VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20260217

[Page version: 20260313 04:28:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.275.285.28sha512
7.117.127.13shake128
7.787.807.84sha256
14.0614.1514.29asconhashav12
14.0714.1914.30asconxofav12
16.4016.4116.41T:xoodyakv1
21.3221.3321.34asconxofv12
21.3321.3421.36asconhashv12
28.0928.1228.41asconhashabi32v12
37.3137.3437.45T:esch256v2
42.2542.3042.35asconhashbi32v12
42.5942.6542.95T:romulush
47.0747.0847.10T:esch384v2
259.14259.24259.47T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.535.565.59sha512
7.307.317.31shake128
8.388.408.44sha256
14.2614.3114.41asconxofav12
14.2614.3514.45asconhashav12
16.5116.5116.52T:xoodyakv1
21.5321.5621.58asconxofv12
21.5421.5721.61asconhashv12
28.3928.4028.54asconhashabi32v12
37.5737.6037.71T:esch256v2
42.1742.6442.67asconhashbi32v12
42.9943.0243.25T:romulush
47.5547.5647.57T:esch384v2
258.64258.67258.80T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.885.925.99sha512
7.847.877.89shake128
9.449.509.56sha256
14.5214.5914.70asconhashav12
14.5314.6114.69asconxofav12
16.6616.6716.69T:xoodyakv1
21.8421.8721.89asconhashv12
21.8421.8721.90asconxofv12
28.8628.8829.04asconhashabi32v12
37.9338.0138.10T:esch256v2
42.7043.2543.30asconhashbi32v12
43.6543.6843.91T:romulush
48.3548.3648.38T:esch384v2
257.87257.92257.96T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.596.626.65sha512
8.548.588.64shake128
12.1212.3912.43sha256
15.1815.2715.39asconxofav12
15.2215.3115.41asconhashav12
17.0517.0817.10T:xoodyakv1
22.6222.7122.79asconhashv12
22.7022.7422.79asconxofv12
30.0530.0830.21asconhashabi32v12
39.0839.1339.24T:esch256v2
44.1444.7344.85asconhashbi32v12
45.3445.4345.66T:romulush
50.4550.4850.51T:esch384v2
255.75255.84255.95T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
14.7614.9015.25sha512
20.6220.9121.55shake128
22.3622.4722.62T:xoodyakv1
23.3323.7324.22asconxofav12
23.5023.8624.38asconhashav12
32.6732.8633.07asconhashv12
33.0433.3733.66asconxofv12
44.7544.9845.08asconhashabi32v12
45.2846.0546.38sha256
52.7852.9953.39T:esch256v2
64.3364.6965.06asconhashbi32v12
65.8666.0966.49T:romulush
77.2977.4877.71T:esch384v2
227.57227.94228.32T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
79.7580.1580.86T:xoodyakv1
90.3091.9994.69asconhashav12
91.2694.0296.09asconxofav12
105.90107.22111.96sha512
112.04113.31115.35asconhashv12
115.88117.07118.81asconxofv12
160.26161.01162.72asconhashabi32v12
163.64165.92170.10shake128
184.86186.10187.57T:romulush
197.70198.60199.95T:esch256v2
219.23220.48222.43asconhashbi32v12
261.66263.21265.92T:photonbeetlehash256rate32v1
285.94292.21296.01sha256
337.01337.92339.60T:esch384v2