VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20260627

[Page version: 20260727 21:50:25]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
6.296.306.30sha512
7.587.597.63shake128
16.2516.2616.28asconhashav12
16.2416.2616.28asconxofav12
20.0120.0320.08T:xoodyakv1
24.3424.3524.35asconhashv12
24.3524.3724.38asconxofv12
29.1729.1829.20asconhashabi32v12
40.2940.4641.36T:esch256v2
43.4743.4743.57asconhashbi32v12
55.3255.3255.46T:romulush
62.4462.5262.71T:esch384v2
266.92267.34268.35T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.082.082.09sha256
6.526.536.54sha512
7.767.787.81shake128
16.4016.4316.45asconxofav12
16.4316.4316.45asconhashav12
20.1320.1420.15T:xoodyakv1
24.5624.5724.59asconxofv12
24.5724.5824.59asconhashv12
29.5529.5529.56asconhashabi32v12
40.6840.7141.30T:esch256v2
43.9143.9243.93asconhashbi32v12
55.7855.7955.80T:romulush
63.0563.1163.19T:esch384v2
266.35266.99267.77T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.142.142.15sha256
6.906.916.92sha512
8.338.348.37shake128
16.6916.7016.75asconxofav12
16.7016.7216.76asconhashav12
20.2620.2720.31T:xoodyakv1
24.9124.9424.95asconxofv12
24.9324.9724.99asconhashv12
30.1730.1930.21asconhashabi32v12
41.3242.0842.13T:esch256v2
44.6544.6744.69asconhashbi32v12
56.5456.5756.59T:romulush
64.0764.1564.23T:esch384v2
267.13267.51268.20T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.302.312.31sha256
7.417.427.46sha512
8.918.938.97shake128
17.4317.4717.52asconxofav12
17.4617.4917.55asconhashav12
20.7220.7920.82T:xoodyakv1
25.7725.8025.88asconxofv12
25.7825.8525.96asconhashv12
31.7731.8131.90asconhashabi32v12
42.5943.2943.37T:esch256v2
46.5946.6446.72asconhashbi32v12
58.5958.6458.70T:romulush
66.7666.8466.97T:esch384v2
265.75266.23266.82T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.384.414.53sha256
16.0816.3216.58sha512
20.7720.8621.09shake128
26.3426.4426.56T:xoodyakv1
26.4226.5926.84asconxofav12
26.7226.9627.38asconhashav12
37.2637.4437.66asconxofv12
37.6437.8338.07asconhashv12
52.3752.5852.90asconhashabi32v12
57.5058.1759.05T:esch256v2
71.4271.7572.01asconhashbi32v12
84.1184.3584.52T:romulush
100.97101.26101.71T:esch384v2
237.42237.68238.10T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
26.0326.3826.76sha256
90.1590.5891.58T:xoodyakv1
97.6898.83100.88asconhashav12
98.1498.88100.88asconxofav12
114.99115.32116.20sha512
127.74128.91130.73asconxofv12
131.14132.22133.59asconhashv12
166.26166.92168.08shake128
214.36215.09219.91asconhashabi32v12
214.27215.21216.24T:esch256v2
233.32234.29235.29T:romulush
268.30270.18272.31asconhashbi32v12
275.36276.05276.74T:photonbeetlehash256rate32v1
438.62440.73444.64T:esch384v2