VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Skylake (506e3); 2015 Intel Xeon E3-1220 v5; 4 x 3000MHz; samba, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.255.25sha512
6.286.286.29shake128
7.677.687.69sha256
14.5114.5314.54asconhashav12
14.5114.5314.53asconxofav12
15.1115.1215.13T:xoodyakv1
21.7321.7521.76asconxofv12
21.7321.7521.76asconhashv12
27.0227.6527.80asconhashabi32v12
35.6435.6735.70T:esch256v2
40.9441.1241.34asconhashbi32v12
42.5142.5542.60T:romulush
44.7644.7744.78T:esch384v2
230.62231.02232.84T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.465.47sha512
6.456.466.46shake128
8.228.238.25sha256
14.6414.6714.70asconhashav12
14.6614.6714.69asconxofav12
15.1915.2115.23T:xoodyakv1
21.9321.9521.96asconxofv12
21.9421.9621.97asconhashv12
27.3728.0028.03asconhashabi32v12
35.9235.9535.98T:esch256v2
40.9941.4741.56asconhashbi32v12
42.8942.9443.07T:romulush
45.2245.2345.24T:esch384v2
229.97230.09232.38T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.785.795.81sha512
6.946.956.96shake128
9.129.149.16sha256
14.8614.9114.94asconhashav12
14.8714.9114.93asconxofav12
15.3215.3515.38T:xoodyakv1
22.2422.2722.30asconxofv12
22.2522.2822.31asconhashv12
27.8627.9128.51asconhashabi32v12
36.3036.3536.43T:esch256v2
41.2241.7642.18asconhashbi32v12
43.5543.6043.69T:romulush
45.9545.9745.98T:esch384v2
229.37229.45230.09T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.146.146.17sha512
7.567.577.61shake128
11.6911.7011.74sha256
15.5515.5915.63asconxofav12
15.5515.5915.63asconhashav12
15.6815.7215.78T:xoodyakv1
23.0623.1223.23asconxofv12
23.1223.1423.21asconhashv12
29.1529.7929.84asconhashabi32v12
37.3337.3837.46T:esch256v2
42.9043.0543.87asconhashbi32v12
45.1645.2045.30T:romulush
47.9547.9747.99T:esch384v2
227.58229.29229.50T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.6212.7012.75sha512
18.5518.6118.88shake128
20.5520.6920.78T:xoodyakv1
23.5823.8124.20asconhashav12
23.6623.8624.06asconxofav12
33.8134.0334.23asconxofv12
33.9734.3334.67asconhashv12
43.7543.8643.97asconhashabi32v12
44.3844.4544.61sha256
50.7250.8851.23T:esch256v2
61.3961.5061.64asconhashbi32v12
65.8866.0666.23T:romulush
73.3173.4273.50T:esch384v2
202.92203.64204.59T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
73.5074.1275.25T:xoodyakv1
91.1292.0092.75asconhashav12
91.5092.1293.25asconxofav12
101.25101.62102.62sha512
120.12121.38122.25asconhashv12
120.62121.38123.00asconxofv12
146.75147.62148.38shake128
156.00156.50157.88asconhashabi32v12
186.12188.00188.88T:romulush
190.62191.38193.88T:esch256v2
209.25209.75210.50asconhashbi32v12
238.00238.75239.88T:photonbeetlehash256rate32v1
283.12284.88286.25sha256
318.88319.38319.88T:esch384v2