VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, E cores; 8 x 700MHz; meteor,little, supercop-20261004

[Page version: 20261017 17:06:13]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.384.394.40sha512
5.455.475.47shake128
12.1212.1312.13asconhashav12
12.1212.1312.13asconxofav12
15.6015.6515.71T:xoodyakv1
18.1118.1218.13asconxofv12
18.1118.1218.13asconhashv12
22.0922.1422.21asconhashabi32v12
32.8732.9133.03T:esch256v2
33.0633.0833.15asconhashbi32v12
41.9341.9341.95T:romulush
47.7747.8647.88T:esch384v2
212.84213.70215.69T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.544.544.55sha512
5.585.585.60shake128
12.2512.2512.26asconxofav12
12.2412.2612.26asconhashav12
15.6315.7315.85T:xoodyakv1
18.2618.2818.29asconxofv12
18.2718.2818.29asconhashv12
22.3822.4022.47asconhashabi32v12
33.1033.1833.27T:esch256v2
33.3933.4033.47asconhashbi32v12
42.2642.2742.28T:romulush
48.2448.3048.35T:esch384v2
212.45213.60215.28T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.60sha256
4.784.814.82sha512
5.945.965.98shake128
12.4212.4412.46asconhashav12
12.4412.4612.48asconxofav12
15.6815.8215.94T:xoodyakv1
18.5018.5318.55asconxofv12
18.5218.5418.57asconhashv12
22.8322.8522.94asconhashabi32v12
33.4333.5133.55T:esch256v2
33.8633.9033.93asconhashbi32v12
42.8242.8342.86T:romulush
48.9949.0149.03T:esch384v2
214.01215.65220.26T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.721.72sha256
5.215.225.25sha512
6.366.376.40shake128
12.9112.9512.99asconhashav12
12.9212.9513.00asconxofav12
15.8415.9616.21T:xoodyakv1
19.2019.2419.29asconxofv12
19.2319.2719.32asconhashv12
24.0024.0624.11asconhashabi32v12
34.4234.4934.51T:esch256v2
35.2635.3135.35asconhashbi32v12
44.2744.3444.39T:romulush
51.0751.1951.22T:esch384v2
210.59211.01212.62T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.183.193.23sha256
11.5111.6111.77sha512
14.5814.6214.74shake128
19.2519.3619.55asconxofav12
19.3519.4319.65asconhashav12
19.8420.1420.45T:xoodyakv1
27.8228.0528.29asconxofv12
27.8828.0528.27asconhashv12
39.2739.3839.55asconhashabi32v12
45.8946.0046.40T:esch256v2
53.0953.2053.34asconhashbi32v12
63.4963.8264.22T:romulush
76.9577.6477.95T:esch384v2
188.04188.57189.39T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
17.9918.1118.26sha256
65.3066.8968.31T:xoodyakv1
69.5470.0070.64asconxofav12
69.3370.0271.00asconhashav12
79.6180.2180.75sha512
93.6494.2095.55asconhashv12
93.2894.4096.01asconxofv12
116.36117.04119.03shake128
159.70160.41161.41asconhashabi32v12
168.81169.06169.56T:esch256v2
175.46176.24177.78T:romulush
194.01194.67195.76asconhashbi32v12
219.07219.70220.71T:photonbeetlehash256rate32v1
330.81331.97333.06T:esch384v2