VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20251222

[Page version: 20260221 06:45:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.024.024.02sha256
11.8511.8511.85sha512
12.7212.7312.73shake128
15.6615.7015.70T:xoodyakv1
21.5121.5221.52asconxofav12
21.5121.5221.52asconhashav12
32.0232.0232.08asconhashv12
32.0232.0232.07asconxofv12
43.9043.9143.95asconhashabi32v12
52.9553.3653.60T:romulush
63.7563.8164.47T:esch256v2
66.7166.7667.11asconhashbi32v12
79.3179.4680.08T:esch384v2
408.70409.27409.95T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
4.104.114.12sha256
12.3112.3212.32sha512
13.0113.0113.02shake128
15.8015.8116.13T:xoodyakv1
21.7221.7221.73asconhashav12
21.7221.7221.73asconxofav12
32.2932.2932.29asconhashv12
32.2932.2932.29asconxofv12
44.4644.4644.46asconhashabi32v12
53.3853.3953.76T:romulush
64.1364.1464.14T:esch256v2
67.3967.3967.39asconhashbi32v12
80.0880.0880.20T:esch384v2
406.37406.88411.80T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
4.234.234.24sha256
13.0913.1013.12sha512
13.9113.9213.93shake128
15.9916.0116.30T:xoodyakv1
22.0522.0722.07asconhashav12
22.0522.0722.07asconxofav12
32.7332.7332.75asconhashv12
32.7332.7332.75asconxofv12
45.1745.3945.40asconhashabi32v12
54.1854.2054.51T:romulush
64.8064.8064.81T:esch256v2
68.5168.5168.52asconhashbi32v12
81.3781.3881.49T:esch384v2
405.05405.06405.08T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
4.584.584.59sha256
13.9113.9313.94sha512
14.9314.9514.96shake128
16.4916.5316.80T:xoodyakv1
22.9422.9923.02asconxofav12
22.9522.9923.00asconhashav12
33.8833.9333.95asconhashv12
33.8933.9333.95asconxofv12
47.6947.8347.89asconhashabi32v12
56.2056.3556.52T:romulush
66.5666.5766.59T:esch256v2
71.4971.5171.52asconhashbi32v12
84.8084.8184.92T:esch384v2
401.56401.58401.75T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
9.129.129.16sha256
22.3122.4122.44T:xoodyakv1
30.1230.1630.19sha512
34.2834.3134.38asconhashav12
34.2834.3434.38asconxofav12
34.8134.8434.94shake128
48.6648.7248.81asconhashv12
48.6648.7548.81asconxofv12
79.0679.1679.28asconhashabi32v12
82.0082.2282.47T:romulush
89.1989.2889.38T:esch256v2
109.44109.62109.75asconhashbi32v12
128.66128.78128.97T:esch384v2
356.62357.06357.28T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
44.7544.7544.75sha256
79.7580.7581.00T:xoodyakv1
123.25123.25123.50asconhashav12
123.25123.50123.75asconxofav12
164.75164.75165.00asconhashv12
164.75165.00165.00asconxofv12
234.00234.25234.75T:romulush
237.75238.00238.25sha512
277.00277.75278.75shake128
326.25326.50327.00asconhashabi32v12
331.75332.50333.00T:esch256v2
409.25409.50410.50asconhashbi32v12
410.75411.50412.00T:photonbeetlehash256rate32v1
553.75554.50554.75T:esch384v2