VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.54sha256
4.374.384.39sha512
5.475.475.48shake128
12.1212.1212.13asconxofav12
12.1212.1212.13asconhashav12
15.5915.6515.74T:xoodyakv1
18.1118.1218.12asconxofv12
18.1118.1218.13asconhashv12
22.1322.2122.27asconhashabi32v12
32.9232.9533.12T:esch256v2
33.0633.0733.25asconhashbi32v12
47.7947.8748.14T:esch384v2
108.81109.29109.69T:romulush
216.50218.03219.04T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.534.544.54sha512
5.595.605.61shake128
12.2412.2612.26asconxofav12
12.2512.2612.26asconhashav12
15.6315.7115.78T:xoodyakv1
18.2718.2818.29asconhashv12
18.2818.2918.29asconxofv12
22.4122.4722.50asconhashabi32v12
33.1433.1633.24T:esch256v2
33.3733.3933.40asconhashbi32v12
48.1448.2748.35T:esch384v2
109.75109.83110.07T:romulush
215.46217.20218.45T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.61sha256
4.794.814.82sha512
5.945.955.97shake128
12.4412.4512.47asconxofav12
12.4412.4712.50asconhashav12
15.6115.7115.86T:xoodyakv1
18.5318.5418.56asconxofv12
18.5218.5518.57asconhashv12
22.8522.9122.96asconhashabi32v12
33.4933.5233.55T:esch256v2
33.9033.9233.94asconhashbi32v12
48.9849.0549.12T:esch384v2
111.95112.12112.67T:romulush
212.94214.67215.11T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.721.72sha256
5.205.225.25sha512
6.366.386.43shake128
12.9212.9713.02asconxofav12
12.9312.9913.02asconhashav12
15.9115.9916.17T:xoodyakv1
19.1519.1819.22asconxofv12
19.2119.2619.29asconhashv12
24.1024.1424.19asconhashabi32v12
34.4534.4834.51T:esch256v2
35.2835.3435.41asconhashbi32v12
51.0251.1351.20T:esch384v2
116.51117.83117.96T:romulush
210.90211.65214.02T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.193.213.25sha256
11.5511.6511.82sha512
14.5614.6414.84shake128
19.2419.3719.47asconhashav12
19.6919.9120.10asconxofav12
19.8320.1020.35T:xoodyakv1
27.5627.6627.87asconxofv12
27.9228.2428.41asconhashv12
39.2939.4639.58asconhashabi32v12
46.0646.3146.54T:esch256v2
53.1253.2753.49asconhashbi32v12
76.7477.6777.85T:esch384v2
163.51164.29164.98T:romulush
187.57189.13189.57T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
18.7218.9319.24sha256
66.2867.2569.43T:xoodyakv1
69.4769.9570.47asconhashav12
69.8371.7875.55asconxofav12
79.2579.8080.56sha512
93.3694.1795.02asconxofv12
94.0495.7198.44asconhashv12
116.65117.40119.66shake128
160.38161.11162.53asconhashabi32v12
168.82168.95169.21T:esch256v2
194.24194.94195.67asconhashbi32v12
219.30220.88224.59T:photonbeetlehash256rate32v1
325.46327.23331.75T:esch384v2
429.50430.68432.14T:romulush