VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251222

[Page version: 20260503 04:13:04]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
18.3818.4018.45shake128
20.5120.5320.56sha512
27.4227.5027.54asconhashav12
27.4327.5127.57asconxofav12
30.2530.2630.40sha256
41.1441.2041.30asconhashv12
41.1741.2241.72asconxofv12
47.5047.5247.60T:xoodyakv1
63.8663.9764.08asconhashabi32v12
94.8995.0495.27asconhashbi32v12
123.36123.42123.79T:esch256v2
177.33177.40178.07T:esch384v2
196.14196.16196.29T:romulush
848.07848.75849.40T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
18.8218.8218.82shake128
21.2521.2521.26sha512
27.6927.6927.81asconhashav12
27.6927.6927.81asconxofav12
30.7830.7930.80sha256
41.3641.3641.66asconhashv12
41.3641.3741.72asconxofv12
47.7747.7747.78T:xoodyakv1
64.6964.6964.82asconhashabi32v12
95.8595.8596.06asconhashbi32v12
124.09124.09124.21T:esch256v2
178.89178.90179.07T:esch384v2
197.62197.63198.12T:romulush
846.55846.72847.62T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.1620.1620.17shake128
22.4622.4622.76sha512
28.2128.2128.23asconhashav12
28.2128.2128.24asconxofav12
31.6831.6831.69sha256
41.9541.9542.11asconhashv12
41.9541.9642.24asconxofv12
48.2248.2248.22T:xoodyakv1
66.0666.0666.08asconhashabi32v12
97.4797.4797.61asconhashbi32v12
125.40125.40125.45T:esch256v2
181.74181.74181.81T:esch384v2
200.31200.31200.40T:romulush
843.55843.76844.76T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
21.7521.7521.76shake128
23.4323.4323.44sha512
29.6029.6029.60asconxofav12
29.6029.6029.60asconhashav12
34.0234.0234.07sha256
43.5443.5443.60asconhashv12
43.5443.5443.66asconxofv12
49.4149.4149.41T:xoodyakv1
69.6969.6969.72asconhashabi32v12
101.79101.79101.86asconhashbi32v12
128.87128.87128.90T:esch256v2
189.32189.32189.34T:esch384v2
207.49207.49207.52T:romulush
836.35836.50837.18T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
46.5046.5346.61sha512
47.1947.1947.31asconhashav12
47.1947.1947.31asconxofav12
51.4251.4251.80shake128
63.6963.6963.95asconxofv12
63.6963.6964.20asconhashv12
64.7564.7564.76T:xoodyakv1
65.1565.1665.56sha256
115.95115.95116.23asconhashabi32v12
156.86156.86157.00asconhashbi32v12
173.31173.31173.32T:esch256v2
286.36286.36286.46T:esch384v2
299.27299.27299.51T:romulush
745.14745.22745.43T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
186.50186.50190.06asconhashav12
186.50186.50190.34asconxofav12
221.62221.62223.84asconhashv12
221.62221.62223.92asconxofv12
223.88223.88226.83T:xoodyakv1
277.46277.62279.00sha256
373.12373.12374.87sha512
409.88409.88413.06shake128
480.12480.12483.88asconhashabi32v12
590.62590.62594.08asconhashbi32v12
651.12651.12652.51T:esch256v2
828.25828.25829.76T:romulush
866.00866.82867.88T:photonbeetlehash256rate32v1
1220.501220.501220.93T:esch384v2