VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20250922

[Page version: 20251001 12:36:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.107.147.42sha512
8.848.858.85shake128
10.1310.1410.17sha256
16.6016.6116.62T:xoodyakv1
16.5216.9116.92asconhashav12
16.8216.9116.92asconxofav12
24.6624.7325.33asconhashv12
24.9625.2725.27asconxofv12
32.4532.4632.47asconhashabi32v12
43.5743.6043.63T:romulush
44.6844.6944.72T:esch256v2
47.9647.9848.00asconhashbi32v12
65.4565.4765.51T:esch384v2
280.36280.43280.58T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.868.058.12sha512
9.049.059.06shake128
10.6810.6910.70sha256
16.7016.7116.72T:xoodyakv1
16.8317.0917.10asconxofav12
16.8317.0917.10asconhashav12
24.9625.0925.50asconhashv12
25.4725.4925.50asconxofv12
32.8532.8632.87asconhashabi32v12
43.9643.9744.00T:romulush
44.9644.9744.97T:esch256v2
48.4148.4148.45asconhashbi32v12
66.1366.1666.18T:esch384v2
279.84279.93280.02T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.099.249.34sha512
9.669.679.68shake128
11.5711.5911.61sha256
16.8516.8616.87T:xoodyakv1
17.2817.3617.40asconhashav12
17.3417.3617.39asconxofav12
25.3025.3625.87asconhashv12
25.8425.8625.87asconxofv12
33.5033.5133.54asconhashabi32v12
44.5844.6344.67T:romulush
45.4045.4145.43T:esch256v2
49.2049.2149.21asconhashbi32v12
67.2567.2867.33T:esch384v2
278.91279.02279.09T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.3610.3810.40shake128
11.4911.7311.95sha512
14.0214.0514.10sha256
17.2617.2817.30T:xoodyakv1
17.8617.9217.96asconxofav12
17.8717.9217.96asconhashav12
26.2926.3526.83asconhashv12
26.4526.5026.54asconxofv12
35.2135.2935.36asconhashabi32v12
46.3246.4046.45T:romulush
46.7146.7246.73T:esch256v2
51.2651.2651.30asconhashbi32v12
70.3270.3870.40T:esch384v2
276.53276.66276.78T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.5822.6622.77T:xoodyakv1
24.1424.1924.30shake128
27.2827.4527.70asconxofav12
27.4527.4527.69asconhashav12
38.7738.8638.91asconxofv12
38.7039.0939.56asconhashv12
45.2545.3645.69sha256
43.5545.5645.80sha512
57.8458.0058.11asconhashabi32v12
63.0263.2363.36T:esch256v2
68.1768.3968.62T:romulush
77.5677.6677.66asconhashbi32v12
108.88109.30109.62T:esch384v2
246.06246.19246.70T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
80.5080.8881.62T:xoodyakv1
99.88100.00101.12asconxofav12
100.00100.62101.88asconhashav12
133.88135.38135.88asconxofv12
137.00137.88139.25asconhashv12
191.88192.38192.88shake128
194.38194.50196.00T:romulush
235.38236.75236.75asconhashabi32v12
236.00237.12238.25T:esch256v2
278.88280.88284.25sha256
284.38285.50286.25T:photonbeetlehash256rate32v1
283.88285.62286.50asconhashbi32v12
355.12363.75365.12sha512
475.62477.12479.00T:esch384v2