VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20261004

[Page version: 20261017 17:06:13]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.164.184.20sha512
5.365.375.37shake128
10.2510.2510.25asconxofav12
10.2510.2510.25asconhashav12
11.4812.0312.26T:xoodyakv1
15.2515.2515.25asconxofv12
15.2515.2515.25asconhashv12
24.6224.6324.63asconhashabi32v12
33.4733.5133.71T:esch256v2
36.6236.6336.64asconhashbi32v12
44.5044.6044.64T:romulush
44.0346.4147.34T:esch384v2
206.09206.23206.35T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.484.534.55sha512
5.485.485.52shake128
10.3610.3610.36asconxofav12
10.3610.3610.37asconhashav12
11.5412.0112.20T:xoodyakv1
15.3915.3915.39asconxofv12
15.3915.3915.39asconhashv12
24.9224.9224.92asconhashabi32v12
33.7733.8633.96T:esch256v2
36.9536.9536.96asconhashbi32v12
44.9044.9444.97T:romulush
44.7146.8447.53T:esch384v2
205.60205.67205.80T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.102.102.11sha256
5.035.065.10sha512
5.865.875.88shake128
10.5410.5410.55asconhashav12
10.5410.5410.55asconxofav12
12.0212.2612.60T:xoodyakv1
15.6215.6215.62asconhashv12
15.6215.6215.62asconxofv12
25.4125.4125.42asconhashabi32v12
34.1534.1834.20T:esch256v2
37.5037.5037.50asconhashbi32v12
45.4145.5045.55T:romulush
45.4247.5948.33T:esch384v2
205.05205.15205.19T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.252.252.26sha256
6.166.196.22sha512
6.296.306.31shake128
11.0211.0211.03asconxofav12
11.0211.0211.04asconhashav12
12.3912.5913.03T:xoodyakv1
16.2316.2316.26asconhashv12
16.2316.2316.24asconxofv12
26.7126.7126.75asconhashabi32v12
35.2535.3235.42T:esch256v2
38.9438.9438.97asconhashbi32v12
46.9947.0347.13T:romulush
47.7249.5950.29T:esch384v2
203.02203.08203.17T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.074.134.17sha256
14.7514.7815.57shake128
17.1917.2017.20asconhashav12
17.2017.2017.20asconxofav12
17.1117.2817.71T:xoodyakv1
21.7921.9822.23sha512
24.0724.0824.12asconxofv12
24.0624.0924.38asconhashv12
43.3943.3943.48asconhashabi32v12
48.9249.2549.55T:esch256v2
57.4257.4257.48asconhashbi32v12
68.3068.4368.47T:romulush
71.5274.9475.98T:esch384v2
180.33180.49180.70T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.7024.9425.33sha256
58.7759.9961.44T:xoodyakv1
65.7565.7866.09asconxofav12
65.8065.8866.35asconhashav12
85.7585.8387.29asconxofv12
86.2487.9888.79asconhashv12
116.93117.25123.03shake128
174.75174.75175.84asconhashabi32v12
175.20176.62178.31sha512
183.53184.75186.49T:esch256v2
191.34191.38191.76T:romulush
203.00203.08204.27asconhashbi32v12
205.40206.09206.62T:photonbeetlehash256rate32v1
317.74327.15332.15T:esch384v2