
37.9437.9437.95asconhashabi32v12
56.6656.6656.66asconhashbi32v12
58.2458.2558.25T:esch256v2
65.6365.6465.64T:esch384v2
78.7378.7478.74T:romulush
402.52405.16406.43T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.709.769.87sha512
10.0110.0210.04shake128
14.0014.0714.09sha256
18.9318.9318.94asconxofav12
18.9318.9318.93asconhashav12
23.1823.1923.20T:xoodyakv1
28.1028.1028.10asconhashv12
28.1028.1028.10asconxofv12
38.8038.8038.80asconhashabi32v12
57.6557.6557.65asconhashbi32v12
58.9058.9058.91T:esch256v2
66.7366.7366.74T:esch384v2
79.9079.9079.94T:romulush
400.70400.90404.51T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.9010.9110.96shake128
13.2513.3913.49sha512
17.9418.1118.22sha256
19.8019.8019.80asconxofav12
19.8019.8019.81asconhashav12
23.8223.8223.86T:xoodyakv1
29.2029.2029.21asconhashv12
29.2029.2029.20asconxofv12
41.1041.1041.11asconhashabi32v12
60.3060.3060.30asconhashbi32v12
60.6660.7160.72T:esch256v2
69.6969.7069.77T:esch384v2
83.0483.1483.19T:romulush
397.12397.19397.26T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
26.4526.5026.62shake128
30.4130.4230.42asconxofav12
30.4430.9431.06asconhashav12
31.4431.5532.56T:xoodyakv1
42.8342.8442.84asconhashv12
42.8442.8942.92asconxofv12
62.0362.6164.12sha512
68.6969.3470.72sha256
70.4870.5870.59asconhashabi32v12
83.1483.1483.22T:esch256v2
93.4793.4893.94asconhashbi32v12
106.78107.61107.62T:esch384v2
123.16123.16123.27T:romulush
354.36354.77357.33T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
113.38115.88117.75T:xoodyakv1
118.12118.12118.25asconxofav12
118.38118.38118.50asconhashav12
150.50150.50150.50asconhashv12
150.88150.88151.62asconxofv12
209.38210.12213.50shake128
297.50297.62298.38asconhashabi32v12
316.50316.50317.00T:esch256v2
351.75351.75355.25T:romulush
357.62358.12358.25asconhashbi32v12
413.12421.00424.25T:photonbeetlehash256rate32v1
456.88459.62461.75T:esch384v2
464.00468.50470.88sha256
497.50502.38514.25sha512