VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
6.286.286.29shake128
7.677.687.69sha256
14.4414.4814.53asconhashav12
14.4514.5014.53asconxofav12
15.0215.0315.04T:xoodyakv1
21.7221.7421.76asconxofv12
21.7221.7421.76asconhashv12
27.0227.0427.29asconhashabi32v12
34.1334.1534.17T:esch256v2
40.1440.1740.21asconhashbi32v12
43.5543.5743.72T:romulush
46.0746.3147.56T:esch384v2
225.16231.48232.47T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.455.46sha512
6.456.466.47shake128
8.118.128.14sha256
14.6014.6314.69asconhashav12
14.6314.6714.70asconxofav12
15.1315.1515.16T:xoodyakv1
21.9221.9421.95asconhashv12
21.9321.9521.97asconxofv12
27.3427.3627.39asconhashabi32v12
34.4034.4434.47T:esch256v2
40.5440.5640.58asconhashbi32v12
43.9443.9744.08T:romulush
46.6546.6947.81T:esch384v2
225.29231.02231.12T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.795.815.82sha512
6.956.966.97shake128
8.858.878.89sha256
14.8314.8614.89asconhashav12
14.8514.8914.93asconxofav12
15.2915.3315.35T:xoodyakv1
22.2422.2722.30asconhashv12
22.2522.2822.32asconxofv12
27.8427.8728.10asconhashabi32v12
34.7434.8234.90T:esch256v2
41.1841.2141.23asconhashbi32v12
44.5644.5944.73T:romulush
47.4347.4748.72T:esch384v2
224.93230.22230.37T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.106.126.13sha512
7.557.577.60shake128
10.9310.9611.01sha256
15.4915.5515.59asconhashav12
15.5315.5715.61asconxofav12
15.8015.8515.92T:xoodyakv1
23.0723.1323.20asconxofv12
23.0623.1423.18asconhashv12
29.1029.1429.20asconhashabi32v12
35.9035.9736.06T:esch256v2
42.7942.8442.91asconhashbi32v12
46.1946.2546.36T:romulush
49.4649.5650.75T:esch384v2
222.41228.25228.44T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.4512.5012.55sha512
18.5418.5718.73shake128
20.2620.4620.61T:xoodyakv1
23.3823.6124.25asconxofav12
23.7524.2324.60asconhashav12
33.5433.7634.31asconhashv12
33.5733.8834.36asconxofv12
37.6737.8337.93sha256
43.1543.5044.03asconhashabi32v12
48.5949.0449.49T:esch256v2
61.2361.3861.62asconhashbi32v12
67.1767.4267.68T:romulush
75.4975.7777.55T:esch384v2
198.00202.68203.15T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.4774.3675.97T:xoodyakv1
90.0590.9291.69asconhashav12
91.4392.2694.65asconxofav12
99.70100.19101.40sha512
119.51120.52122.29asconhashv12
119.93120.64122.17asconxofv12
146.20146.78147.66shake128
155.91156.64157.99asconhashabi32v12
180.55181.59183.95T:esch256v2
189.36190.35192.67T:romulush
208.50209.28210.88asconhashbi32v12
230.88232.42235.10sha256
228.94233.05234.16T:photonbeetlehash256rate32v1
324.97327.05334.60T:esch384v2