VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Golden Cove (906a4-40); 2022 Intel Core i3-1215U, P cores; 2 x 1600MHz; alder2,big, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
4.894.955.06shake128
5.015.025.02sha512
13.1813.1913.21asconhashav12
13.1813.1913.21asconxofav12
15.2815.3215.52T:xoodyakv1
19.5119.7419.83asconxofv12
19.7319.7519.78asconhashv12
24.8124.8524.89T:esch256v2
25.7125.7325.77asconhashabi32v12
34.7534.9135.04T:esch384v2
38.5538.5838.67asconhashbi32v12
43.1543.1743.20T:romulush
158.68159.07159.31T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.092.09sha256
5.065.095.14shake128
5.195.205.21sha512
13.3013.3213.34asconhashav12
13.2913.3213.34asconxofav12
15.3915.4315.64T:xoodyakv1
19.8819.9219.95asconhashv12
19.8219.9720.00asconxofv12
25.0225.0525.10T:esch256v2
26.0126.0626.09asconhashabi32v12
35.1035.2335.41T:esch384v2
38.9739.0139.11asconhashbi32v12
43.5143.5443.56T:romulush
157.38157.76158.52T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.152.15sha256
5.325.375.42shake128
5.485.505.51sha512
13.4813.5013.55asconxofav12
13.4813.5213.55asconhashav12
15.5915.8215.86T:xoodyakv1
19.9620.1120.29asconxofv12
20.1420.1720.24asconhashv12
25.2725.3425.42T:esch256v2
26.6226.6626.70asconhashabi32v12
35.6835.8335.95T:esch384v2
39.6639.7239.78asconhashbi32v12
44.1344.1744.21T:romulush
156.57156.80157.00T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.322.322.33sha256
5.695.715.75sha512
5.725.765.84shake128
13.9814.0314.13asconhashav12
14.0014.0714.13asconxofav12
15.8716.0416.15T:xoodyakv1
20.6920.8520.99asconxofv12
20.7920.8720.97asconhashv12
25.9126.0326.17T:esch256v2
27.8927.9628.03asconhashabi32v12
37.3337.5537.69T:esch384v2
41.3441.4241.51asconhashbi32v12
45.7545.8445.90T:romulush
155.18155.37155.53T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.494.554.60sha256
10.6310.7611.14sha512
12.9313.0413.46shake128
20.1120.2820.45T:xoodyakv1
20.4920.6921.00asconxofav12
20.4320.7421.02asconhashav12
29.3929.7230.05asconxofv12
29.5629.8830.32asconhashv12
34.3234.7635.43T:esch256v2
41.2641.7242.34asconhashabi32v12
56.3356.9357.68T:esch384v2
58.9659.1359.39asconhashbi32v12
66.1666.3866.76T:romulush
138.70139.31140.18T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
23.3523.6624.14sha256
67.8968.5969.47T:xoodyakv1
71.6673.2675.69asconhashav12
72.0673.3875.21asconxofav12
89.8490.6593.08sha512
97.8099.30101.82asconxofv12
98.1999.89102.22asconhashv12
103.32104.61108.78shake128
129.82132.19135.33T:esch256v2
146.79150.05155.02asconhashabi32v12
157.20158.29160.08T:photonbeetlehash256rate32v1
185.08186.03187.71T:romulush
196.94198.98202.22asconhashbi32v12
241.16245.56251.92T:esch384v2