VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20240625

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.299.299.30sha512
10.5110.5110.52shake128
14.6214.6314.64sha256
17.8817.8817.88asconhashav12
17.8817.8817.88asconxofav12
26.6226.6226.63asconhashv12
26.6226.6326.63asconxofv12
29.6329.6329.63T:xoodyakv1
36.2536.2536.25asconhashabi32v12
54.4154.4154.45asconhashbi32v12
62.8762.8862.91T:esch256v2
91.9892.0092.04T:esch384v2
128.08128.08128.10T:romulush
386.74386.98387.65T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.2210.2210.23sha512
10.7510.7510.76shake128
15.5015.5115.52sha256
18.0618.0618.06asconxofav12
18.0618.0618.06asconhashav12
26.8626.8626.86asconxofv12
26.8626.8626.86asconhashv12
29.7729.7729.77T:xoodyakv1
36.7036.7036.70asconhashabi32v12
54.8554.8554.85asconhashbi32v12
63.2963.2963.30T:esch256v2
92.9192.9192.91T:esch384v2
129.00129.00129.04T:romulush
385.95386.19386.49T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.5011.5011.51shake128
11.7611.7711.78sha512
16.9316.9917.01sha256
18.3618.3618.36asconxofav12
18.3618.3618.36asconhashav12
27.2427.2427.25asconxofv12
27.2427.2527.25asconhashv12
30.0130.0130.01T:xoodyakv1
37.4537.4537.45asconhashabi32v12
55.5855.5955.59asconhashbi32v12
63.9963.9964.00T:esch256v2
94.3494.3594.35T:esch384v2
130.57130.59130.62T:romulush
384.79385.20385.60T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.3812.3812.40shake128
14.8814.9214.97sha512
19.1619.1619.16asconxofav12
19.1619.1619.16asconhashav12
20.8220.9721.01sha256
28.2728.2728.28asconxofv12
28.2828.2828.28asconhashv12
30.6530.6530.66T:xoodyakv1
39.4539.4539.46asconhashabi32v12
57.5557.5557.56asconhashbi32v12
65.8465.8565.87T:esch256v2
98.4698.4998.58T:esch384v2
134.73134.78134.83T:romulush
381.73382.64383.25T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
28.8828.8828.91shake128
29.0629.0629.06asconhashav12
29.0629.0629.06asconxofav12
38.7738.7838.84T:xoodyakv1
41.0541.0541.08asconxofv12
41.0541.0641.08asconhashv12
58.6258.8359.12sha512
64.7364.7364.77asconhashabi32v12
70.5271.1772.16sha256
82.2082.2782.27asconhashbi32v12
89.2889.5889.77T:esch256v2
151.19151.34151.45T:esch384v2
188.59188.91189.00T:romulush
339.22340.80342.11T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
107.38107.38107.38asconhashav12
107.38107.62109.25asconxofav12
129.12129.38129.50T:xoodyakv1
142.00142.00142.00asconxofv12
142.00142.12142.12asconhashv12
229.12229.12231.62shake128
264.12264.38268.25asconhashabi32v12
277.00277.00277.00asconhashbi32v12
333.62334.38335.62T:esch256v2
383.75386.00387.38T:photonbeetlehash256rate32v1
437.62446.50452.62sha256
466.12467.38470.62sha512
485.50485.88486.25T:romulush
654.62654.88655.38T:esch384v2