VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.769.779.79sha512
9.859.869.88shake128
13.0213.0513.22sha256
19.1919.1919.19T:xoodyakv1
19.7619.7819.87asconhashav12
19.7819.9119.92asconxofav12
29.6629.6729.67asconxofv12
29.6729.6729.67asconhashv12
37.9837.9938.06asconhashabi32v12
53.7253.7253.73T:romulush
56.6256.6356.90asconhashbi32v12
60.4960.4960.61T:esch256v2
81.8082.1783.31T:esch384v2
398.62398.85399.85T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.0910.0910.14shake128
10.1510.1710.19sha512
13.3513.3513.47sha256
19.3119.3119.31T:xoodyakv1
20.0020.0020.00asconhashav12
19.9820.0820.12asconxofav12
29.9129.9129.92asconhashv12
29.9229.9229.93asconxofv12
38.4738.4838.92asconhashabi32v12
54.1754.1754.18T:romulush
57.2057.2057.39asconhashbi32v12
60.8960.8960.90T:esch256v2
82.5583.0383.96T:esch384v2
397.72397.94398.18T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.7810.7810.78shake128
10.8010.8310.88sha512
13.8413.8613.94sha256
19.5319.5319.54T:xoodyakv1
20.3220.3320.42asconxofav12
20.3620.3620.36asconhashav12
30.3430.3530.35asconhashv12
30.3530.3530.37asconxofv12
39.2439.2639.28asconhashabi32v12
54.9354.9354.94T:romulush
58.1658.1658.16asconhashbi32v12
61.5761.5861.92T:esch256v2
83.9184.0885.31T:esch384v2
396.35396.40396.58T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.5511.5811.62sha512
11.6811.6811.68shake128
15.0915.1915.25sha256
20.0120.0220.02T:xoodyakv1
21.2221.2221.22asconhashav12
21.3421.3421.35asconxofav12
31.4131.4131.41asconxofv12
31.4131.4131.44asconhashv12
41.4041.4142.15asconhashabi32v12
56.9356.9456.97T:romulush
60.7260.7260.72asconhashbi32v12
63.3963.5064.19T:esch256v2
87.4587.5188.87T:esch384v2
392.74392.93393.24T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
25.3325.3626.14sha512
26.7226.7226.72T:xoodyakv1
27.1727.1927.22shake128
31.5031.5031.78asconhashav12
31.9831.9831.98asconxofav12
32.0832.0832.17sha256
45.2845.3445.70asconxofv12
45.1945.3845.41asconhashv12
68.2768.3968.39asconhashabi32v12
82.7583.1483.45T:romulush
86.6989.1189.38T:esch256v2
92.8392.8893.14asconhashbi32v12
132.98133.77134.84T:esch384v2
348.06348.97349.45T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
96.2596.2598.25T:xoodyakv1
113.75114.75115.25asconhashav12
114.62117.50117.50asconxofav12
148.12148.62148.88sha256
152.25152.25153.62asconhashv12
153.25153.38153.88asconxofv12
202.62202.88209.12sha512
216.12216.12216.62shake128
236.25237.12238.12T:romulush
278.38280.38281.50asconhashabi32v12
325.50329.62342.62T:esch256v2
348.38348.38349.62asconhashbi32v12
402.25403.12403.88T:photonbeetlehash256rate32v1
598.50600.88604.38T:esch384v2