VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tremont (906c0); 2021 Intel Celeron N4500; 2 x 1100MHz; jasper2, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.232.232.23sha256
10.3110.3410.37sha512
10.5210.5210.53shake128
19.6219.6319.63asconxofav12
19.6219.6319.64asconhashav12
20.3620.9721.17T:xoodyakv1
29.3429.3429.35asconxofv12
29.3429.3429.38asconhashv12
39.5339.6339.74asconhashabi32v12
52.5252.8553.09T:romulush
57.2857.4957.64T:esch256v2
58.3758.7858.96asconhashbi32v12
71.8872.1372.45T:esch384v2
289.46289.97292.61T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.282.292.29sha256
10.7610.7610.77shake128
11.1811.2211.25sha512
19.8219.8219.82asconxofav12
19.8219.8219.83asconhashav12
20.4820.7921.01T:xoodyakv1
29.5929.5929.60asconxofv12
29.5929.5929.60asconhashv12
39.9139.9440.02asconhashabi32v12
52.7952.9953.17T:romulush
57.7057.8257.95T:esch256v2
58.7159.2059.38asconhashbi32v12
72.4872.7072.90T:esch384v2
288.90289.74291.61T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.362.362.37sha256
11.4811.4811.49shake128
12.6312.6712.76sha512
20.1320.1420.15asconxofav12
20.1320.1520.16asconhashav12
20.6520.7920.85T:xoodyakv1
30.0030.0130.02asconxofv12
30.0030.0130.02asconhashv12
40.5240.5340.64asconhashabi32v12
53.4453.8053.99T:romulush
58.3158.4458.54T:esch256v2
59.5359.9260.17asconhashbi32v12
73.6873.8974.16T:esch384v2
287.92288.53290.95T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.552.552.57sha256
12.2512.2612.28shake128
15.3715.4315.66sha512
20.8821.0021.08T:xoodyakv1
20.9821.0121.04asconxofav12
20.9821.0121.05asconhashav12
31.0931.1131.17asconhashv12
31.0931.1231.17asconxofv12
42.1742.2142.29asconhashabi32v12
55.7855.9656.13T:romulush
59.9359.9860.05T:esch256v2
61.6462.0662.29asconhashbi32v12
76.8777.0877.38T:esch384v2
285.20285.32288.61T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.025.165.54sha256
25.6426.1826.54T:xoodyakv1
27.8927.9128.06shake128
31.6331.9432.35asconhashav12
31.7432.0832.35asconxofav12
44.9845.2645.72asconhashv12
45.0245.2945.69asconxofv12
55.3655.8557.22sha512
62.2362.3062.53asconhashabi32v12
80.1880.4780.80T:esch256v2
81.3281.5781.96T:romulush
88.1788.6888.92asconhashbi32v12
117.67117.97118.42T:esch384v2
253.41254.16255.74T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
27.10?28.56?31.99?sha256
86.2586.3286.76T:xoodyakv1
113.42114.78117.95asconhashav12
113.85114.93119.25asconxofav12
152.14154.35157.73asconxofv12
152.38154.98158.67asconhashv12
220.40220.50221.54asconhashabi32v12
222.55222.94223.50shake128
226.21226.95229.75T:romulush
290.54291.91294.01T:photonbeetlehash256rate32v1
296.38297.25298.55asconhashbi32v12
299.43301.09303.11T:esch256v2
440.20444.35455.84sha512
506.92508.32510.52T:esch384v2