VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
4.384.384.39sha512
5.475.485.49shake128
12.1212.1212.13asconxofav12
12.1212.1312.13asconhashav12
15.5815.6515.74T:xoodyakv1
18.1118.1218.13asconxofv12
18.1118.1218.13asconhashv12
22.1022.1022.13asconhashabi32v12
33.0433.0633.17T:esch256v2
33.0733.0733.17asconhashbi32v12
47.8347.8848.11T:esch384v2
108.79109.01112.89T:romulush
216.05221.93224.11T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
4.544.544.55sha512
5.605.615.62shake128
12.2512.2612.27asconhashav12
12.2512.2612.26asconxofav12
15.6415.7415.81T:xoodyakv1
18.2718.2718.29asconhashv12
18.2718.2818.29asconxofv12
22.3722.3822.39asconhashabi32v12
33.2533.2633.30T:esch256v2
33.3833.4033.47asconhashbi32v12
48.2148.2848.36T:esch384v2
109.69109.73109.77T:romulush
215.78218.15220.70T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.60sha256
4.804.814.82sha512
5.965.975.98shake128
12.4312.4412.47asconhashav12
12.4512.4612.48asconxofav12
15.7015.8415.94T:xoodyakv1
18.5018.5218.55asconhashv12
18.5318.5418.55asconxofv12
22.8322.8622.95asconhashabi32v12
33.4433.4933.56T:esch256v2
33.9133.9233.94asconhashbi32v12
49.0649.1449.25T:esch384v2
111.19111.31111.55T:romulush
214.93215.29217.17T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
1.721.731.73sha256
5.175.195.21sha512
6.386.396.43shake128
12.9112.9512.98asconhashav12
12.9412.9813.03asconxofav12
15.9016.0516.20T:xoodyakv1
19.1419.1919.26asconhashv12
19.1519.1919.25asconxofv12
24.0024.0624.15asconhashabi32v12
34.4234.4634.54T:esch256v2
35.2635.3135.37asconhashbi32v12
51.0651.1051.22T:esch384v2
114.89115.20115.85T:romulush
213.18213.60217.13T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
3.223.243.28sha256
11.4111.7111.75sha512
14.5914.6514.80shake128
19.2719.3719.46asconhashav12
19.2119.6719.94T:xoodyakv1
19.6719.9320.18asconxofav12
27.5127.6327.78asconxofv12
27.5027.6727.81asconhashv12
39.2939.4739.70asconhashabi32v12
45.8645.9046.17T:esch256v2
53.1853.3253.51asconhashbi32v12
77.7277.8178.04T:esch384v2
162.54163.07163.93T:romulush
188.35188.75189.11T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
18.8818.9319.04sha256
67.4768.0968.41T:xoodyakv1
69.3669.9170.65asconhashav12
70.7672.6673.98asconxofav12
79.4279.7780.75sha512
93.2594.0094.73asconhashv12
93.4494.1594.77asconxofv12
116.71117.26118.72shake128
159.81160.51161.75asconhashabi32v12
168.78168.96169.79T:esch256v2
193.89194.78195.81asconhashbi32v12
216.02218.49222.03T:photonbeetlehash256rate32v1
325.61326.85329.19T:esch384v2
429.71433.18435.32T:romulush