VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20260330

[Page version: 20260921 06:32:50]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
18.8018.9819.48shake128
19.3819.5419.89sha512
27.1527.4827.54asconhashav12
27.4327.4827.52asconxofav12
30.4430.6430.74sha256
41.1341.2041.28asconxofv12
41.1641.2041.28asconhashv12
48.7348.7748.79T:xoodyakv1
62.4762.5862.63asconhashabi32v12
93.6093.7893.79asconhashbi32v12
120.59120.66120.73T:esch256v2
157.20157.27157.33T:esch384v2
207.13207.27207.50T:romulush
847.54848.17849.88T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
19.2119.2119.50shake128
20.0720.0720.26sha512
27.6827.6827.78asconhashav12
27.6827.6927.84asconxofav12
30.8830.8831.17sha256
41.3541.3641.74asconxofv12
41.3541.3641.67asconhashv12
48.8448.8649.18T:xoodyakv1
63.0863.4063.81asconhashabi32v12
94.3794.7195.54asconhashbi32v12
121.22121.39121.48T:esch256v2
158.65158.83158.89T:esch384v2
209.05209.08209.17T:romulush
845.93846.11847.32T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.5720.5720.60shake128
21.2821.2922.08sha512
28.2028.2028.22asconxofav12
28.2028.2028.23asconhashav12
31.7631.7631.80sha256
41.9441.9441.99asconxofv12
41.9441.9441.99asconhashv12
49.3049.3049.61T:xoodyakv1
64.4464.4465.34asconhashabi32v12
95.9996.0096.80asconhashbi32v12
122.46122.48122.93T:esch256v2
161.07161.09161.76T:esch384v2
211.32211.37212.94T:romulush
843.18843.56844.83T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
22.1922.1922.21shake128
22.4822.4822.58sha512
29.5729.5729.58asconhashav12
29.5729.5729.59asconxofav12
34.1334.1534.22sha256
43.5243.5243.55asconhashv12
43.52?43.55?60.49?asconxofv12
50.5250.5250.57T:xoodyakv1
68.0968.0968.70asconhashabi32v12
100.35100.35100.45asconhashbi32v12
125.83125.84126.03T:esch256v2
167.85167.86168.69T:esch384v2
218.91218.93220.18T:romulush
835.21836.85844.31T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
47.0247.0247.22asconxofav12
47.0247.0247.26asconhashav12
47.4747.4747.68sha512
52.2852.2852.86shake128
63.3963.3963.63asconxofv12
63.3963.3963.68asconhashv12
65.4265.4866.25sha256
66.2166.2466.35T:xoodyakv1
114.55114.55114.72asconhashabi32v12
155.88155.88156.14asconhashbi32v12
168.98168.98169.06T:esch256v2
254.67254.67254.71T:esch384v2
316.02316.02318.41T:romulush
744.12744.12744.71T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
184.75184.75187.22asconhashav12
184.75185.00187.16asconxofav12
219.25219.25223.29asconhashv12
219.25219.51231.99asconxofv12
231.54231.75233.25T:xoodyakv1
275.25275.50279.00sha256
377.62377.62379.62sha512
417.88417.88421.06shake128
479.88479.88483.84asconhashabi32v12
593.38593.38596.53asconhashbi32v12
631.25631.25632.46T:esch256v2
862.75862.75865.74T:photonbeetlehash256rate32v1
875.00875.00875.00T:romulush
1089.881089.881092.19T:esch384v2