VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20251222

[Page version: 20260120 12:53:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 2.01 2.02 2.02 sha256 4.16 4.17 4.21 sha512 5.37 5.37 5.39 shake128 10.25 10.25 10.25 asconhashav12 10.25 10.25 10.25 asconxofav12 12.43 12.61 12.69 T:xoodyakv1 15.25 15.25 15.25 asconhashv12 15.25 15.25 15.25 asconxofv12 24.63 24.63 24.63 asconhashabi32v12 33.28 33.32 33.40 T:esch256v2 36.63 36.63 36.63 asconhashbi32v12 43.51 43.94 47.56 T:esch384v2 44.55 44.63 45.00 T:romulush 205.93 206.02 206.14 T:photonbeetlehash256rate32v1

Cycles/byte for 4096 bytes 25% 50% 75% hash 2.05 2.05 2.08 sha256 4.54 4.55 4.56 sha512 5.51 5.57 5.58 shake128 10.36 10.36 10.37 asconhashav12 10.36 10.36 10.36 asconxofav12 12.50 12.62 12.70 T:xoodyakv1 15.39 15.39 15.39 asconhashv12 15.39 15.39 15.39 asconxofv12 24.92 24.92 24.92 asconhashabi32v12 33.55 33.60 33.68 T:esch256v2 36.95 36.95 36.95 asconhashbi32v12 44.31 44.35 47.64 T:esch384v2 44.90 44.96 45.22 T:romulush 205.59 205.68 205.81 T:photonbeetlehash256rate32v1

Cycles/byte for 1536 bytes 25% 50% 75% hash 2.11 2.11 2.18 sha256 5.04 5.06 5.12 sha512 5.95 6.10 6.13 shake128 10.54 10.54 10.54 asconhashav12 10.54 10.54 10.54 asconxofav12 12.56 12.68 12.84 T:xoodyakv1 15.62 15.62 15.62 asconhashv12 15.62 15.62 15.63 asconxofv12 25.41 25.41 25.42 asconhashabi32v12 33.94 33.99 34.07 T:esch256v2 37.49 37.49 37.49 asconhashbi32v12 45.04 45.08 48.39 T:esch384v2 45.42 45.52 45.65 T:romulush 204.79 204.92 204.96 T:photonbeetlehash256rate32v1

Cycles/byte for 576 bytes 25% 50% 75% hash 2.26 2.27 2.46 sha256 6.16 6.21 6.26 sha512 6.40 6.93 6.95 shake128 11.02 11.02 11.04 asconhashav12 11.03 11.03 11.06 asconxofav12 12.86 12.91 13.06 T:xoodyakv1 16.23 16.23 16.24 asconxofv12 16.23 16.24 16.26 asconhashv12 26.72 26.72 26.74 asconhashabi32v12 35.02 35.09 35.16 T:esch256v2 38.94 38.94 38.96 asconhashbi32v12 46.85 46.93 50.37 T:esch384v2 47.05 47.10 47.68 T:romulush 203.05 203.23 203.44 T:photonbeetlehash256rate32v1

Cycles/byte for 64 bytes 25% 50% 75% hash 4.17? 4.27? 5.97? sha256 14.86? 16.50? 18.66? shake128 16.77 16.83 16.97 T:xoodyakv1 17.23 17.23 17.36 asconhashav12 17.25 17.25 17.25 asconxofav12 21.97 22.12 22.52 sha512 24.11 24.11 24.12 asconhashv12 24.11 24.12 24.12 asconxofv12 43.44 43.44 43.56 asconhashabi32v12 48.67 49.09 49.42 T:esch256v2 57.50 57.50 57.50 asconhashbi32v12 68.58 68.83 69.33 T:romulush 70.92 71.53 76.17 T:esch384v2 180.20 180.23 180.36 T:photonbeetlehash256rate32v1

Cycles/byte for 8 bytes 25% 50% 75% hash 24.88? 25.62? 32.00? sha256 57.38 58.25 58.75 T:xoodyakv1 66.25 66.25 66.25 asconxofav12 66.00 68.12 68.50 asconhashav12 86.25 86.25 86.25 asconhashv12 86.25 86.25 86.25 asconxofv12 117.62? 131.00? 148.25? shake128 175.12 175.12 176.12 asconhashabi32v12 174.88 177.88 180.12 sha512 182.62 184.12 186.75 T:esch256v2 191.50 194.50 194.88 T:romulush 203.25 203.62 203.62 asconhashbi32v12 205.50 206.12 206.38 T:photonbeetlehash256rate32v1 307.50 313.75 330.12 T:esch384v2