VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240909

[Page version: 20241030 00:45:37]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
18.3918.4018.40shake128
20.5320.5520.58sha512
26.7526.7526.80asconhashav12
26.7526.7526.76asconxofav12
30.2630.2730.37sha256
39.7539.7539.84asconxofv12
39.7539.7539.85asconhashv12
47.5047.5949.87T:xoodyakv1
63.8864.0364.16asconhashabi32v12
94.9194.9995.30asconhashbi32v12
123.37123.42123.93T:esch256v2
177.34177.36177.52T:esch384v2
196.15196.21196.38T:romulush
848.69849.67850.96T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
18.8218.8218.83shake128
21.2521.2521.25sha512
27.0327.0327.03asconhashav12
27.0327.0327.03asconxofav12
30.7930.7930.79sha256
40.1040.1040.11asconxofv12
40.1040.1040.10asconhashv12
47.77?47.79?87.23?T:xoodyakv1
64.6964.6964.72asconhashabi32v12
95.8595.8595.90asconhashbi32v12
124.09124.09124.13T:esch256v2
178.89178.90179.00T:esch384v2
197.62197.62197.67T:romulush
846.53846.64847.06T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.1620.1620.17shake128
22.4622.4622.46sha512
27.4827.4827.50asconhashav12
27.4927.4927.50asconxofav12
31.6831.6831.75sha256
40.6940.6940.69asconxofv12
40.6940.6940.69asconhashv12
48.2248.2248.23T:xoodyakv1
66.0666.0666.07asconhashabi32v12
97.4797.4797.48asconhashbi32v12
125.40125.40125.45T:esch256v2
181.74181.74181.75T:esch384v2
200.31200.31200.34T:romulush
843.54843.73844.84T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
21.7521.7521.75shake128
23.4323.4323.43sha512
28.7128.7128.71asconhashav12
28.7128.7128.71asconxofav12
34.0334.0334.03sha256
42.2542.2542.25asconxofv12
42.2542.2542.26asconhashv12
49.4149.4149.41T:xoodyakv1
69.69?69.74?103.66?asconhashabi32v12
101.79101.79101.82asconhashbi32v12
128.87128.87128.89T:esch256v2
189.32189.33189.35T:esch384v2
207.49207.49207.51T:romulush
836.35836.54836.65T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
44.2244.2244.22asconhashav12
44.2344.2344.23asconxofav12
46.5046.5046.50sha512
51.42?51.42?84.77?shake128
62.1162.1162.11asconxofv12
62.1262.1262.12asconhashv12
64.7564.7564.75T:xoodyakv1
65.2065.2065.27sha256
115.95115.95115.95asconhashabi32v12
156.86156.86156.86asconhashbi32v12
173.31173.31173.31T:esch256v2
286.36286.47286.47T:esch384v2
299.27299.27299.98T:romulush
745.14745.14745.14T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
165.88165.88168.12asconhashav12
166.00166.00168.25asconxofav12
217.88217.88220.12asconxofv12
218.00?220.25?396.75?asconhashv12
223.88223.88226.38T:xoodyakv1
277.88278.38279.88sha256
373.12373.12375.38sha512
409.88409.88412.12shake128
480.12480.12482.38asconhashabi32v12
590.62590.62592.88asconhashbi32v12
651.12651.12652.75T:esch256v2
828.25828.25830.25T:romulush
865.62865.62867.38T:photonbeetlehash256rate32v1
1220.501220.501221.38T:esch384v2