VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20260330

[Page version: 20260503 04:13:04]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.117.267.43sha512
8.818.818.82shake128
10.1110.1310.15sha256
16.6116.6116.62T:xoodyakv1
16.5216.8116.95asconhashav12
16.6216.9016.95asconxofav12
24.7625.2725.33asconhashv12
24.7225.2825.29asconxofv12
32.4532.4632.48asconhashabi32v12
43.5943.6143.64T:romulush
44.6644.6744.75T:esch256v2
47.7247.8448.07asconhashbi32v12
65.4565.4765.66T:esch384v2
280.75280.98281.27T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.898.088.13sha512
9.019.019.02shake128
10.7110.7210.75sha256
16.7016.7116.71T:xoodyakv1
16.7317.0117.07asconhashav12
16.9417.1017.12asconxofav12
25.1925.4825.48asconxofv12
25.0125.4925.50asconhashv12
32.8432.8632.88asconhashabi32v12
43.9643.9944.01T:romulush
44.9644.9644.97T:esch256v2
48.2448.2848.45asconhashbi32v12
66.1066.1266.16T:esch384v2
279.88280.11280.83T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.109.279.35sha512
9.629.639.66shake128
11.6211.6611.73sha256
16.8416.8516.87T:xoodyakv1
16.9917.1617.35asconhashav12
17.0817.3717.38asconxofav12
25.5525.7925.79asconxofv12
25.3425.8325.86asconhashv12
33.5133.5333.55asconhashabi32v12
44.6044.6444.68T:romulush
45.4445.4545.46T:esch256v2
49.0249.0249.22asconhashbi32v12
67.2467.2767.34T:esch384v2
278.95279.06279.26T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.3310.3610.38shake128
11.6411.7211.84sha512
14.1314.1914.34sha256
17.2517.2717.29T:xoodyakv1
17.8017.8417.96asconhashav12
17.8517.9418.14asconxofav12
26.4126.5026.75asconxofv12
26.4626.5326.73asconhashv12
35.2335.2635.32asconhashabi32v12
46.2946.3646.47T:romulush
46.7246.7446.75T:esch256v2
51.0151.0751.30asconhashbi32v12
70.2570.2970.36T:esch384v2
276.57276.69276.83T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.4422.5122.55T:xoodyakv1
23.9123.9524.13shake128
27.2827.3427.37asconxofav12
27.1127.4527.61asconhashav12
38.4838.7838.99asconhashv12
38.5838.8238.92asconxofv12
45.8946.2246.83sha256
46.1546.8247.95sha512
57.9158.0858.16asconhashabi32v12
63.0263.2363.47T:esch256v2
67.9268.3068.68T:romulush
76.9176.9177.06asconhashbi32v12
108.65109.01109.11T:esch384v2
245.94246.16246.50T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
78.9379.3480.05T:xoodyakv1
99.81100.71102.66asconxofav12
99.72101.24102.86asconhashav12
133.16133.76135.19asconhashv12
135.24135.38136.17asconxofv12
190.98191.94192.83shake128
191.99193.08195.04T:romulush
234.51235.35236.97asconhashabi32v12
234.69235.75235.78T:esch256v2
283.25284.40285.10asconhashbi32v12
283.70284.59286.09T:photonbeetlehash256rate32v1
285.20288.24294.41sha256
365.38369.66378.62sha512
473.73475.40476.96T:esch384v2