VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Comet Lake (806ec); 2019 Intel Core i3-10110U; 2 x 2100MHz; know, supercop-20260217

[Page version: 20260324 04:05:29]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.255.26sha512
6.266.266.27shake128
7.687.717.73sha256
14.6114.6214.63asconxofav12
14.6114.6214.63asconhashav12
14.9414.9514.97T:xoodyakv1
21.8621.8721.89asconhashv12
21.8621.8721.89asconxofv12
27.4127.5427.71asconhashabi32v12
34.8234.8634.92T:esch256v2
40.4440.5140.62asconhashbi32v12
42.6642.7142.74T:romulush
44.6744.6944.72T:esch384v2
220.59220.80221.04T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.465.47sha512
6.426.436.44shake128
8.258.268.28sha256
14.7614.7814.79asconxofav12
14.7714.7814.80asconhashav12
15.0315.0515.07T:xoodyakv1
22.0522.0722.09asconhashv12
22.0622.0722.09asconxofv12
27.7328.0628.21asconhashabi32v12
35.0935.1335.20T:esch256v2
40.8940.9241.26asconhashbi32v12
43.0143.0943.11T:romulush
45.1345.1545.17T:esch384v2
220.16220.27220.37T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.795.805.82sha512
6.916.926.93shake128
9.129.149.17sha256
14.9915.0215.05asconhashav12
14.9915.0315.05asconxofav12
15.1415.1715.21T:xoodyakv1
22.3722.4122.45asconxofv12
22.3822.4222.47asconhashv12
28.3228.6828.71asconhashabi32v12
35.5535.6435.73T:esch256v2
41.5541.7542.31asconhashbi32v12
43.5743.6343.71T:romulush
45.9045.9345.95T:esch384v2
219.63219.69219.75T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.296.306.36sha512
7.527.547.64shake128
11.6411.7011.76sha256
15.5015.5415.59T:xoodyakv1
15.6315.6715.73asconxofav12
15.6415.6915.74asconhashav12
23.1723.2323.32asconxofv12
23.1923.2423.30asconhashv12
29.8629.9730.01asconhashabi32v12
36.7536.8637.02T:esch256v2
43.1743.3043.78asconhashbi32v12
45.2345.3045.39T:romulush
47.8947.9347.96T:esch384v2
217.90217.96218.05T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
14.1614.2114.66sha512
18.4718.5418.67shake128
20.2720.4520.65T:xoodyakv1
23.8224.1524.67asconhashav12
23.8524.1624.58asconxofav12
33.3833.8834.34asconxofv12
33.5433.9634.32asconhashv12
43.49?44.34?79.53?sha256
44.8545.1445.42asconhashabi32v12
49.8750.2050.82T:esch256v2
61.8262.1462.73asconhashbi32v12
65.9566.1866.48T:romulush
73.3373.4673.66T:esch384v2
193.26193.58193.85T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.1273.4075.22T:xoodyakv1
90.3191.0192.73asconxofav12
90.6491.4694.03asconhashav12
99.6699.99102.12sha512
117.09118.82122.16asconhashv12
117.19119.08121.71asconxofv12
145.70146.44147.56shake128
161.16162.28164.65asconhashabi32v12
184.57187.21190.98T:esch256v2
186.26187.22188.75T:romulush
211.30212.28213.59asconhashbi32v12
223.17223.85224.83T:photonbeetlehash256rate32v1
277.66279.93282.92sha256
318.95?321.50?371.88?T:esch384v2