VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20261004

[Page version: 20261017 17:06:13]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.541.541.54sha256
4.354.384.38sha512
5.445.455.46shake128
12.1212.1312.13asconxofav12
12.1212.1312.13asconhashav12
15.5915.6515.71T:xoodyakv1
18.0918.1218.14asconxofv12
18.1218.1218.13asconhashv12
22.1022.1022.11asconhashabi32v12
33.0633.0733.08asconhashbi32v12
33.2933.5033.61T:esch256v2
41.8841.9341.94T:romulush
47.3047.7247.86T:esch384v2
212.19212.66215.51T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.571.57sha256
4.514.534.54sha512
5.575.585.59shake128
12.2512.2512.26asconhashav12
12.2512.2512.26asconxofav12
15.6115.7015.78T:xoodyakv1
18.2518.2718.28asconxofv12
18.2818.2818.29asconhashv12
22.3722.3822.39asconhashabi32v12
33.3833.3933.40asconhashbi32v12
33.5233.6633.98T:esch256v2
42.2342.2642.28T:romulush
48.2348.3348.36T:esch384v2
212.58214.66215.60T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.61sha256
4.784.804.81sha512
5.935.945.96shake128
12.4312.4512.47asconhashav12
12.4512.4512.47asconxofav12
15.6615.7615.93T:xoodyakv1
18.5018.5318.56asconxofv12
18.5118.5318.55asconhashv12
22.8322.8522.87asconhashabi32v12
33.9033.9233.94asconhashbi32v12
33.8933.9634.04T:esch256v2
42.8042.8242.85T:romulush
48.9849.0049.04T:esch384v2
212.22212.66213.26T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.711.711.72sha256
5.195.205.24sha512
6.356.376.42shake128
12.9112.9413.00asconhashav12
12.9812.9913.02asconxofav12
15.9016.0316.16T:xoodyakv1
19.1619.1819.25asconxofv12
19.1419.1919.24asconhashv12
24.0024.0624.12asconhashabi32v12
34.8734.9434.99T:esch256v2
35.2535.2835.35asconhashbi32v12
44.2544.3244.40T:romulush
51.0751.1051.16T:esch384v2
211.23212.03212.69T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.133.153.18sha256
11.5511.6211.75sha512
14.5814.6314.75shake128
19.3419.4419.60asconhashav12
19.3319.6719.98T:xoodyakv1
19.6419.8620.11asconxofav12
27.5127.6127.76asconhashv12
27.5027.6627.82asconxofv12
39.3139.4539.69asconhashabi32v12
46.2646.4346.65T:esch256v2
53.1153.2553.52asconhashbi32v12
63.4863.7363.92T:romulush
77.7077.8278.17T:esch384v2
186.89188.04189.17T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
18.2518.3318.38sha256
67.9968.2068.57T:xoodyakv1
69.5770.1571.12asconxofav12
69.6070.2571.98asconhashav12
79.0279.5882.18sha512
93.3194.0095.76asconhashv12
93.3994.0294.96asconxofv12
116.14116.85118.97shake128
160.39160.86161.78asconhashabi32v12
169.54170.30171.22T:esch256v2
176.24176.72177.42T:romulush
193.73194.48195.52asconhashbi32v12
218.15218.90219.79T:photonbeetlehash256rate32v1
327.97332.11333.18T:esch384v2