VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.714.724.73sha512
5.725.725.73shake128
12.1612.1712.18asconxofav12
12.1612.1712.18asconhashav12
14.9814.9915.03T:xoodyakv1
18.2218.2318.23asconhashv12
18.2218.2318.24asconxofv12
21.8321.8321.86asconhashabi32v12
30.4530.9330.95T:esch256v2
32.5332.5432.57asconhashbi32v12
44.0544.4246.65T:esch384v2
55.3155.3455.55T:romulush
199.22201.02202.56T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.884.894.90sha512
5.855.865.87shake128
12.2812.2912.30asconxofav12
12.2912.3012.31asconhashav12
15.0615.0815.10T:xoodyakv1
18.3718.3818.41asconxofv12
18.3818.4018.40asconhashv12
22.1122.1122.14asconhashabi32v12
30.6631.1431.15T:esch256v2
32.8632.8732.87asconhashbi32v12
44.7544.7946.99T:esch384v2
55.7855.8055.85T:romulush
199.07200.57201.93T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.61sha256
5.155.155.16sha512
6.266.276.28shake128
12.4712.4812.51asconxofav12
12.5012.5012.51asconhashav12
15.1615.1915.22T:xoodyakv1
18.6218.6418.64asconxofv12
18.6418.6718.70asconhashv12
22.5622.5722.59asconhashabi32v12
31.4731.5131.59T:esch256v2
33.4133.4333.43asconhashbi32v12
45.4445.5247.91T:esch384v2
56.5656.5856.62T:romulush
199.89200.23201.38T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.721.73sha256
5.585.595.66sha512
6.686.696.72shake128
13.0213.0413.12asconhashav12
13.0313.0513.12asconxofav12
15.4915.5315.59T:xoodyakv1
19.2819.3119.37asconxofv12
19.2719.3119.38asconhashv12
23.7423.7823.82asconhashabi32v12
32.4032.4332.48T:esch256v2
34.8434.8734.89asconhashbi32v12
47.3747.4649.58T:esch384v2
58.6058.6458.71T:romulush
197.85198.10198.95T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.243.273.37sha256
12.2312.3112.91sha512
15.1815.2415.31shake128
19.6419.7519.90T:xoodyakv1
19.6019.8120.20asconhashav12
19.7119.9320.26asconxofav12
27.8027.9828.37asconxofv12
27.8828.0128.27asconhashv12
38.9439.0839.36asconhashabi32v12
43.7244.1744.65T:esch256v2
53.3253.4753.81asconhashbi32v12
71.6572.1275.44T:esch384v2
84.1084.2684.49T:romulush
176.35177.74178.04T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
18.7319.0819.76sha256
66.7367.6068.24T:xoodyakv1
71.2373.5575.89asconhashav12
71.7173.6876.10asconxofav12
84.1184.5086.18sha512
95.2696.1498.05asconhashv12
95.7296.7099.77asconxofv12
121.27121.78123.31shake128
157.75159.26161.59T:esch256v2
158.56159.55162.98asconhashabi32v12
199.60200.94204.30asconhashbi32v12
203.08204.24205.42T:photonbeetlehash256rate32v1
233.32234.57238.02T:romulush
313.10316.17331.69T:esch384v2