VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.829.849.85shake128
9.789.879.96sha512
13.7713.7913.80sha256
19.8619.8619.86asconxofav12
19.8619.8619.87asconhashav12
29.6529.6529.72asconxofv12
29.6629.6629.71asconhashv12
31.4131.4231.43T:xoodyakv1
37.9337.9437.99asconhashabi32v12
56.5156.5556.59asconhashbi32v12
67.4167.5367.74T:esch256v2
78.6178.6578.67T:romulush
86.2286.5286.87T:esch384v2
402.49402.56402.63T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.0510.0610.08shake128
10.8010.8210.88sha512
14.7114.7214.73sha256
20.0520.0520.05asconxofav12
20.0620.0620.06asconhashav12
29.9129.9129.91asconxofv12
29.9129.9129.91asconhashv12
31.5631.5831.58T:xoodyakv1
38.2838.2838.30asconhashabi32v12
56.9756.9856.99asconhashbi32v12
67.7667.8368.15T:esch256v2
79.2479.2779.29T:romulush
87.0987.3787.65T:esch384v2
401.68401.82401.94T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.7710.7810.80shake128
12.5012.5412.57sha512
16.2316.2716.33sha256
20.3620.3620.36asconxofav12
20.3920.3920.39asconhashav12
30.3230.3230.32asconxofv12
30.3630.3630.36asconhashv12
31.8631.8631.86T:xoodyakv1
38.8938.9038.91asconhashabi32v12
57.7457.7457.76asconhashbi32v12
68.5168.5568.72T:esch256v2
80.3680.3680.42T:romulush
88.5688.7088.76T:esch384v2
400.32400.42400.94T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.6511.6511.67shake128
15.9716.0516.15sha512
20.3620.3920.60sha256
21.2021.2121.21asconxofav12
21.3221.3221.32asconhashav12
31.5031.5031.50asconhashv12
31.5231.5231.52asconxofv12
32.5132.5132.53T:xoodyakv1
40.5240.5540.61asconhashabi32v12
59.8259.8259.82asconhashbi32v12
70.5570.5670.74T:esch256v2
83.3283.3383.43T:romulush
92.4892.5392.59T:esch384v2
396.80396.94397.04T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
27.7327.7327.73shake128
31.9531.9531.95asconxofav12
32.1232.1232.12asconhashav12
41.3641.4142.02T:xoodyakv1
45.6245.6245.62asconhashv12
45.8845.8845.88asconxofv12
60.7560.8360.95asconhashabi32v12
64.9165.0665.52sha512
73.2073.3875.30sha256
85.5985.5985.59asconhashbi32v12
97.1797.2097.67T:esch256v2
121.03121.08121.22T:romulush
142.62143.08143.09T:esch384v2
352.50352.50352.98T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
117.38117.38117.38asconhashav12
119.12119.50119.50asconxofav12
142.62143.12143.62T:xoodyakv1
155.88155.88155.88asconhashv12
158.62158.62158.62asconxofv12
218.62220.00221.62asconhashabi32v12
220.50220.50220.50shake128
290.75290.75290.75asconhashbi32v12
339.12340.75340.75T:romulush
370.25372.88377.25T:esch256v2
409.12410.00410.50T:photonbeetlehash256rate32v1
475.75480.75493.00sha256
554.00564.25570.62sha512
628.12629.50630.12T:esch384v2