VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.285.295.29sha512
7.127.127.12shake128
7.787.797.80sha256
14.1914.2014.21asconxofav12
14.1914.2014.21asconhashav12
16.4016.4116.42T:xoodyakv1
21.3221.3221.33asconxofv12
21.3321.3521.36asconhashv12
28.6028.6228.62asconhashabi32v12
37.3137.3337.35T:esch256v2
41.5341.6742.44asconhashbi32v12
42.4542.6142.62T:romulush
47.0747.0847.09T:esch384v2
259.33259.35259.37T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.555.555.56sha512
7.297.307.31shake128
8.358.378.39sha256
14.3414.3514.37asconxofav12
14.3414.3714.38asconhashav12
16.5016.5116.52T:xoodyakv1
21.5321.5321.56asconxofv12
21.5621.5721.60asconhashv12
28.8928.9028.92asconhashabi32v12
37.5737.5937.60T:esch256v2
41.9942.0042.73asconhashbi32v12
42.9943.0143.02T:romulush
47.5547.5647.57T:esch384v2
258.79258.82258.86T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.895.905.99sha512
7.847.867.87shake128
9.369.399.42sha256
14.6114.6314.67asconxofav12
14.6114.6414.67asconhashav12
16.6716.6816.69T:xoodyakv1
21.8421.8821.92asconhashv12
21.8721.8921.93asconxofv12
28.9829.3229.35asconhashabi32v12
37.9838.0338.07T:esch256v2
42.6142.6543.36asconhashbi32v12
43.6043.6343.66T:romulush
48.3448.3548.37T:esch384v2
257.96258.01258.04T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.436.456.48sha512
8.538.558.56shake128
11.9511.9712.01sha256
15.2215.2715.33asconxofav12
15.2415.2815.32asconhashav12
17.0717.0817.11T:xoodyakv1
22.6222.6922.74asconhashv12
22.6722.7222.79asconxofv12
30.5030.5930.62asconhashabi32v12
39.0839.1539.19T:esch256v2
44.1944.3144.97asconhashbi32v12
45.2445.2945.35T:romulush
50.4650.4950.54T:esch384v2
255.83255.92256.00T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
13.4213.5313.88sha512
20.7020.8121.06shake128
22.3922.5022.56T:xoodyakv1
23.4523.6224.16asconhashav12
23.3123.6624.06asconxofav12
32.8432.9433.06asconhashv12
33.1733.3933.64asconxofv12
44.5544.6744.80sha256
45.0245.2245.34asconhashabi32v12
52.5952.8453.02T:esch256v2
63.4263.7364.45asconhashbi32v12
65.7565.9566.20T:romulush
77.3477.5077.64T:esch384v2
227.67228.00228.38T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
80.2580.6281.00T:xoodyakv1
89.0091.2593.62asconhashav12
90.0091.2592.50asconxofav12
107.00108.00109.62sha512
113.12114.12115.50asconhashv12
116.12117.38118.75asconxofv12
160.62161.38162.25asconhashabi32v12
163.62164.12165.38shake128
185.62186.25186.88T:romulush
198.88199.25200.12T:esch256v2
215.62217.00219.75asconhashbi32v12
263.00264.25265.62T:photonbeetlehash256rate32v1
282.38283.50285.38sha256
337.12337.75338.25T:esch384v2