VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260831

[Page version: 20260905 10:40:04]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
4.194.204.23sha512
5.375.375.37shake128
10.2510.2510.25asconxofav12
10.2510.2510.25asconhashav12
12.3212.5512.90T:xoodyakv1
15.2515.2515.25asconxofv12
15.2515.2515.25asconhashv12
24.6324.6324.63asconhashabi32v12
33.4733.4933.53T:esch256v2
36.6236.6336.65asconhashbi32v12
44.4244.4844.61T:romulush
46.4847.2047.28T:esch384v2
206.00206.20206.54T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
4.524.554.57sha512
5.485.485.52shake128
10.3610.3610.36asconhashav12
10.3610.3610.36asconxofav12
12.5012.6213.10T:xoodyakv1
15.3915.3915.40asconxofv12
15.3915.3915.39asconhashv12
24.9224.9224.92asconhashabi32v12
33.7533.7733.79T:esch256v2
36.9536.9536.96asconhashbi32v12
44.8244.8644.93T:romulush
47.0147.6447.66T:esch384v2
205.76205.90206.17T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.102.102.11sha256
5.095.125.13sha512
5.865.876.24shake128
10.5410.5410.54asconxofav12
10.5410.5410.55asconhashav12
12.4212.6312.79T:xoodyakv1
15.6215.6215.62asconhashv12
15.6215.6215.63asconxofv12
25.4125.4125.42asconhashabi32v12
34.1434.1734.20T:esch256v2
37.4937.5037.51asconhashbi32v12
45.4145.4545.47T:romulush
47.7948.3848.43T:esch384v2
204.86205.05205.63T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.252.252.25sha256
6.206.246.28sha512
6.326.346.36shake128
11.0211.0211.05asconhashav12
11.0211.0211.04asconxofav12
12.8812.9913.32T:xoodyakv1
16.2316.2316.26asconhashv12
16.2316.2316.26asconxofv12
26.7126.7126.74asconhashabi32v12
35.2535.3535.51T:esch256v2
38.9438.9538.98asconhashbi32v12
47.0147.0747.14T:romulush
49.7450.4050.46T:esch384v2
203.21203.42203.63T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.074.114.13sha256
14.7314.7515.55shake128
15.9916.4417.03T:xoodyakv1
17.1917.2117.48asconhashav12
17.1817.2617.64asconxofav12
21.8721.9422.14sha512
24.0824.0824.08asconxofv12
24.0524.0824.26asconhashv12
43.3943.3943.48asconhashabi32v12
48.8849.2049.50T:esch256v2
57.4257.4257.48asconhashbi32v12
67.7867.8467.94T:romulush
75.9676.2076.37T:esch384v2
180.14180.77180.98T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
24.7124.9525.23sha256
55.0057.8359.02T:xoodyakv1
65.6667.3869.09asconhashav12
65.7567.5668.20asconxofav12
85.8185.8886.66asconxofv12
86.4087.8888.72asconhashv12
116.81117.22123.32shake128
174.75174.75175.83asconhashabi32v12
174.90175.53176.14sha512
183.39185.07187.39T:esch256v2
190.26191.01191.75T:romulush
203.00203.00203.49asconhashbi32v12
204.20205.64207.84T:photonbeetlehash256rate32v1
329.77331.42336.39T:esch384v2