VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20250307

[Page version: 20250326 01:56:40]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.097.107.11sha512
11.5411.5811.59sha256
11.6011.6011.60shake128
18.4618.4718.47asconhashav12
18.4718.4818.53asconxofav12
22.8122.8122.81T:xoodyakv1
27.4727.4727.60asconhashv12
27.4827.5327.64asconxofv12
37.4937.5037.50asconhashabi32v12
56.1156.1156.11asconhashbi32v12
57.8757.8857.88T:esch256v2
64.9864.9965.93T:esch384v2
78.0478.0578.06T:romulush
402.77403.64405.18T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.078.088.09sha512
11.8211.8311.84shake128
12.3412.3912.42sha256
18.6118.6118.61asconxofav12
18.6118.6118.61asconhashav12
22.9522.9522.96T:xoodyakv1
27.6927.6927.69asconhashv12
27.6927.6927.69asconxofv12
37.9437.9437.95asconhashabi32v12
56.6656.6656.66asconhashbi32v12
58.2458.2558.25T:esch256v2
65.6365.6465.64T:esch384v2
78.7378.7478.74T:romulush
402.52405.16406.43T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.709.769.87sha512
12.6712.6912.71shake128
14.0014.0714.09sha256
18.9318.9318.93asconxofav12
18.9318.9318.94asconhashav12
23.1823.1923.20T:xoodyakv1
28.1028.1028.10asconhashv12
28.1028.1028.10asconxofv12
38.8038.8038.80asconhashabi32v12
57.6557.6557.65asconhashbi32v12
58.9058.9058.91T:esch256v2
66.7366.7366.74T:esch384v2
79.9079.9079.94T:romulush
400.70400.90404.51T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
13.2513.3913.49sha512
13.7313.7413.75shake128
17.9418.1118.22sha256
19.8019.8019.80asconxofav12
19.8019.8119.82asconhashav12
23.8223.8223.86T:xoodyakv1
29.2029.2029.21asconhashv12
29.2029.2129.21asconxofv12
41.1041.1041.11asconhashabi32v12
60.3060.3060.30asconhashbi32v12
60.6660.7160.72T:esch256v2
69.6969.7069.77T:esch384v2
83.0483.1483.19T:romulush
397.12397.19397.26T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
30.4130.4230.86asconxofav12
30.4430.4730.52asconhashav12
31.4431.5532.56T:xoodyakv1
32.8632.8932.91shake128
42.8342.8443.34asconhashv12
42.8642.9143.34asconxofv12
62.0362.6164.12sha512
68.6969.3470.72sha256
70.4870.5870.59asconhashabi32v12
83.1483.1483.22T:esch256v2
93.4793.4893.94asconhashbi32v12
106.78107.61107.62T:esch384v2
123.16123.16123.27T:romulush
354.36354.77357.33T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
113.38115.88117.75T:xoodyakv1
118.12118.12118.25asconxofav12
118.38118.38118.50asconhashav12
150.50150.50154.50asconhashv12
150.88150.88151.25asconxofv12
262.38262.62262.75shake128
297.50297.62298.38asconhashabi32v12
316.50316.50317.00T:esch256v2
351.75351.75355.25T:romulush
357.62358.12358.25asconhashbi32v12
413.12421.00424.25T:photonbeetlehash256rate32v1
456.88459.62461.75T:esch384v2
464.00468.50470.88sha256
497.50502.38514.25sha512