VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20241022

[Page version: 20241215 22:59:28]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.769.779.78sha512
9.899.909.92shake128
13.7413.7513.76sha256
19.7619.7819.79asconhashav12
19.7619.7819.79asconxofav12
29.6629.6629.68asconxofv12
29.6729.6729.67asconhashv12
31.1731.1731.17T:xoodyakv1
37.9838.0138.04asconhashabi32v12
56.8656.8756.93asconhashbi32v12
67.3167.4667.58T:esch256v2
78.6178.6678.71T:romulush
86.2586.5786.73T:esch384v2
402.50402.57402.61T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.1210.1210.17shake128
10.1710.1710.18sha512
14.0714.0914.15sha256
20.0120.0120.01asconhashav12
20.0120.0120.01asconxofav12
29.9129.9129.91asconhashv12
29.9329.9329.93asconxofv12
31.3331.3431.34T:xoodyakv1
38.4638.4638.49asconhashabi32v12
57.4457.4457.44asconhashbi32v12
67.7667.8467.98T:esch256v2
79.2679.2779.30T:romulush
87.0887.0987.25T:esch384v2
401.68401.82401.85T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.8310.8510.86sha512
10.8410.8610.97shake128
14.6214.6214.83sha256
20.3820.3820.38asconhashav12
20.3820.3820.38asconxofav12
30.3330.3330.33asconhashv12
30.3630.3730.60asconxofv12
31.6231.6231.63T:xoodyakv1
39.2839.2839.31asconhashabi32v12
58.4058.4058.40asconhashbi32v12
68.5068.5168.56T:esch256v2
80.3480.3580.39T:romulush
88.5588.5888.71T:esch384v2
400.24400.27400.76T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.5911.6111.62sha512
11.6811.6911.82shake128
16.0516.0916.58sha256
21.3521.3521.35asconhashav12
21.3621.3621.36asconxofav12
31.5131.5131.51asconhashv12
31.5331.5331.53asconxofv12
32.3332.3332.35T:xoodyakv1
41.4341.4341.43asconhashabi32v12
60.9760.9760.97asconhashbi32v12
70.5570.5971.15T:esch256v2
83.2783.3183.44T:romulush
92.4492.5392.55T:esch384v2
397.10397.25397.31T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
25.5325.5325.66sha512
27.3427.3927.41shake128
32.0532.0532.05asconhashav12
32.0532.0532.05asconxofav12
33.91?34.12?38.95?sha256
42.2842.3142.38T:xoodyakv1
45.2545.2545.36asconxofv12
45.6245.6245.62asconhashv12
69.3069.3069.30asconhashabi32v12
93.9593.9593.95asconhashbi32v12
97.1997.5598.02T:esch256v2
120.94121.03121.38T:romulush
142.06143.03143.06T:esch384v2
351.89352.39353.03T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
119.62119.62119.62asconhashav12
119.62119.62119.62asconxofav12
145.00145.25147.00T:xoodyakv1
155.25155.38155.38asconxofv12
155.62156.25156.88sha256
157.12157.12157.12asconhashv12
204.25204.25205.25sha512
217.12217.25218.62shake128
287.50287.50287.50asconhashabi32v12
339.12340.75341.25T:romulush
351.50351.50351.50asconhashbi32v12
370.25375.25377.88T:esch256v2
409.00412.00412.50T:photonbeetlehash256rate32v1
628.25629.12636.62T:esch384v2