VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; K10 32nm (300f10); 2011 AMD A8-3850; 4 x 2900MHz; hydra5, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.289.309.34sha512
10.5410.5410.58shake128
14.6214.6714.69sha256
18.3818.3918.43asconxofav12
18.3718.3918.42asconhashav12
27.6327.6627.68asconxofv12
27.6327.6727.68asconhashv12
30.2030.2330.25T:xoodyakv1
36.9136.9236.94asconhashabi32v12
55.4255.4355.47asconhashbi32v12
60.1360.1860.29T:esch256v2
88.0688.1088.32T:esch384v2
121.50121.56121.58T:romulush
383.90383.94383.99T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.2210.2310.26sha512
10.7810.7810.79shake128
15.4715.4715.52sha256
18.5518.5518.57asconhashav12
18.5518.5518.55asconxofav12
27.8527.8527.93asconhashv12
27.8527.8627.90asconxofv12
30.3330.3330.40T:xoodyakv1
37.3337.3437.44asconhashabi32v12
55.8355.8355.98asconhashbi32v12
60.4460.5860.69T:esch256v2
88.9089.0589.14T:esch384v2
122.36122.49122.56T:romulush
383.17383.21383.25T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
11.5211.5311.54shake128
11.7511.7811.79sha512
16.8516.8816.95sha256
18.8418.8418.85asconhashav12
18.8418.8518.85asconxofav12
28.2428.2428.24asconhashv12
28.2428.2428.24asconxofv12
30.5730.5830.59T:xoodyakv1
38.1038.1038.11asconhashabi32v12
56.5856.5956.63asconhashbi32v12
61.0761.1461.34T:esch256v2
90.3490.4590.63T:esch384v2
123.83123.85124.18T:romulush
381.88382.10382.22T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
12.3812.4012.43shake128
14.9514.9614.99sha512
19.6319.6319.66asconhashav12
19.6319.6319.63asconxofav12
20.5720.6320.72sha256
29.2629.2629.26asconhashv12
29.2629.2629.26asconxofv12
31.2031.2331.26T:xoodyakv1
40.1440.1440.15asconhashabi32v12
58.5658.5858.60asconhashbi32v12
62.7462.8362.90T:esch256v2
94.2294.2994.52T:esch384v2
127.78127.80127.92T:romulush
378.48378.52379.41T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
28.7628.8729.40shake128
29.4129.4129.60asconhashav12
29.4129.4129.89asconxofav12
39.3139.4839.60T:xoodyakv1
42.0342.0342.20asconhashv12
42.0342.0442.21asconxofv12
58.7359.0259.37sha512
65.9165.9166.08asconhashabi32v12
67.5168.0369.22sha256
83.6483.6484.16asconhashbi32v12
84.2984.3584.53T:esch256v2
144.00144.12144.39T:esch384v2
178.59178.97179.29T:romulush
337.54337.87338.06T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
106.38106.38108.34asconhashav12
106.38106.38108.62asconxofav12
130.25131.05134.22T:xoodyakv1
143.00143.00145.58asconhashv12
143.00143.08144.91asconxofv12
229.19229.94232.23shake128
269.12269.12272.00asconhashabi32v12
282.29283.41284.80asconhashbi32v12
316.02316.25318.66T:esch256v2
392.05392.50392.97T:photonbeetlehash256rate32v1
421.04423.72430.21sha256
458.40458.88460.17T:romulush
466.41468.84473.82sha512
625.08625.96628.58T:esch384v2