VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260330

[Page version: 20260418 07:16:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.164.184.19sha512
5.375.375.37shake128
10.2510.2510.25asconhashav12
10.2510.2510.25asconxofav12
12.5112.6213.15T:xoodyakv1
15.2515.2515.25asconhashv12
15.2515.2515.25asconxofv12
24.6224.6324.63asconhashabi32v12
33.5033.5633.84T:esch256v2
36.6236.6336.64asconhashbi32v12
43.6443.8945.33T:esch384v2
44.3844.4144.44T:romulush
212.35213.20215.35T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.524.544.55sha512
5.495.495.53shake128
10.3610.3610.36asconhashav12
10.3610.3610.36asconxofav12
12.2812.4912.53T:xoodyakv1
15.3915.3915.39asconxofv12
15.3915.3915.39asconhashv12
24.9224.9224.92asconhashabi32v12
33.7533.7833.88T:esch256v2
36.9536.9536.96asconhashbi32v12
44.7644.7744.83T:romulush
44.3244.9445.71T:esch384v2
212.23212.70214.71T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.102.112.11sha256
5.065.105.12sha512
5.875.885.89shake128
10.5410.5410.55asconxofav12
10.5410.5410.55asconhashav12
12.6012.7313.13T:xoodyakv1
15.6215.6215.62asconhashv12
15.6215.6215.62asconxofv12
25.4125.4125.42asconhashabi32v12
34.1534.2234.37T:esch256v2
37.5037.5037.51asconhashbi32v12
44.9144.9746.21T:esch384v2
45.3845.4245.60T:romulush
211.55212.07214.25T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.252.252.26sha256
6.126.156.20sha512
6.296.306.32shake128
11.0211.0211.04asconxofav12
11.0211.0211.04asconhashav12
12.6812.9113.04T:xoodyakv1
16.2316.2316.24asconhashv12
16.2316.2316.25asconxofv12
26.7126.7126.73asconhashabi32v12
35.2435.3235.42T:esch256v2
38.9438.9438.97asconhashbi32v12
46.8246.9148.19T:esch384v2
47.1347.1547.18T:romulush
209.79210.55212.44T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.114.144.17sha256
14.6314.7315.49shake128
16.3416.4316.56T:xoodyakv1
17.1917.1917.23asconhashav12
17.2017.2017.28asconxofav12
22.1522.2522.33sha512
24.0624.0724.08asconhashv12
24.0724.0824.15asconxofv12
43.3943.3943.48asconhashabi32v12
48.7449.1549.42T:esch256v2
57.4257.4257.48asconhashbi32v12
68.7468.8968.92T:romulush
71.0871.9372.92T:esch384v2
186.84188.43191.33T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
25.1225.5125.79sha256
55.1157.7358.81T:xoodyakv1
65.7565.8066.55asconxofav12
65.8065.8866.67asconhashav12
85.7585.7787.03asconhashv12
85.8085.8886.73asconxofv12
116.88117.06123.11shake128
174.75174.75175.84asconhashabi32v12
177.69178.70179.65sha512
183.90185.75187.32T:esch256v2
194.31195.25195.68T:romulush
203.00203.00203.49asconhashbi32v12
208.82210.47214.73T:photonbeetlehash256rate32v1
306.25310.82316.84T:esch384v2