VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20260831

[Page version: 20260925 12:53:02]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.117.217.42sha512
8.818.818.82shake128
10.1310.1410.16sha256
16.5016.5516.86asconhashav12
16.6116.6116.62T:xoodyakv1
16.7116.9116.94asconxofav12
24.7124.9025.34asconxofv12
24.7925.2825.30asconhashv12
33.1033.1233.14asconhashabi32v12
43.9643.9844.00T:romulush
44.6844.7144.73T:esch256v2
47.7047.7447.90asconhashbi32v12
65.3265.4765.63T:esch384v2
281.42281.73282.10T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
7.817.838.03sha512
9.019.019.02shake128
10.6810.6910.71sha256
16.7016.7116.72T:xoodyakv1
16.7216.8417.06asconhashav12
16.9417.0917.11asconxofav12
24.9324.9525.16asconxofv12
25.4525.5025.51asconhashv12
33.3933.4433.46asconhashabi32v12
44.3644.3844.40T:romulush
44.9844.9945.03T:esch256v2
48.2448.2548.43asconhashbi32v12
66.0766.2766.34T:esch384v2
281.17281.33281.48T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
8.908.939.11sha512
9.619.639.64shake128
11.5611.5811.62sha256
16.8516.8616.86T:xoodyakv1
17.0017.1417.36asconhashav12
17.3117.3817.39asconxofav12
25.2925.3125.46asconxofv12
25.7325.8625.87asconhashv12
33.9133.9533.98asconhashabi32v12
45.0545.0645.10T:romulush
45.4745.4745.49T:esch256v2
48.9649.0249.06asconhashbi32v12
67.1467.3167.43T:esch384v2
280.34280.80280.98T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.3110.3310.35shake128
11.0811.1811.22sha512
13.9113.9314.08sha256
17.2617.2817.31T:xoodyakv1
17.8117.8518.04asconhashav12
17.8918.1018.14asconxofav12
26.2326.3026.72asconxofv12
26.3826.6326.86asconhashv12
35.2835.3335.40asconhashabi32v12
46.6646.7246.83T:romulush
46.7846.8446.89T:esch256v2
51.0251.0451.24asconhashbi32v12
70.0170.1470.21T:esch384v2
278.14278.35278.50T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.5122.6022.66T:xoodyakv1
23.7823.9724.18shake128
27.1727.2827.42asconxofav12
27.6227.6227.62asconhashav12
38.5338.7939.20asconxofv12
38.7338.9239.02asconhashv12
40.3740.7341.24sha512
44.0644.5445.55sha256
53.0353.2853.51asconhashabi32v12
63.4663.7063.90T:esch256v2
68.0168.2968.78T:romulush
77.1477.1577.37asconhashbi32v12
107.17107.34108.16T:esch384v2
247.50247.77248.32T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
80.2680.6581.19T:xoodyakv1
99.33100.40102.33asconhashav12
100.74101.90102.68asconxofav12
133.67133.97134.46asconhashv12
136.38137.19139.59asconxofv12
189.02190.17191.74asconhashabi32v12
189.82190.21191.96shake128
193.08193.88196.81T:romulush
234.55234.98236.39T:esch256v2
267.86269.03270.40T:photonbeetlehash256rate32v1
272.22274.75278.33sha256
282.65283.19284.47asconhashbi32v12
323.19324.57332.07sha512
463.27463.85468.71T:esch384v2