VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Redwood Cove (a06a4-40); 2023 Intel Core Ultra 5 125H, P cores; 4 x 1200MHz; meteor,big, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.052.052.05sha256
5.035.045.04sha512
5.265.285.29shake128
13.2213.2513.30asconhashav12
13.3413.3513.37asconxofav12
15.3115.3215.38T:xoodyakv1
19.7819.8019.84asconhashv12
19.7819.8219.87asconxofv12
25.5025.5725.64T:esch256v2
26.3126.4526.55asconhashabi32v12
35.6735.8336.03T:esch384v2
39.0439.4039.59asconhashbi32v12
44.3744.3844.41T:romulush
194.28194.96196.87T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.092.092.09sha256
5.215.215.22sha512
5.425.445.47shake128
13.3513.3813.41asconhashav12
13.4613.4813.51asconxofav12
15.3815.3915.43T:xoodyakv1
19.9719.9920.01asconhashv12
19.9620.0020.05asconxofv12
25.7125.7725.81T:esch256v2
26.6026.7426.77asconhashabi32v12
36.0936.2336.36T:esch384v2
39.3839.6439.82asconhashbi32v12
44.7644.7944.81T:romulush
193.78194.25195.39T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.152.152.15sha256
5.505.515.52sha512
5.785.836.09shake128
13.5413.5813.63asconhashav12
13.6513.6813.73asconxofav12
15.5015.5215.55T:xoodyakv1
20.2020.2320.28asconhashv12
20.2320.2720.34asconxofv12
25.9726.0326.11T:esch256v2
27.0227.1427.22asconhashabi32v12
36.6136.7736.95T:esch384v2
40.2840.3540.39asconhashbi32v12
45.4245.4645.50T:romulush
192.85193.38194.01T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.322.332.33sha256
5.805.835.86sha512
6.196.336.67shake128
14.0514.1214.18asconhashav12
14.1314.2014.25asconxofav12
15.8315.8715.91T:xoodyakv1
20.8620.9320.99asconhashv12
20.8820.9521.04asconxofv12
26.7526.8326.93T:esch256v2
28.1028.2228.34asconhashabi32v12
38.2938.4538.67T:esch384v2
41.6641.8041.94asconhashbi32v12
47.0647.1547.28T:romulush
191.81192.27192.86T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.594.624.69sha256
11.7711.8912.09sha512
14.8215.3916.25shake128
20.0220.1420.27T:xoodyakv1
20.6520.8921.13asconxofav12
20.6520.8921.24asconhashav12
29.5829.8930.42asconxofv12
29.6429.9030.26asconhashv12
35.4635.5736.07T:esch256v2
42.1742.4942.76asconhashabi32v12
57.7658.3158.94T:esch384v2
59.7560.2460.52asconhashbi32v12
68.1468.4268.81T:romulush
170.31170.85171.54T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
25.6726.0626.64sha256
67.8168.1868.71T:xoodyakv1
71.9072.8174.72asconxofav12
72.6774.5077.39asconhashav12
90.1690.9691.95sha512
98.0699.59101.41asconhashv12
98.57100.01101.65asconxofv12
121.27123.45127.66shake128
141.83149.16153.93T:esch256v2
147.66149.66151.85asconhashabi32v12
191.21194.33198.60T:photonbeetlehash256rate32v1
193.56194.97196.53T:romulush
198.86200.74203.29asconhashbi32v12
248.54252.66258.15T:esch384v2