VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20260217

[Page version: 20260319 20:29:26]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.957.977.98sha512
9.709.709.71shake128
11.4611.4811.50sha256
16.6316.6416.65T:xoodyakv1
19.6319.6419.67asconhashav12
19.7119.7219.74asconxofav12
29.4529.4629.51asconxofv12
29.4929.5029.52asconhashv12
36.0836.0936.11asconhashabi32v12
43.0243.0443.06T:romulush
53.2353.2653.31T:esch256v2
53.4153.4253.49asconhashbi32v12
67.4967.7968.48T:esch384v2
293.86293.98294.09T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.728.748.78sha512
9.919.929.93shake128
12.1112.1212.14sha256
16.7316.7416.75T:xoodyakv1
19.8119.8219.84asconhashav12
19.8819.9019.92asconxofav12
29.7129.7129.73asconxofv12
29.7329.7629.77asconhashv12
36.5236.5336.55asconhashabi32v12
43.4143.4343.45T:romulush
53.5453.5853.61T:esch256v2
53.9553.9653.98asconhashbi32v12
68.1768.3569.02T:esch384v2
293.02293.13293.60T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.9810.0410.13sha512
10.5810.5910.62shake128
13.1513.1713.20sha256
16.8816.8916.90T:xoodyakv1
20.1020.1120.17asconhashav12
20.1820.2320.28asconxofav12
30.1430.1430.18asconxofv12
30.1630.1830.21asconhashv12
37.2437.2837.31asconhashabi32v12
44.0244.0744.12T:romulush
54.1254.1554.23T:esch256v2
54.8454.8754.90asconhashbi32v12
69.3069.4770.20T:esch384v2
292.01292.22292.44T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.3311.3511.38shake128
12.3512.4612.85sha512
15.9416.0016.09sha256
17.3017.3317.35T:xoodyakv1
21.0121.0421.09asconhashav12
21.1021.1421.17asconxofav12
31.2831.2931.36asconxofv12
31.3131.4231.47asconhashv12
39.1939.2339.29asconhashabi32v12
45.7345.7845.85T:romulush
55.6255.6955.76T:esch256v2
57.2357.2757.33asconhashbi32v12
72.4472.5773.25T:esch384v2
289.37289.65290.03T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
22.8022.8822.97T:xoodyakv1
26.1526.2426.47shake128
31.5631.6231.84asconhashav12
31.7531.8332.06asconxofav12
45.0345.2245.46asconxofv12
45.2545.3945.66asconhashv12
48.5549.8552.73sha512
52.0152.1852.34sha256
64.2364.4864.72asconhashabi32v12
66.8467.1467.60T:romulush
74.8275.0775.62T:esch256v2
88.0888.3288.53asconhashbi32v12
110.73111.22113.64T:esch384v2
257.86258.73260.10T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
81.7082.2983.17T:xoodyakv1
115.82116.69117.72asconhashav12
116.67117.38118.75asconxofav12
154.25155.53157.64asconxofv12
155.51156.55158.74asconhashv12
190.88191.66192.91T:romulush
208.33208.99210.19shake128
256.38258.06259.80asconhashabi32v12
279.49282.32283.03T:esch256v2
300.50301.73305.48T:photonbeetlehash256rate32v1
323.01323.73326.01sha256
325.88328.00330.41asconhashbi32v12
385.23397.92418.43sha512
480.78482.27485.68T:esch384v2