VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20260217

[Page version: 20260324 04:05:29]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.127.327.41sha512
8.838.848.84shake128
10.1310.1510.16sha256
16.6116.6116.62T:xoodyakv1
16.7016.7016.71asconhashav12
16.7316.7416.76asconxofav12
24.9324.9624.97asconhashv12
24.9425.0025.02asconxofv12
32.6032.6132.62asconhashabi32v12
43.0443.0743.08T:romulush
46.2646.2846.30T:esch256v2
48.3148.3248.34asconhashbi32v12
65.8966.0766.48T:esch384v2
285.53285.86286.26T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.918.128.15sha512
9.039.049.04shake128
10.8010.8110.84sha256
16.7016.7016.71T:xoodyakv1
16.8716.8816.89asconhashav12
16.9216.9316.94asconxofav12
25.1525.1625.18asconhashv12
25.1425.2025.24asconxofv12
32.9132.9232.93asconhashabi32v12
43.4243.4543.48T:romulush
46.5446.5646.59T:esch256v2
48.6948.7148.73asconhashbi32v12
66.6066.6866.96T:esch384v2
284.61284.98285.64T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.189.369.38sha512
9.649.659.66shake128
11.9111.9412.01sha256
16.8516.8616.87T:xoodyakv1
17.1417.1717.20asconhashav12
17.2017.2317.24asconxofav12
25.5125.5125.54asconhashv12
25.5125.5525.60asconxofv12
33.4033.4333.46asconhashabi32v12
44.0544.0944.12T:romulush
47.0347.0547.10T:esch256v2
49.3749.3849.39asconhashbi32v12
67.7167.7768.07T:esch384v2
283.74284.14284.33T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.3410.3510.37shake128
11.8011.9111.97sha512
14.8814.9415.04sha256
17.2417.2717.30T:xoodyakv1
17.9617.9918.01asconhashav12
17.9518.0218.05asconxofav12
26.4926.5026.52asconhashv12
26.5526.6426.70asconxofv12
34.7534.7934.84asconhashabi32v12
45.7445.7945.84T:romulush
48.3948.4448.50T:esch256v2
51.1251.1451.15asconhashbi32v12
70.6470.7471.10T:esch384v2
281.31281.68281.97T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.5222.5922.67T:xoodyakv1
24.0024.0724.23shake128
27.2727.4627.61asconhashav12
27.7627.9628.29asconxofav12
38.3338.4438.59asconhashv12
38.4438.6438.84asconxofv12
47.4447.7248.73sha512
52.2452.4752.71asconhashabi32v12
52.8253.2154.40sha256
65.1165.3165.47T:esch256v2
66.5066.7767.16T:romulush
73.0373.2273.61asconhashbi32v12
108.13108.42108.90T:esch384v2
250.73251.12251.52T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
79.5479.9580.46T:xoodyakv1
99.3499.56102.03asconhashav12
102.91104.00107.96asconxofav12
133.17133.76136.19asconhashv12
133.40133.95134.50asconxofv12
186.57187.72190.18asconhashabi32v12
189.49190.65192.36T:romulush
190.11191.21191.96shake128
241.88242.32243.27T:esch256v2
246.88247.39248.66asconhashbi32v12
290.89291.66292.84T:photonbeetlehash256rate32v1
341.61343.32346.50sha256
379.86381.77387.88sha512
469.29470.24471.89T:esch384v2