VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20240625

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
14.3614.3714.37sha512
18.4718.4818.52sha256
18.9418.9518.96shake128
26.7526.7526.75asconhashav12
26.7526.7526.75asconxofav12
39.7539.7539.75asconxofv12
39.7539.7539.75asconhashv12
47.5047.5147.55T:xoodyakv1
63.0063.0063.12asconhashabi32v12
94.2594.2794.80asconhashbi32v12
123.32123.34123.98T:esch256v2
159.68167.35168.83T:esch384v2
196.01196.32196.73T:romulush
929.20930.17932.16T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
16.5816.5916.60sha512
19.3719.3719.37shake128
20.4720.4720.48sha256
27.0227.0227.02asconxofav12
27.0227.0227.02asconhashav12
40.1040.1040.10asconhashv12
40.1040.1040.10asconxofv12
47.7647.7647.76T:xoodyakv1
63.7963.8063.80asconhashabi32v12
95.2195.2195.22asconhashbi32v12
124.08124.08124.09T:esch256v2
161.40168.96168.97T:esch384v2
197.60197.60197.63T:romulush
926.60929.02931.09T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
20.4220.5020.54sha512
20.7220.7220.72shake128
23.8923.9323.96sha256
27.4627.4627.46asconxofav12
27.4627.4627.47asconhashav12
40.6740.6740.67asconhashv12
40.6740.6740.67asconxofv12
48.1948.1948.20T:xoodyakv1
65.1265.1265.13asconhashabi32v12
96.8296.8296.83asconhashbi32v12
125.37125.37125.39T:esch256v2
164.07171.71171.74T:esch384v2
200.28200.28200.29T:romulush
923.59923.63923.71T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
22.2822.2922.29shake128
28.6328.6328.64asconhashav12
28.6328.6328.64asconxofav12
29.0829.1829.30sha512
33.2333.3133.38sha256
42.2142.2142.22asconhashv12
42.2142.2142.22asconxofv12
49.3449.3449.34T:xoodyakv1
68.6568.6668.69asconhashabi32v12
101.10101.11101.15asconhashbi32v12
128.80128.80128.83T:esch256v2
171.11179.06179.06T:esch384v2
207.41207.41207.45T:romulush
915.61915.63915.70T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
43.5343.6443.64asconhashav12
43.5343.6443.64asconxofav12
51.8451.9551.95shake128
61.6961.8061.80asconhashv12
61.6961.8061.80asconxofv12
64.0964.0964.20T:xoodyakv1
113.64113.64113.75asconhashabi32v12
146.56147.00148.09sha512
148.86149.52150.39sha256
155.64155.75155.75asconhashbi32v12
172.70172.70175.00T:esch256v2
260.86273.00273.00T:esch384v2
298.59298.59298.59T:romulush
814.30814.41814.62T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
161.00161.00162.75asconhashav12
161.00161.00162.75asconxofav12
212.62212.62215.25asconxofv12
212.62213.50215.25asconhashv12
218.75218.75221.38T:xoodyakv1
413.88413.88417.38shake128
467.25468.12470.75asconhashabi32v12
585.38585.38589.75asconhashbi32v12
645.75647.50653.62T:esch256v2
826.88826.88826.88T:romulush
942.38942.38943.25T:photonbeetlehash256rate32v1
1043.881046.501050.00sha256
1174.251178.621188.25sha512
1130.501182.121182.12T:esch384v2