VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20260330

[Page version: 20260422 02:30:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.195.225.24sha512
7.087.087.09shake128
7.777.777.79sha256
13.8413.9514.07asconhashav12
13.8414.0114.07asconxofav12
15.1515.1615.17T:xoodyakv1
20.7720.7820.79asconxofv12
20.7720.7820.79asconhashv12
28.3128.5728.79asconhashabi32v12
38.8939.0139.94T:esch256v2
42.3442.3642.37T:romulush
43.0843.0943.12asconhashbi32v12
49.0349.0449.05T:esch384v2
249.74249.92250.03T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.465.47sha512
7.267.277.27shake128
7.967.977.99sha256
14.0414.1314.23asconhashav12
14.0414.1714.23asconxofav12
15.2415.2515.26T:xoodyakv1
20.9420.9721.00asconhashv12
20.9520.9721.00asconxofv12
28.8929.0129.22asconhashabi32v12
39.2739.2940.16T:esch256v2
42.7242.7442.76T:romulush
43.5443.5443.56asconhashbi32v12
49.5449.5549.57T:esch384v2
249.18249.30249.46T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.905.925.94sha512
7.817.827.83shake128
8.298.318.33sha256
14.3614.4514.49asconhashav12
14.3914.4614.49asconxofav12
15.3815.4015.42T:xoodyakv1
21.2721.2921.35asconhashv12
21.2721.3121.35asconxofv12
29.3529.5829.78asconhashabi32v12
39.7539.7940.63T:esch256v2
43.3543.3743.41T:romulush
44.2144.2744.34asconhashbi32v12
50.3950.4150.44T:esch384v2
248.45248.54248.63T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.606.636.69sha512
8.498.518.53shake128
9.159.209.26sha256
15.0115.0515.11asconhashav12
15.0015.1115.15asconxofav12
15.7715.8015.85T:xoodyakv1
22.1522.2222.29asconhashv12
22.1822.2522.29asconxofv12
31.0231.2631.44asconhashabi32v12
40.8140.8540.90T:esch256v2
45.0145.0645.15T:romulush
46.0846.3146.32asconhashbi32v12
52.6052.6052.62T:esch384v2
246.45246.58246.81T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
16.5916.7317.10sha512
20.5120.6720.80sha256
20.7420.8821.13T:xoodyakv1
20.8821.1021.43shake128
22.6922.8623.01asconxofav12
22.6822.8822.98asconhashav12
33.3233.4833.67asconhashv12
33.3633.4833.66asconxofv12
51.2851.4851.77asconhashabi32v12
55.6756.0456.31T:esch256v2
65.3165.5765.79T:romulush
70.1370.3470.89asconhashbi32v12
80.2180.3880.63T:esch384v2
218.95219.48220.39T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
73.5675.5378.22T:xoodyakv1
85.1885.8486.68asconxofav12
85.5285.9687.53asconhashav12
94.0595.1896.55sha256
120.36122.35124.84asconhashv12
120.48122.42124.54asconxofv12
132.80133.31135.54sha512
163.99165.53167.09shake128
183.57185.18187.91T:romulush
207.05209.53213.78T:esch256v2
210.42212.21214.12asconhashabi32v12
251.48251.96253.44T:photonbeetlehash256rate32v1
263.19264.54267.32asconhashbi32v12
349.00349.56350.06T:esch384v2