VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20250922

[Page version: 20251001 12:36:45]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.232.232.24sha256
10.3310.3610.37sha512
10.5210.5310.53shake128
17.1617.2017.20T:xoodyakv1
19.6219.6319.63asconhashav12
19.6219.6319.64asconxofav12
29.3429.3429.35asconxofv12
29.3429.3429.35asconhashv12
39.5339.6539.67asconhashabi32v12
43.6043.6343.69T:esch256v2
51.1551.3751.49T:romulush
58.3558.8858.97asconhashbi32v12
63.7064.0764.25T:esch384v2
313.17313.38313.93T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.282.282.29sha256
10.7610.7610.77shake128
11.2111.2211.25sha512
17.2317.3117.34T:xoodyakv1
19.8219.8219.83asconxofav12
19.8219.8219.83asconhashav12
29.5929.5929.60asconxofv12
29.5929.5929.60asconhashv12
40.0340.0340.04asconhashabi32v12
43.9143.9344.01T:esch256v2
51.7251.8452.05T:romulush
58.5658.9259.36asconhashbi32v12
64.3364.5964.84T:esch384v2
312.58313.12313.32T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.352.362.36sha256
11.4811.4811.49shake128
12.6412.6712.76sha512
17.2617.3317.47T:xoodyakv1
20.1420.1420.16asconxofav12
20.1420.1520.16asconhashav12
30.0030.0130.02asconxofv12
30.0130.0230.03asconhashv12
40.5540.6440.65asconhashabi32v12
44.4044.4144.45T:esch256v2
52.4652.5852.77T:romulush
59.6760.0460.16asconhashbi32v12
65.3765.6765.91T:esch384v2
311.66312.15312.51T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.562.572.58sha256
12.2612.2712.29shake128
15.6415.8215.89sha512
17.7417.8117.82T:xoodyakv1
20.9820.9921.03asconxofav12
21.0121.0321.07asconhashav12
31.1131.1331.16asconxofv12
31.1131.1431.18asconhashv12
42.2042.2542.30asconhashabi32v12
45.6945.7345.82T:esch256v2
54.5154.7254.88T:romulush
62.1562.2962.31asconhashbi32v12
68.2968.6868.78T:esch384v2
308.94309.53309.72T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.235.275.33sha256
22.1222.2722.34T:xoodyakv1
28.0628.0828.08shake128
31.8332.2232.67asconhashav12
31.8432.3832.72asconxofav12
45.2245.4545.97asconhashv12
45.1145.5045.61asconxofv12
57.3958.0959.62sha512
61.2861.3461.72T:esch256v2
62.2862.4862.78asconhashabi32v12
79.6180.0680.77T:romulush
88.1488.6189.16asconhashbi32v12
104.55104.61104.86T:esch384v2
274.23274.48274.69T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.3827.5028.00sha256
75.1275.6280.00T:xoodyakv1
114.00114.62118.50asconxofav12
114.75115.62116.12asconhashav12
153.75154.50157.88asconhashv12
153.75157.00157.88asconxofv12
221.50221.88224.00asconhashabi32v12
224.25224.50224.75shake128
226.12227.38230.12T:romulush
228.62228.88232.00T:esch256v2
296.75299.00300.25asconhashbi32v12
316.75318.25319.25T:photonbeetlehash256rate32v1
451.88453.38455.00T:esch384v2
451.62459.25469.75sha512