VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Ice Lake (706e5); 2019 Intel Core i3-1035G1; 4 x 1000MHz; icelake2, supercop-20221005

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.392.392.40sha256
4.924.934.95shake128
5.555.555.56sha512
8.678.688.68T:xoodyakv1
15.7415.8015.90asconxofav12
15.7315.8015.85asconhashav12
23.1323.2123.28asconhashv12
23.2923.3623.44asconxofv12
28.3628.3928.42asconhashabi32v12
33.1733.2233.31T:esch256v2
39.5639.6739.86T:romulush
40.2140.7143.56T:esch384v2
42.2942.4942.55asconhashbi32v12
218.02218.60220.32T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.442.442.45sha256
5.055.065.07shake128
5.765.765.77sha512
8.718.728.74T:xoodyakv1
15.9415.9716.03asconxofav12
15.9816.0116.04asconhashav12
23.4223.4623.50asconhashv12
23.4723.5223.60asconxofv12
28.6728.7128.74asconhashabi32v12
33.3133.4133.50T:esch256v2
39.8539.9440.05T:romulush
40.8041.0343.58T:esch384v2
42.6242.6842.76asconhashbi32v12
218.14219.05220.03T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.532.532.53sha256
5.415.445.46shake128
6.076.106.13sha512
8.788.818.84T:xoodyakv1
16.2516.2816.36asconxofav12
16.3016.3516.37asconhashav12
23.8023.8523.92asconxofv12
23.8523.9223.98asconhashv12
29.2329.2629.30asconhashabi32v12
33.6533.7133.86T:esch256v2
40.4240.6340.86T:romulush
41.4741.6044.21T:esch384v2
43.3843.4243.45asconhashbi32v12
216.91217.95219.28T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.762.762.77sha256
5.895.936.03shake128
6.606.646.68sha512
8.999.029.07T:xoodyakv1
17.1017.1617.26asconxofav12
17.1217.1817.24asconhashav12
24.9124.9525.04asconhashv12
24.9124.9925.08asconxofv12
30.7530.8030.91asconhashabi32v12
34.5734.7434.93T:esch256v2
41.5941.8242.16T:romulush
43.2743.3846.11T:esch384v2
45.2945.3745.41asconhashbi32v12
216.47216.92218.27T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.705.775.91sha256
11.8111.9412.09T:xoodyakv1
14.3114.4815.08shake128
14.8114.9715.58sha512
27.5227.7827.94asconhashav12
27.5327.7828.02asconxofav12
38.0238.2338.50asconxofv12
38.2538.5038.98asconhashv12
45.6246.2547.05T:esch256v2
50.3350.4750.83asconhashabi32v12
59.7560.1761.08T:romulush
65.8166.2569.81T:esch384v2
69.4769.6170.00asconhashbi32v12
190.92192.30194.11T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
29.5029.8830.75sha256
42.2542.6243.50T:xoodyakv1
100.50101.00108.00sha512
110.62111.25112.25asconhashav12
110.38111.50113.00asconxofav12
112.12114.62117.62shake128
140.62141.62144.25asconhashv12
140.62141.88143.75asconxofv12
164.25167.38170.38T:romulush
169.88173.00177.12T:esch256v2
199.50200.50203.12asconhashabi32v12
220.88223.25224.88T:photonbeetlehash256rate32v1
255.25256.00258.62asconhashbi32v12
287.25291.38304.62T:esch384v2