VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 45nm (10676); 2007 Intel Xeon X5450; 8 x 2992MHz; unstable; gcc14, supercop-20220506

[Page version: 20241207 23:21:18]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
19.7419.7519.76T:gimli24v1
22.1222.1222.13T:xoodyakv1
30.1230.1230.16asconhashv12
30.0130.1630.18asconxofv12
68.8968.8969.63T:esch256v1
69.3369.5970.01T:saturninhashv2
87.3887.4587.50T:drygascon128
101.88101.89101.94T:esch384v1
103.82103.82103.82T:knot256v2
109.64109.65109.66T:drygascon256
173.25173.26173.32T:knot256v1
328.66328.71328.73T:knot512
382.58382.70382.85T:knot384
398.79399.53399.66T:photonbeetlehash256rate32v1
1385.481387.881389.48T:subterraneanv1
2110.012134.762341.56T:acehash256v1
2869.402869.492869.54T:skinnyhashtk3
4383.944384.184384.44T:skinnyhashtk2
8066.568066.788067.64T:orangishv1
Cycles/byte for 4096 bytes
25%50%75%hash
19.9219.9319.95T:gimli24v1
22.3122.3122.31T:xoodyakv1
30.4330.4330.43asconhashv12
30.2930.4430.44asconxofv12
69.3569.3569.35T:esch256v1
70.3570.5170.58T:saturninhashv2
87.5387.6387.85T:drygascon128
102.91102.93102.94T:esch384v1
104.64104.64104.64T:knot256v2
110.41110.42110.42T:drygascon256
173.65173.65173.65T:knot256v1
329.96329.96329.96T:knot512
383.23383.42383.57T:knot384
398.09398.70398.76T:photonbeetlehash256rate32v1
1391.001393.271393.42T:subterraneanv1
2152.332156.282342.44T:acehash256v1
2891.872891.962892.12T:skinnyhashtk3
4392.274392.754393.08T:skinnyhashtk2
8129.698129.988130.65T:orangishv1
Cycles/byte for 1536 bytes
25%50%75%hash
20.2220.2520.26T:gimli24v1
22.6122.6122.61T:xoodyakv1
30.8730.8730.87asconhashv12
30.7230.8830.88asconxofv12
70.1170.1170.46T:esch256v1
70.5671.4571.61T:saturninhashv2
87.7887.8987.90T:drygascon128
104.63104.64104.65T:esch384v1
106.03106.03106.03T:knot256v2
111.66111.67111.73T:drygascon256
174.32174.32174.32T:knot256v1
332.11332.11332.11T:knot512
385.47385.54385.81T:knot384
396.83397.36397.45T:photonbeetlehash256rate32v1
1398.381398.531398.80T:subterraneanv1
2187.562210.282380.08T:acehash256v1
2929.002929.402929.68T:skinnyhashtk3
4406.374406.764407.26T:skinnyhashtk2
8234.368234.628235.44T:orangishv1
Cycles/byte for 576 bytes
25%50%75%hash
21.0021.0221.02T:gimli24v1
23.3223.3223.32T:xoodyakv1
31.8732.0732.07asconxofv12
32.0932.0932.09asconhashv12
72.1572.3472.35T:esch256v1
73.3173.7874.05T:saturninhashv2
88.4488.5688.80T:drygascon128
109.11109.16109.16T:esch384v1
109.66109.66109.66T:knot256v2
114.98115.01115.20T:drygascon256
176.10176.10176.10T:knot256v1
337.92337.92337.92T:knot512
390.53390.61390.91T:knot384
393.35394.00394.13T:photonbeetlehash256rate32v1
1412.701412.881413.22T:subterraneanv1
2277.042281.882481.22T:acehash256v1
3028.653028.693028.74T:skinnyhashtk3
4444.904445.324446.18T:skinnyhashtk2
8512.578514.638518.50T:orangishv1
Cycles/byte for 64 bytes
25%50%75%hash
31.1631.1631.16T:gimli24v1
32.3332.3332.33T:xoodyakv1
46.5046.5046.50asconhashv12
46.4546.8646.86asconxofv12
96.2296.2296.75T:drygascon128
98.4598.4599.06T:esch256v1
106.58106.62107.25T:saturninhashv2
156.48156.48156.48T:knot256v2
157.77157.98158.33T:drygascon256
167.23167.56167.56T:esch384v1
199.50199.50199.50T:knot256v1
350.12350.62350.67T:photonbeetlehash256rate32v1
412.09412.09412.09T:knot512
431.45431.56431.81T:knot384
1596.451596.951597.02T:subterraneanv1
3418.613467.383770.72T:acehash256v1
4304.304304.304304.55T:skinnyhashtk3
4932.284932.784933.19T:skinnyhashtk2
12095.4212097.0912098.25T:orangishv1
Cycles/byte for 8 bytes
25%50%75%hash
95.8895.8895.88T:gimli24v1
129.75129.75129.88T:xoodyakv1
159.62159.62159.62asconhashv12
159.62159.62162.62asconxofv12
249.88249.88252.50T:drygascon128
292.38292.38293.75T:saturninhashv2
372.38373.12374.62T:esch256v1
389.12389.12389.12T:knot256v1
403.50406.25407.25T:photonbeetlehash256rate32v1
430.75430.75430.75T:knot256v2
605.38605.62610.00T:drygascon256
730.75730.88730.88T:esch384v1
872.12872.12872.12T:knot384
996.38996.38996.38T:knot512
3026.383036.253060.75T:subterraneanv1
8772.008772.508773.88T:skinnyhashtk2
11482.2511482.2511482.62T:skinnyhashtk3
12675.7512799.7513931.62T:acehash256v1
48382.7548392.3848399.38T:orangishv1