VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.315.325.32sha512
7.087.097.10shake128
7.767.787.79sha256
13.8514.0514.08asconhashav12
14.0514.0614.07asconxofav12
15.1615.1715.17T:xoodyakv1
20.7720.7820.78asconhashv12
21.0321.0621.22asconxofv12
28.8428.8628.88asconhashabi32v12
39.3339.3439.36T:esch256v2
42.3542.3642.38T:romulush
42.6043.0643.13asconhashbi32v12
49.0449.0549.06T:esch384v2
249.58249.74251.08T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.535.545.55sha512
7.267.277.27shake128
7.967.977.98sha256
14.0514.2214.24asconhashav12
14.1814.2214.24asconxofav12
15.2315.2415.26T:xoodyakv1
20.9921.0121.01asconhashv12
21.2421.3621.38asconxofv12
29.2229.2429.24asconhashabi32v12
39.6239.6639.67T:esch256v2
42.7342.7442.75T:romulush
43.1243.5243.60asconhashbi32v12
49.5549.5649.56T:esch384v2
249.34249.47250.37T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.875.885.90sha512
7.817.827.83shake128
8.308.328.34sha256
14.4714.5014.52asconxofav12
14.4114.5014.52asconhashav12
15.3715.3915.40T:xoodyakv1
21.2821.3321.57asconxofv12
21.3321.3521.37asconhashv12
29.6129.7029.81asconhashabi32v12
40.1440.1840.20T:esch256v2
43.3443.3743.41T:romulush
43.8643.9344.33asconhashbi32v12
50.3950.4150.42T:esch384v2
248.47248.59249.64T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.446.476.48sha512
8.508.528.53shake128
9.189.229.27sha256
15.0115.0915.14asconhashav12
14.9915.1115.14asconxofav12
15.7515.7715.81T:xoodyakv1
22.2022.2522.26asconhashv12
22.1322.2822.36asconxofv12
31.1631.2831.44asconhashabi32v12
41.2341.3041.33T:esch256v2
45.0145.0645.13T:romulush
45.8245.8246.26asconhashbi32v12
52.5752.6152.66T:esch384v2
246.54246.81247.32T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
14.2814.4414.69sha512
20.5020.6620.78T:xoodyakv1
20.7720.9121.00sha256
20.8321.0021.11shake128
22.8822.9123.19asconhashav12
22.9122.9423.14asconxofav12
32.1432.4532.48asconxofv12
33.4133.5033.81asconhashv12
51.5251.7051.95asconhashabi32v12
55.7855.8456.02T:esch256v2
65.3865.4865.75T:romulush
70.4870.6970.86asconhashbi32v12
80.3180.4480.72T:esch384v2
218.91219.55220.39T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
73.2573.8874.88T:xoodyakv1
86.1287.1288.00asconxofav12
86.1287.6288.50asconhashav12
94.5095.2596.38sha256
103.00103.88104.62sha512
110.38111.00113.00asconxofv12
122.75122.75123.50asconhashv12
164.62165.75167.38shake128
185.12186.50188.50T:romulush
209.50210.50212.12T:esch256v2
211.38212.00213.62asconhashabi32v12
251.50252.88255.62T:photonbeetlehash256rate32v1
264.50265.50267.12asconhashbi32v12
349.12350.12350.62T:esch384v2