VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; comet, supercop-20260330

[Page version: 20260609 22:41:34]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.255.25sha512
6.926.936.94shake128
7.687.697.71sha256
14.6014.6214.67asconxofav12
14.6214.6714.69asconhashav12
15.0215.0315.05T:xoodyakv1
21.8621.8821.96asconhashv12
21.8921.9721.99asconxofv12
27.2027.4527.64asconhashabi32v12
34.4134.6034.85T:esch256v2
40.1040.4340.66asconhashbi32v12
42.4642.5842.69T:romulush
45.1345.1545.17T:esch384v2
219.96220.09220.56T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.465.47sha512
7.087.097.10shake128
8.248.268.27sha256
14.7714.7914.83asconxofav12
14.7914.8214.85asconhashav12
15.1115.1315.15T:xoodyakv1
22.0622.0922.14asconhashv12
22.1022.1522.18asconxofv12
27.6927.9828.09asconhashabi32v12
34.7534.8935.10T:esch256v2
40.7541.0441.44asconhashbi32v12
42.9242.9943.11T:romulush
45.5945.6145.63T:esch384v2
219.70219.85220.15T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.795.815.83sha512
7.567.587.59shake128
9.159.189.21sha256
15.0315.0615.09asconhashav12
15.0315.0715.10asconxofav12
15.2315.2615.28T:xoodyakv1
22.4222.4622.51asconhashv12
22.4322.4822.52asconxofv12
28.3428.4828.60asconhashabi32v12
35.1835.3235.51T:esch256v2
41.4541.7942.14asconhashbi32v12
43.6143.6643.70T:romulush
46.3646.3846.42T:esch384v2
219.03219.14219.27T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.296.336.39sha512
8.128.138.18shake128
11.7911.8311.89sha256
15.5715.6215.66T:xoodyakv1
15.6915.7315.78asconxofav12
15.6915.7415.79asconhashav12
23.2023.2823.37asconhashv12
23.2323.2923.34asconxofv12
29.7329.8129.97asconhashabi32v12
36.4036.5836.79T:esch256v2
43.5543.7543.92asconhashbi32v12
45.0745.1745.25T:romulush
48.3548.4048.46T:esch384v2
217.35217.47217.58T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
14.3414.6114.84sha512
18.4818.5818.81shake128
20.3020.4720.64T:xoodyakv1
23.7123.9824.50asconxofav12
23.9124.3324.76asconhashav12
33.4433.7034.03asconxofv12
33.5333.8734.37asconhashv12
44.8645.1645.47asconhashabi32v12
44.9845.2845.56sha256
49.2549.6650.37T:esch256v2
61.6462.1862.69asconhashbi32v12
65.7665.9666.28T:romulush
73.7874.1274.52T:esch384v2
193.11193.28193.62T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
73.1074.1475.32T:xoodyakv1
90.5691.2192.77asconxofav12
90.6491.7394.59asconhashav12
100.10101.59103.76sha512
117.33118.67121.01asconxofv12
117.84118.82121.02asconhashv12
146.21146.93148.46shake128
161.02163.47167.15asconhashabi32v12
186.43187.23188.80T:romulush
184.73187.91191.94T:esch256v2
210.15211.57213.19asconhashbi32v12
222.92223.64225.21T:photonbeetlehash256rate32v1
288.70290.84294.33sha256
321.78323.21324.65T:esch384v2