VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20260330

[Page version: 20260707 03:12:50]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.339.369.43sha512
10.5810.5910.62shake128
14.6714.7014.71sha256
18.5818.5918.61asconxofav12
18.5818.6018.61asconhashav12
28.0028.0328.03asconxofv12
28.0128.0328.03asconhashv12
32.1332.1732.18T:xoodyakv1
37.0237.0337.04asconhashabi32v12
55.5455.5655.61asconhashbi32v12
69.2869.3169.32T:esch256v2
101.43101.45101.47T:esch384v2
126.50126.54126.59T:romulush
403.09403.11403.13T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.2610.2910.34sha512
10.8310.8310.85shake128
15.4815.5015.57sha256
18.7618.7618.77asconhashav12
18.7618.7618.77asconxofav12
28.2328.2328.26asconhashv12
28.2328.2328.28asconxofv12
32.2932.3732.45T:xoodyakv1
37.3437.3437.41asconhashabi32v12
55.9655.9756.05asconhashbi32v12
69.7269.8069.89T:esch256v2
102.41102.49102.52T:esch384v2
127.45127.52127.55T:romulush
402.29402.36402.39T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.5911.6011.61shake128
11.8111.8311.86sha512
16.8516.8616.98sha256
19.0619.0619.06asconxofav12
19.0619.0619.07asconhashav12
28.6128.6228.62asconhashv12
28.6128.6228.62asconxofv12
32.5532.6032.80T:xoodyakv1
37.9137.9137.93asconhashabi32v12
56.7156.7256.79asconhashbi32v12
70.4670.5470.67T:esch256v2
104.10104.11104.23T:esch384v2
128.96129.01129.20T:romulush
401.17401.25401.27T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.4812.4912.52shake128
14.9514.9915.02sha512
19.8519.8519.85asconhashav12
19.8519.8519.85asconxofav12
20.4720.4820.58sha256
29.6429.6429.65asconhashv12
29.6429.6529.65asconxofv12
33.2533.2733.49T:xoodyakv1
39.4139.4339.43asconhashabi32v12
58.6958.7158.72asconhashbi32v12
72.4872.5272.65T:esch256v2
108.62108.63108.66T:esch384v2
133.08133.15133.22T:romulush
397.38397.48397.97T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
28.9129.0829.49shake128
29.7329.7329.89asconxofav12
29.7329.7329.93asconhashav12
42.1142.1642.17T:xoodyakv1
42.5542.5542.67asconhashv12
42.5542.5542.67asconxofv12
58.3058.3958.96asconhashabi32v12
59.2059.6160.14sha512
67.1167.4767.97sha256
83.7383.8284.12asconhashbi32v12
98.1698.2098.28T:esch256v2
166.42166.53166.64T:esch384v2
186.56186.89187.27T:romulush
353.68354.29354.66T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
107.75107.75109.77asconhashav12
107.75107.75109.91asconxofav12
140.11141.00144.93T:xoodyakv1
144.25144.25146.67asconhashv12
144.25144.25147.27asconxofv12
207.38207.43211.07asconhashabi32v12
232.18233.19236.02shake128
281.39281.50285.64asconhashbi32v12
365.60366.90367.38T:esch256v2
408.97411.07413.14T:photonbeetlehash256rate32v1
413.96414.52415.27sha256
469.78473.11480.27sha512
479.32480.91482.85T:romulush
718.62718.79719.78T:esch384v2