VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20260330

[Page version: 20260805 22:02:12]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
15.4815.4915.51shake128
16.9216.9316.94sha512
24.7224.8924.93sha256
26.2526.2526.27asconhashav12
26.2526.2526.27asconxofav12
39.1239.1339.17asconxofv12
39.1239.1339.16asconhashv12
42.2542.2642.33T:xoodyakv1
51.5051.5151.58asconhashabi32v12
76.2676.2976.33asconhashbi32v12
82.7482.8082.86T:esch256v2
121.55121.60121.64T:esch384v2
136.76136.80136.81T:romulush
522.36522.48522.72T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
15.8515.8615.91shake128
17.4917.4917.50sha512
25.2125.3525.36sha256
26.5226.5226.52asconhashav12
26.5226.5226.52asconxofav12
39.4639.4639.47asconhashv12
39.4639.4639.46asconxofv12
42.4842.4942.50T:xoodyakv1
52.1352.1352.13asconhashabi32v12
77.0277.0277.02asconhashbi32v12
83.2183.2883.30T:esch256v2
122.64122.71122.74T:esch384v2
137.84137.85137.93T:romulush
521.28521.49521.81T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
16.9716.9817.05shake128
18.4718.4818.49sha512
26.1326.1426.17sha256
26.9626.9626.97asconhashav12
26.9626.9726.97asconxofav12
40.0240.0240.03asconhashv12
40.0240.0240.03asconxofv12
42.8742.8842.89T:xoodyakv1
53.1853.1853.18asconhashabi32v12
78.3078.3078.31asconhashbi32v12
84.0384.0484.04T:esch256v2
124.65124.74124.74T:esch384v2
139.73139.76139.82T:romulush
519.52519.58520.03T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
18.2718.2818.31shake128
19.2619.2819.28sha512
28.1528.1528.16asconhashav12
28.1528.1628.17asconxofav12
28.2128.2428.30sha256
41.5241.5241.53asconhashv12
41.5241.5241.53asconxofv12
43.9143.9243.93T:xoodyakv1
55.9755.9756.00asconhashabi32v12
81.7281.7381.75asconhashbi32v12
86.3986.4186.77T:esch256v2
129.99130.01130.12T:esch384v2
144.80144.81144.84T:romulush
515.19515.21517.14T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
37.9838.1338.17sha512
43.0543.2043.42asconhashav12
43.0343.2143.70shake128
42.9043.2543.57asconxofav12
56.7156.8357.09sha256
56.7756.9357.04T:xoodyakv1
60.3460.4560.79asconhashv12
60.2660.4760.75asconxofv12
91.6291.7492.02asconhashabi32v12
116.40116.69116.70T:esch256v2
125.29125.54125.72asconhashbi32v12
199.10199.46199.62T:esch384v2
209.30209.30209.34T:romulush
458.77459.83469.42T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
158.86159.38162.05asconhashav12
159.21159.79162.08asconxofav12
197.80198.42200.73T:xoodyakv1
209.56209.75212.25asconxofv12
209.54209.99212.71asconhashv12
245.00245.07246.88sha256
304.50304.94306.41sha512
342.00342.57344.28shake128
370.54371.96374.07asconhashabi32v12
436.25436.67438.75T:esch256v2
467.73469.45471.09asconhashbi32v12
534.33535.77536.00T:photonbeetlehash256rate32v1
579.35580.71582.57T:romulush
867.22867.25872.33T:esch384v2