VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
7.247.257.27shake128
7.677.687.69sha256
14.5114.5214.53asconxofav12
14.5014.5214.53asconhashav12
15.0115.0215.03T:xoodyakv1
21.7321.7421.75asconxofv12
21.7421.7421.76asconhashv12
27.4327.6927.77asconhashabi32v12
34.1334.1534.22T:esch256v2
40.4740.8641.24asconhashbi32v12
43.5543.5743.59T:romulush
46.0547.6647.84T:esch384v2
224.33224.46224.51T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.455.46sha512
7.477.487.50shake128
8.118.138.14sha256
14.6214.6314.68asconhashav12
14.6214.6714.69asconxofav12
15.1515.1615.17T:xoodyakv1
21.9321.9521.96asconhashv12
21.9321.9521.97asconxofv12
28.0028.0128.02asconhashabi32v12
34.4034.4334.49T:esch256v2
40.5941.1141.56asconhashbi32v12
43.9343.9543.98T:romulush
46.6848.1448.16T:esch384v2
223.91224.03224.08T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.795.805.82sha512
8.058.068.08shake128
8.868.878.90sha256
14.8714.9014.94asconhashav12
14.8814.9114.94asconxofav12
15.3315.3515.37T:xoodyakv1
22.2422.2722.30asconhashv12
22.2322.2822.29asconxofv12
28.3928.5228.54asconhashabi32v12
34.8634.9134.96T:esch256v2
41.1841.2242.12asconhashbi32v12
44.5844.5944.61T:romulush
47.4648.9248.96T:esch384v2
223.17223.30223.38T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.106.126.13sha512
8.558.568.61shake128
10.9510.9811.01sha256
15.5315.5615.62asconxofav12
15.5215.5715.61asconhashav12
15.8315.8515.89T:xoodyakv1
23.1123.1423.20asconhashv12
23.1123.1623.20asconxofv12
29.5629.7829.84asconhashabi32v12
36.0236.1436.21T:esch256v2
42.8242.9343.56asconhashbi32v12
46.2646.2946.32T:romulush
49.4851.0151.12T:esch384v2
221.39221.54221.63T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.5012.5612.64sha512
19.8820.0320.17shake128
20.4220.4820.62T:xoodyakv1
23.7223.8924.25asconxofav12
23.7823.9224.19asconhashav12
33.7334.0034.41asconxofv12
33.8634.1434.47asconhashv12
37.6137.7837.95sha256
43.7043.8844.05asconhashabi32v12
48.5048.8149.16T:esch256v2
61.3061.4561.84asconhashbi32v12
67.4567.5667.73T:romulush
75.7077.9778.31T:esch384v2
196.39196.59196.83T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
75.8876.3877.12T:xoodyakv1
90.3891.1291.62asconhashav12
91.5092.0093.38asconxofav12
100.25100.50101.62sha512
120.50121.25121.88asconhashv12
120.50121.50122.12asconxofv12
156.50157.25158.50asconhashabi32v12
157.38159.12160.62shake128
181.12182.12183.38T:esch256v2
189.88190.88191.12T:romulush
209.50210.25211.00asconhashbi32v12
227.00227.88228.38T:photonbeetlehash256rate32v1
229.88231.00232.00sha256
328.62335.25336.88T:esch384v2