VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20260330

[Page version: 20260421 02:10:34]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.064.064.06sha256
10.8010.8310.95sha512
11.0811.0911.10shake128
18.8719.1419.40T:xoodyakv1
19.3719.3719.39asconxofav12
19.3719.3819.39asconhashav12
29.0029.0029.05asconxofv12
29.0029.0029.07asconhashv12
40.9340.9441.09asconhashabi32v12
52.8452.8653.01T:romulush
61.9461.9662.34asconhashbi32v12
64.3364.3464.60T:esch256v2
79.0179.0479.46T:esch384v2
391.86392.26392.61T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
4.134.134.14sha256
11.3211.3211.33shake128
11.7511.7711.82sha512
19.3819.4119.45T:xoodyakv1
19.5719.5719.57asconhashav12
19.5719.5719.57asconxofav12
29.2529.2529.25asconhashv12
29.2529.2529.25asconxofv12
41.3241.3341.45asconhashabi32v12
53.3053.3053.31T:romulush
62.4562.4562.47asconhashbi32v12
64.7664.7764.80T:esch256v2
79.7879.7879.78T:esch384v2
390.84390.93392.24T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
4.264.264.28sha256
12.0812.0812.09shake128
13.4413.4913.58sha512
19.5319.5819.62T:xoodyakv1
19.8819.8919.90asconhashav12
19.8919.8919.90asconxofav12
29.6529.6629.66asconxofv12
29.6629.6629.67asconhashv12
41.9641.9641.97asconhashabi32v12
54.1254.1254.13T:romulush
63.3063.3063.30asconhashbi32v12
65.2665.4765.47T:esch256v2
81.0981.0981.09T:esch384v2
389.54389.59389.69T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
4.604.614.62sha256
12.9112.9212.95shake128
16.9217.0017.26sha512
19.8620.0420.08T:xoodyakv1
20.7320.7520.78asconhashav12
20.7420.7620.78asconxofav12
30.7430.7630.78asconxofv12
30.7530.7630.83asconhashv12
43.6743.6743.67asconhashabi32v12
56.2956.3056.33T:romulush
65.5765.5765.58asconhashbi32v12
66.9967.0467.05T:esch256v2
84.5684.5684.57T:esch384v2
386.23386.28386.31T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
8.988.999.02sha256
25.4825.6525.83T:xoodyakv1
29.4629.4729.61shake128
30.9831.0831.51asconxofav12
30.9831.1831.58asconhashav12
44.1444.3844.72asconxofv12
44.2744.4244.82asconhashv12
64.6764.8965.05asconhashabi32v12
65.9366.4367.90sha512
82.8082.9083.34T:romulush
90.6690.6690.85T:esch256v2
94.1294.2394.39asconhashbi32v12
128.45128.46128.49T:esch384v2
342.70342.96343.18T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
40.3840.4940.88sha256
87.7589.5691.24T:xoodyakv1
112.69114.12114.95asconhashav12
113.97115.23116.28asconxofav12
150.45151.27153.38asconhashv12
150.36151.39153.76asconxofv12
231.22231.91232.45asconhashabi32v12
231.70233.91235.70T:romulush
235.62236.16236.54shake128
318.06318.42319.32asconhashbi32v12
337.50337.55339.85T:esch256v2
392.75392.75393.39T:photonbeetlehash256rate32v1
524.78533.68543.52sha512
554.62554.62554.84T:esch384v2