VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A6-3650; 4 x 2600MHz; hydra4, supercop-20250307

[Page version: 20250425 10:21:29]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.299.299.29sha512
10.4210.4210.42shake128
14.6214.6314.63sha256
17.8717.8817.88asconxofav12
17.8817.8817.88asconhashav12
26.6226.6226.63asconhashv12
26.6226.6226.63asconxofv12
28.9028.9028.90T:xoodyakv1
35.8735.8835.88asconhashabi32v12
53.8753.8853.92asconhashbi32v12
65.5065.6666.89T:esch256v2
94.7395.6595.84T:esch384v2
128.03128.05128.07T:romulush
398.35398.83399.58T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
9.669.669.66sha512
10.6510.6510.66shake128
14.9214.9214.92sha256
18.0518.0518.05asconhashav12
18.0518.0518.05asconxofav12
26.8626.8626.86asconxofv12
26.8626.8626.86asconhashv12
29.0429.0429.05T:xoodyakv1
36.3436.3436.34asconhashabi32v12
54.4354.4354.43asconhashbi32v12
66.0166.0367.17T:esch256v2
94.5495.8096.50T:esch384v2
128.95128.96128.99T:romulush
397.85398.08398.53T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.2810.2810.28sha512
11.3811.3811.42shake128
15.4115.4115.42sha256
18.3518.3518.35asconhashav12
18.3518.3518.35asconxofav12
27.2427.2427.24asconxofv12
27.2527.2527.25asconhashv12
29.2829.2829.29T:xoodyakv1
37.1237.1237.12asconhashabi32v12
55.3555.3555.36asconhashbi32v12
66.9066.9067.86T:esch256v2
96.0597.3498.03T:esch384v2
130.53130.53130.54T:romulush
396.75396.76397.27T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.9410.9510.97sha512
12.2512.2612.29shake128
16.7216.7316.74sha256
19.1519.1519.15asconhashav12
19.1519.1519.15asconxofav12
28.2628.2628.26asconxofv12
28.2828.2828.28asconhashv12
29.9229.9329.93T:xoodyakv1
39.1939.1939.19asconhashabi32v12
57.8257.8257.82asconhashbi32v12
68.5168.7069.70T:esch256v2
100.08101.37102.15T:esch384v2
134.78134.83134.86T:romulush
392.90393.41394.10T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
23.5623.5623.58sha512
28.6128.6129.12shake128
29.4729.4729.47asconhashav12
29.4729.4729.47asconxofav12
33.5633.5633.61sha256
38.0238.0338.03T:xoodyakv1
41.0041.0041.00asconxofv12
41.0541.0541.05asconhashv12
65.3865.5065.50asconhashabi32v12
89.1689.1689.17asconhashbi32v12
91.7891.8093.30T:esch256v2
151.70153.72154.84T:esch384v2
188.81188.84188.92T:romulush
349.89350.30351.72T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
106.62106.62108.88asconhashav12
106.62106.62109.00asconxofav12
127.62127.62130.00T:xoodyakv1
141.62141.62144.38asconhashv12
141.62141.62144.62asconxofv12
147.12147.12147.25sha256
188.50188.50188.50sha512
227.75227.75230.50shake128
271.88271.88273.62asconhashabi32v12
336.12336.12340.00asconhashbi32v12
334.38336.62341.38T:esch256v2
398.50399.88401.12T:photonbeetlehash256rate32v1
486.25488.12488.62T:romulush
647.25659.00663.62T:esch384v2