VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

[Page version: 20241215 22:59:28]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 19.74 19.75 19.76 T:gimli24v1 22.12 22.12 22.13 T:xoodyakv1 30.12 30.12 30.16 asconhashv12 30.01 30.16 30.18 asconxofv12 68.89 68.89 69.63 T:esch256v1 69.33 69.59 70.01 T:saturninhashv2 87.38 87.45 87.50 T:drygascon128 101.88 101.89 101.94 T:esch384v1 103.82 103.82 103.82 T:knot256v2 109.64 109.65 109.66 T:drygascon256 173.25 173.26 173.32 T:knot256v1 328.66 328.71 328.73 T:knot512 382.58 382.70 382.85 T:knot384 398.79 399.53 399.66 T:photonbeetlehash256rate32v1 1385.48 1387.88 1389.48 T:subterraneanv1 2110.01 2134.76 2341.56 T:acehash256v1 2869.40 2869.49 2869.54 T:skinnyhashtk3 4383.94 4384.18 4384.44 T:skinnyhashtk2 8066.56 8066.78 8067.64 T:orangishv1

Cycles/byte for 4096 bytes 25% 50% 75% hash 19.92 19.93 19.95 T:gimli24v1 22.31 22.31 22.31 T:xoodyakv1 30.43 30.43 30.43 asconhashv12 30.29 30.44 30.44 asconxofv12 69.35 69.35 69.35 T:esch256v1 70.35 70.51 70.58 T:saturninhashv2 87.53 87.63 87.85 T:drygascon128 102.91 102.93 102.94 T:esch384v1 104.64 104.64 104.64 T:knot256v2 110.41 110.42 110.42 T:drygascon256 173.65 173.65 173.65 T:knot256v1 329.96 329.96 329.96 T:knot512 383.23 383.42 383.57 T:knot384 398.09 398.70 398.76 T:photonbeetlehash256rate32v1 1391.00 1393.27 1393.42 T:subterraneanv1 2152.33 2156.28 2342.44 T:acehash256v1 2891.87 2891.96 2892.12 T:skinnyhashtk3 4392.27 4392.75 4393.08 T:skinnyhashtk2 8129.69 8129.98 8130.65 T:orangishv1

Cycles/byte for 1536 bytes 25% 50% 75% hash 20.22 20.25 20.26 T:gimli24v1 22.61 22.61 22.61 T:xoodyakv1 30.87 30.87 30.87 asconhashv12 30.72 30.88 30.88 asconxofv12 70.11 70.11 70.46 T:esch256v1 70.56 71.45 71.61 T:saturninhashv2 87.78 87.89 87.90 T:drygascon128 104.63 104.64 104.65 T:esch384v1 106.03 106.03 106.03 T:knot256v2 111.66 111.67 111.73 T:drygascon256 174.32 174.32 174.32 T:knot256v1 332.11 332.11 332.11 T:knot512 385.47 385.54 385.81 T:knot384 396.83 397.36 397.45 T:photonbeetlehash256rate32v1 1398.38 1398.53 1398.80 T:subterraneanv1 2187.56 2210.28 2380.08 T:acehash256v1 2929.00 2929.40 2929.68 T:skinnyhashtk3 4406.37 4406.76 4407.26 T:skinnyhashtk2 8234.36 8234.62 8235.44 T:orangishv1

Cycles/byte for 576 bytes 25% 50% 75% hash 21.00 21.02 21.02 T:gimli24v1 23.32 23.32 23.32 T:xoodyakv1 31.87 32.07 32.07 asconxofv12 32.09 32.09 32.09 asconhashv12 72.15 72.34 72.35 T:esch256v1 73.31 73.78 74.05 T:saturninhashv2 88.44 88.56 88.80 T:drygascon128 109.11 109.16 109.16 T:esch384v1 109.66 109.66 109.66 T:knot256v2 114.98 115.01 115.20 T:drygascon256 176.10 176.10 176.10 T:knot256v1 337.92 337.92 337.92 T:knot512 390.53 390.61 390.91 T:knot384 393.35 394.00 394.13 T:photonbeetlehash256rate32v1 1412.70 1412.88 1413.22 T:subterraneanv1 2277.04 2281.88 2481.22 T:acehash256v1 3028.65 3028.69 3028.74 T:skinnyhashtk3 4444.90 4445.32 4446.18 T:skinnyhashtk2 8512.57 8514.63 8518.50 T:orangishv1

Cycles/byte for 64 bytes 25% 50% 75% hash 31.16 31.16 31.16 T:gimli24v1 32.33 32.33 32.33 T:xoodyakv1 46.50 46.50 46.50 asconhashv12 46.45 46.86 46.86 asconxofv12 96.22 96.22 96.75 T:drygascon128 98.45 98.45 99.06 T:esch256v1 106.58 106.62 107.25 T:saturninhashv2 156.48 156.48 156.48 T:knot256v2 157.77 157.98 158.33 T:drygascon256 167.23 167.56 167.56 T:esch384v1 199.50 199.50 199.50 T:knot256v1 350.12 350.62 350.67 T:photonbeetlehash256rate32v1 412.09 412.09 412.09 T:knot512 431.45 431.56 431.81 T:knot384 1596.45 1596.95 1597.02 T:subterraneanv1 3418.61 3467.38 3770.72 T:acehash256v1 4304.30 4304.30 4304.55 T:skinnyhashtk3 4932.28 4932.78 4933.19 T:skinnyhashtk2 12095.42 12097.09 12098.25 T:orangishv1

Cycles/byte for 8 bytes 25% 50% 75% hash 95.88 95.88 95.88 T:gimli24v1 129.75 129.75 129.88 T:xoodyakv1 159.62 159.62 159.62 asconhashv12 159.62 159.62 162.62 asconxofv12 249.88 249.88 252.50 T:drygascon128 292.38 292.38 293.75 T:saturninhashv2 372.38 373.12 374.62 T:esch256v1 389.12 389.12 389.12 T:knot256v1 403.50 406.25 407.25 T:photonbeetlehash256rate32v1 430.75 430.75 430.75 T:knot256v2 605.38 605.62 610.00 T:drygascon256 730.75 730.88 730.88 T:esch384v1 872.12 872.12 872.12 T:knot384 996.38 996.38 996.38 T:knot512 3026.38 3036.25 3060.75 T:subterraneanv1 8772.00 8772.50 8773.88 T:skinnyhashtk2 11482.25 11482.25 11482.62 T:skinnyhashtk3 12675.75 12799.75 13931.62 T:acehash256v1 48382.75 48392.38 48399.38 T:orangishv1