VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20261018

[Page version: 20261105 21:27:33]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.714.714.71sha512
5.695.705.71shake128
12.1712.1712.17asconxofav12
12.1612.1712.18asconhashav12
14.9714.9815.03T:xoodyakv1
18.2218.2318.24asconxofv12
18.2318.2418.25asconhashv12
21.8321.8321.85asconhashabi32v12
30.3030.3330.99T:esch256v2
32.5332.5432.55asconhashbi32v12
41.3941.4041.41T:romulush
44.0344.3846.60T:esch384v2
202.47202.60202.67T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.884.884.89sha512
5.825.835.85shake128
12.3012.3012.31asconxofav12
12.2912.3012.31asconhashav12
15.0615.0815.11T:xoodyakv1
18.3718.3918.39asconxofv12
18.4018.4118.42asconhashv12
22.1122.1122.13asconhashabi32v12
30.4830.5231.13T:esch256v2
32.8632.8732.88asconhashbi32v12
41.7441.7441.75T:romulush
44.7244.8146.84T:esch384v2
202.12202.17202.23T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.61sha256
5.155.165.17sha512
6.236.246.25shake128
12.4912.5012.53asconhashav12
12.5112.5212.52asconxofav12
15.1615.1915.24T:xoodyakv1
18.6618.6618.68asconhashv12
18.6518.6718.69asconxofv12
22.5622.5822.59asconhashabi32v12
30.7530.7930.82T:esch256v2
33.4033.4233.45asconhashbi32v12
42.3242.3342.34T:romulush
45.4545.5147.59T:esch384v2
201.47201.51201.84T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.731.73sha256
5.385.395.39sha512
6.666.676.71shake128
13.0513.0513.10asconxofav12
13.0613.0813.12asconhashav12
15.4415.5015.59T:xoodyakv1
19.2819.3119.36asconxofv12
19.3019.3319.40asconhashv12
23.7423.7623.81asconhashabi32v12
31.8432.3832.48T:esch256v2
34.8334.8734.90asconhashbi32v12
43.8443.8643.89T:romulush
47.3547.4849.61T:esch384v2
199.02199.19199.61T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.24?3.40?3.67?sha256
10.5210.5510.57sha512
15.2315.2915.49shake128
19.7019.8619.99T:xoodyakv1
19.7819.9020.24asconhashav12
19.6820.0120.43asconxofav12
27.7327.8528.35asconxofv12
27.9328.0528.27asconhashv12
38.9839.1039.29asconhashabi32v12
42.9243.2343.92T:esch256v2
53.2653.4053.61asconhashbi32v12
62.8963.0563.25T:romulush
71.7872.3675.64T:esch384v2
177.77177.92178.06T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
18.84?19.92?22.66?sha256
66.9667.8168.71T:xoodyakv1
71.4672.3874.10asconxofav12
71.9374.2876.59asconhashav12
85.1685.5586.64sha512
94.2094.9797.04asconxofv12
95.8496.8199.20asconhashv12
121.86122.22123.04shake128
157.50157.95159.81T:esch256v2
159.48160.21162.82asconhashabi32v12
174.91176.15177.08T:romulush
199.93201.97204.94asconhashbi32v12
203.78204.18205.04T:photonbeetlehash256rate32v1
313.29315.96328.70T:esch384v2