VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.275.275.28sha512
7.127.127.13shake128
7.797.807.81sha256
14.0714.0814.10asconhashav12
14.0814.0914.09asconxofav12
16.4116.4116.42T:xoodyakv1
21.1621.1621.17asconxofv12
21.1521.1721.18asconhashv12
28.1028.1228.64asconhashabi32v12
37.4037.4337.44T:esch256v2
41.5242.3642.49asconhashbi32v12
42.9743.0043.20T:romulush
48.7948.9450.19T:esch384v2
243.83243.88244.49T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.515.525.54sha512
7.297.297.30shake128
8.238.258.27sha256
14.2214.2414.25asconxofav12
14.2314.2414.25asconhashav12
16.4816.5016.50T:xoodyakv1
21.3521.3721.39asconhashv12
21.3721.3921.41asconxofv12
28.4528.8628.88asconhashabi32v12
37.6237.6237.67T:esch256v2
41.9742.7342.79asconhashbi32v12
43.3843.4043.54T:romulush
49.4149.4450.56T:esch384v2
243.29243.34243.38T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.895.895.96sha512
7.837.837.85shake128
9.099.129.16sha256
14.4314.4614.49asconxofav12
14.4814.4914.51asconhashav12
16.6216.6316.65T:xoodyakv1
21.6821.6921.71asconxofv12
21.6821.7121.73asconhashv12
28.8829.2529.32asconhashabi32v12
37.9938.0638.11T:esch256v2
42.5543.2943.38asconhashbi32v12
43.9644.0444.13T:romulush
50.2350.2851.40T:esch384v2
242.52242.58242.61T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.436.446.49sha512
8.448.478.49shake128
11.2711.3311.36sha256
15.0315.0815.11asconhashav12
15.0515.0815.12asconxofav12
16.9917.0117.02T:xoodyakv1
22.4222.4922.56asconhashv12
22.4422.4922.53asconxofv12
30.0830.4330.49asconhashabi32v12
38.9439.0639.13T:esch256v2
44.1044.1444.82asconhashbi32v12
45.6645.7245.83T:romulush
52.3752.4453.56T:esch384v2
240.43240.56240.68T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
14.0014.0014.19sha512
20.0020.1920.31shake128
21.7521.8121.88T:xoodyakv1
22.3822.5622.88asconxofav12
22.4422.5622.69asconhashav12
32.1932.3832.56asconxofv12
32.5632.8132.94asconhashv12
38.5038.6938.94sha256
45.2545.4445.69asconhashabi32v12
52.2552.5652.69T:esch256v2
62.7563.1263.50asconhashbi32v12
65.8166.0066.12T:romulush
80.1980.3881.69T:esch384v2
213.38213.69214.12T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
74.5075.0075.50T:xoodyakv1
81.5082.0083.00asconhashav12
81.5082.0083.00asconxofav12
101.00101.50104.50sha512
110.00110.50112.00asconxofv12
113.50114.50116.00asconhashv12
158.50159.50160.50shake128
161.00162.00163.00asconhashabi32v12
183.50184.00185.50T:romulush
194.50195.00196.50T:esch256v2
209.50210.50211.50asconhashbi32v12
236.50238.50242.00sha256
243.00243.50244.00T:photonbeetlehash256rate32v1
343.00344.50351.00T:esch384v2