VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
6.286.286.29shake128
7.667.697.70sha256
14.5114.5214.53asconxofav12
14.4814.5214.54asconhashav12
15.0215.0315.05T:xoodyakv1
21.7421.7521.77asconxofv12
21.7421.7521.77asconhashv12
26.9727.0427.33asconhashabi32v12
34.1834.2334.44T:esch256v2
40.0940.3541.07asconhashbi32v12
44.4944.5344.91T:romulush
47.5547.8248.03T:esch384v2
232.10232.27232.71T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.455.46sha512
6.446.456.46shake128
8.238.258.31sha256
14.6614.6814.69asconhashav12
14.6614.6814.70asconxofav12
15.1515.1715.18T:xoodyakv1
21.9321.9521.97asconhashv12
21.9321.9521.97asconxofv12
27.3327.3627.59asconhashabi32v12
34.4534.4934.54T:esch256v2
40.5640.5741.32asconhashbi32v12
44.8944.9144.95T:romulush
47.9448.2848.30T:esch384v2
231.16231.26233.00T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.805.805.82sha512
6.936.946.96shake128
9.159.199.39sha256
14.8614.8914.93asconhashav12
14.8614.9114.95asconxofav12
15.3115.3415.37T:xoodyakv1
22.2322.2722.31asconhashv12
22.2522.2922.32asconxofv12
27.8627.8828.00asconhashabi32v12
34.9234.9735.02T:esch256v2
41.1841.2241.62asconhashbi32v12
45.5445.5745.60T:romulush
48.7249.0749.12T:esch384v2
230.40230.45230.54T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.106.116.13sha512
7.567.597.62shake128
11.7811.8512.24sha256
15.5215.5615.60asconhashav12
15.5315.6015.65asconxofav12
15.8515.8915.94T:xoodyakv1
23.0623.1223.19asconhashv12
23.0723.1223.19asconxofv12
29.1429.1829.23asconhashabi32v12
36.0736.2036.31T:esch256v2
42.8642.9443.39asconhashbi32v12
47.3947.4447.50T:romulush
50.7851.1851.23T:esch384v2
228.45228.56228.70T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.5812.6812.95sha512
18.5618.6118.85shake128
20.3320.5120.68T:xoodyakv1
23.4123.7024.29asconhashav12
23.5323.7524.34asconxofav12
33.5233.8334.24asconhashv12
33.5633.8534.31asconxofv12
43.2343.7144.06asconhashabi32v12
44.76?45.45?50.13?sha256
48.9349.3850.00T:esch256v2
61.9562.1862.55asconhashbi32v12
70.0870.3871.06T:romulush
77.6878.0078.28T:esch384v2
202.75203.02203.32T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
71.9272.2473.28T:xoodyakv1
90.6191.3392.26asconhashav12
91.0591.9393.58asconxofav12
100.23101.81103.53sha512
120.27120.96122.81asconhashv12
120.54121.26122.69asconxofv12
146.58147.35148.49shake128
155.78156.44157.57asconhashabi32v12
182.02183.64186.86T:esch256v2
206.32207.85209.28T:romulush
210.99212.10214.39asconhashbi32v12
233.30233.81234.82T:photonbeetlehash256rate32v1
287.30?290.29?320.44?sha256
333.79336.50337.28T:esch384v2