VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Silvermont (406c4); 2016 Intel Atom x5-Z8350; 4 x 1440MHz; cherry, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
17.2217.2717.41sha512
18.8418.8618.87shake128
20.5220.5820.81sha256
24.0624.0624.09T:xoodyakv1
32.6232.6232.70asconxofav12
32.6232.6232.65asconhashav12
48.7548.7549.00asconhashv12
48.7548.7548.90asconxofv12
67.7567.7668.12asconhashabi32v12
99.8899.89100.50asconhashbi32v12
105.31105.37106.27T:esch256v2
127.23127.38128.10T:esch384v2
166.46167.14169.54T:romulush
661.56661.85662.36T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
18.8918.9219.19sha512
19.2619.2619.27shake128
21.8521.9122.11sha256
24.2124.2124.24T:xoodyakv1
32.9432.9432.94asconhashav12
32.9432.9432.95asconxofav12
49.1549.1549.17asconhashv12
49.1549.1549.18asconxofv12
68.3668.3668.37asconhashabi32v12
100.68100.68100.69asconhashbi32v12
105.96105.96106.18T:esch256v2
128.43128.43128.50T:esch384v2
167.29167.30167.72T:romulush
659.51660.37662.43T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.5920.6120.72shake128
21.7121.8122.06sha512
24.1124.2224.56sha256
24.4724.4724.47T:xoodyakv1
33.4733.4733.47asconhashav12
33.4733.4733.48asconxofav12
49.8249.8249.84asconhashv12
49.8249.8249.84asconxofv12
69.3969.4069.42asconhashabi32v12
102.02102.02102.02asconhashbi32v12
107.05107.05107.11T:esch256v2
130.51130.51130.53T:esch384v2
169.55169.55169.58T:romulush
657.32657.33659.18T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
22.1622.2122.52shake128
25.1525.1725.19T:xoodyakv1
27.2627.5628.28sha512
30.2230.4231.07sha256
34.8934.8934.89asconhashav12
34.8934.8934.89asconxofav12
51.6051.6051.60asconhashv12
51.6151.6151.61asconxofv12
72.1172.1172.12asconhashabi32v12
105.59105.59105.61asconhashbi32v12
109.94109.94109.94T:esch256v2
136.03136.03136.07T:esch384v2
175.58175.58175.65T:romulush
651.21651.21651.27T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
33.5333.5333.54T:xoodyakv1
51.0851.0851.39shake128
52.7552.7552.82asconxofav12
52.7752.7752.85asconhashav12
74.2574.2574.33asconhashv12
74.2774.2774.44asconxofv12
106.77106.78106.99asconhashabi32v12
107.08?109.97?121.70?sha512
108.84110.66119.24sha256
146.94146.94146.94T:esch256v2
151.03151.03151.30asconhashbi32v12
206.81206.81206.84T:esch384v2
252.68252.69252.83T:romulush
572.86572.86572.98T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
122.12122.12123.06T:xoodyakv1
193.50193.50195.12asconxofav12
193.62193.62195.40asconhashav12
252.88252.88254.81asconhashv12
253.00253.00255.46asconxofv12
379.90380.12382.27asconhashabi32v12
407.25407.25408.99shake128
509.12509.12511.85asconhashbi32v12
546.75547.32551.06T:esch256v2
658.25658.34659.38T:photonbeetlehash256rate32v1
699.25699.25699.48T:romulush
692.90706.70749.27sha256
846.92869.11915.61sha512
894.50895.11897.23T:esch384v2