VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: aarch64; Neoverse-N1 (413fd0c1); 2021 Ampere Altra Max M128-30; 64 x 3000MHz; cfarm425, supercop-20261004

[Page version: 20261017 17:06:13]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.032.032.03sha256
6.136.146.15sha512
6.426.426.43shake128
9.779.839.86asconhashav12
9.789.839.85asconxofav12
14.6414.6614.70asconhashv12
14.6314.6614.70asconxofv12
17.2217.2317.24T:xoodyakv1
21.2121.2321.25asconhashabi32v12
32.0932.1332.14asconhashbi32v12
32.2732.3032.36T:esch256v2
46.1846.9048.24T:esch384v2
66.2466.2766.28T:romulush
227.01227.25227.48T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.102.10sha256
6.436.456.46sha512
6.586.586.60shake128
9.929.969.97asconxofav12
9.939.9610.02asconhashav12
14.7914.8314.84asconxofv12
14.8114.8315.11asconhashv12
17.3317.3417.36T:xoodyakv1
21.5121.5221.55asconhashabi32v12
32.4232.4632.48asconhashbi32v12
32.5032.5332.56T:esch256v2
46.8547.4048.48T:esch384v2
66.7566.7766.81T:romulush
226.94227.09227.39T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.202.212.21sha256
6.946.966.99sha512
7.057.067.07shake128
10.1010.1310.18asconxofav12
10.1010.1410.20asconhashav12
15.0015.0315.06asconxofv12
15.0215.0815.57asconhashv12
17.5317.5819.12T:xoodyakv1
21.9621.9821.99asconhashabi32v12
32.8732.9032.96T:esch256v2
32.9532.9833.02asconhashbi32v12
47.6447.7249.09T:esch384v2
67.5767.6067.63T:romulush
226.40226.51226.60T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.482.492.51sha256
7.617.627.64shake128
7.587.637.87sha512
10.6310.6610.82asconhashav12
10.6510.7611.29asconxofav12
15.6615.6915.74asconhashv12
15.6815.7216.66asconxofv12
18.0118.0318.14T:xoodyakv1
23.2123.2323.27asconhashabi32v12
33.8533.8933.97T:esch256v2
34.3834.4735.47asconhashbi32v12
49.8350.7351.45T:esch384v2
69.8069.8569.91T:romulush
225.14225.42225.76T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
6.056.086.21sha256
17.0617.1417.42asconxofav12
17.1317.2717.55asconhashav12
18.3418.5618.65shake128
18.4719.0119.49sha512
23.6823.8724.07T:xoodyakv1
23.8423.9624.22asconhashv12
23.9224.0524.25asconxofv12
39.2239.2939.57asconhashabi32v12
46.4446.6647.01T:esch256v2
52.4352.6052.98asconhashbi32v12
77.1477.9378.48T:esch384v2
98.5798.6698.87T:romulush
207.98208.51210.39T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
36.7536.8937.22sha256
67.2467.9469.92asconhashav12
67.5768.2970.05asconxofav12
86.8587.3187.93T:xoodyakv1
87.0787.7688.96asconhashv12
87.6488.8294.96asconxofv12
147.44148.07148.95shake128
149.17150.17156.07sha512
164.97165.89170.29asconhashabi32v12
182.11184.25187.53T:esch256v2
195.17196.23197.44asconhashbi32v12
246.29249.57266.86T:photonbeetlehash256rate32v1
259.75260.88262.06T:romulush
341.52?347.58?379.98?T:esch384v2