VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bobcat (500f10); 2011 AMD G-T56N; 2 x 1650MHz; h8bobcat, supercop-20240425

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
16.05?17.46?29.35?sha512
18.5319.8719.88shake128
29.61?29.62?53.02?sha256
30.86?33.14?55.26?asconxofav12
45.94?45.95?82.23?asconxofv12
49.2549.2549.27T:xoodyakv1
49.3049.3049.31asconhashv12
52.5052.5052.51asconhashav12
64.3864.3864.52asconhashabi32v12
88.8088.8189.38asconhashbi32v12
97.50?105.08?174.12?T:esch256v2
144.06144.13155.30T:esch384v2
171.04171.56172.10T:romulush
611.35?629.35?1092.00?T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
19.31?19.35?30.82?sha512
20.3320.3420.35shake128
32.35?32.36?51.77?sha256
33.46?33.46?53.53?asconxofav12
49.7349.7349.73asconhashv12
49.73?49.74?79.56?asconxofv12
53.0353.0353.03asconhashav12
53.0953.0953.10T:xoodyakv1
65.1765.1765.17asconhashabi32v12
96.2996.2996.29asconhashbi32v12
105.08?105.22?168.11?T:esch256v2
156.01156.01156.02T:esch384v2
172.32172.51172.94T:romulush
651.79?654.39?1042.98?T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
21.79?21.80?34.84?shake128
22.34?22.38?35.72?sha512
34.03?34.03?54.42?asconxofav12
50.4550.4550.45asconhashv12
33.34?53.26?53.33?sha256
53.9053.9153.92asconhashav12
66.4966.4966.49asconhashabi32v12
50.47?80.69?80.72?asconxofv12
85.6785.6885.68T:xoodyakv1
106.24?106.26?169.95?T:esch256v2
156.63156.63156.63asconhashbi32v12
174.72174.91175.35T:romulush
158.75?253.70?253.73?T:esch384v2
649.87?1039.19?1056.46?T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
23.49?23.51?37.53?shake128
28.81?30.43?47.20?sha512
35.53?35.53?56.80?asconxofav12
52.3652.3752.37asconhashv12
56.2356.2456.29asconhashav12
35.98?57.34?57.40?sha256
70.0170.0170.02asconhashabi32v12
52.37?83.73?83.80?asconxofv12
87.6087.6187.64T:xoodyakv1
109.35?109.38?174.86?T:esch256v2
163.51163.51163.51asconhashbi32v12
181.31181.37181.82T:romulush
165.49?264.62?264.69?T:esch384v2
644.40?1030.33?1030.83?T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
54.25?55.06?86.31?asconxofav12
55.67?56.94?88.55?shake128
76.5276.5377.27asconhashv12
85.2885.3486.09asconhashav12
68.88?109.19?110.73?sha256
111.84112.22112.73T:xoodyakv1
114.67114.67115.41asconhashabi32v12
118.38?121.12?186.14?sha512
76.53?121.95?123.12?asconxofv12
149.09?149.47?237.72?T:esch256v2
250.94250.94252.05asconhashbi32v12
263.33263.62264.08T:romulush
254.20?404.64?405.31?T:esch384v2
575.64?919.36?920.16?T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
201.88?206.62?318.88?asconxofav12
267.12267.25269.50asconhashv12
316.50318.88322.38asconhashav12
381.75384.75387.75T:xoodyakv1
274.88?426.25?433.50?asconxofv12
443.00?448.25?704.25?shake128
291.62?461.38?472.00?sha256
466.62466.75469.62asconhashabi32v12
562.88?565.88?894.12?T:esch256v2
736.25739.88743.38T:romulush
939.88939.88940.00asconhashbi32v12
963.00?979.62?1483.25?sha512
678.12?1072.88?1075.88?T:photonbeetlehash256rate32v1
1098.50?1745.62?1750.38?T:esch384v2