VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20260217

[Page version: 20260319 20:29:26]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.265.26sha512
6.266.266.27shake128
7.697.717.72sha256
14.3614.4214.50asconhashav12
14.3614.4314.50asconxofav12
14.9414.9514.96T:xoodyakv1
21.6021.6721.68asconhashv12
21.6321.6721.68asconxofv12
27.3427.3527.37asconhashabi32v12
34.5534.5734.59T:esch256v2
40.5840.5940.65asconhashbi32v12
43.6043.6343.70T:romulush
45.9746.1147.57T:esch384v2
223.81225.14231.39T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.465.47sha512
6.426.436.44shake128
8.138.158.17sha256
14.5414.6114.66asconxofav12
14.5514.6314.66asconhashav12
15.0715.0815.10T:xoodyakv1
21.8321.8721.89asconxofv12
21.8521.8721.90asconhashv12
27.6327.6827.72asconhashabi32v12
34.8234.8534.90T:esch256v2
40.9740.9941.02asconhashbi32v12
44.0044.0344.07T:romulush
46.5746.5947.79T:esch384v2
224.06224.34230.83T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.785.795.81sha512
6.926.936.95shake128
8.878.898.92sha256
14.7814.8314.89asconxofav12
14.7814.8314.90asconhashav12
15.2215.2515.28T:xoodyakv1
22.1622.2022.24asconhashv12
22.1722.2022.23asconxofv12
28.1828.2028.22asconhashabi32v12
35.1935.2435.31T:esch256v2
41.6441.6741.68asconhashbi32v12
44.6344.6744.72T:romulush
47.3347.3948.68T:esch384v2
223.33223.47229.85T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.116.136.18sha512
7.527.547.60shake128
10.9811.0011.03sha256
15.4415.5115.56asconxofav12
15.4815.5415.60asconhashav12
15.7615.7915.85T:xoodyakv1
22.9723.0423.13asconxofv12
23.0023.0523.11asconhashv12
29.4829.5229.73asconhashabi32v12
36.4436.5136.58T:esch256v2
43.2543.3243.42asconhashbi32v12
46.2946.3546.43T:romulush
49.3849.4750.76T:esch384v2
221.31221.51227.37T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.4612.5712.98sha512
18.4418.5518.71shake128
20.2720.4020.54T:xoodyakv1
23.5223.9224.47asconhashav12
23.6723.9624.19asconxofav12
33.3233.6234.15asconxofv12
33.4533.7134.34asconhashv12
37.6337.7637.91sha256
43.5443.7244.16asconhashabi32v12
49.1749.5249.85T:esch256v2
61.7861.9262.40asconhashbi32v12
67.4267.6667.96T:romulush
75.5275.8978.36T:esch384v2
196.72197.13202.57T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.3173.4975.39T:xoodyakv1
90.7791.4193.67asconhashav12
90.9491.8893.40asconxofav12
100.03100.94103.08sha512
119.76120.31121.76asconhashv12
119.40120.55121.52asconxofv12
146.23147.21148.69shake128
156.84157.64158.75asconhashabi32v12
182.92184.53186.62T:esch256v2
189.73190.01190.76T:romulush
210.20210.78212.20asconhashbi32v12
226.83228.82233.68T:photonbeetlehash256rate32v1
229.91230.61231.11sha256
324.55327.56342.78T:esch384v2