VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20260330

[Page version: 20260609 22:41:34]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
17.2317.2317.24sha512
18.8619.1319.25shake128
20.2520.2520.26T:xoodyakv1
20.4620.4620.48sha256
32.3732.3832.41asconhashav12
32.3732.3832.41asconxofav12
48.1248.1348.16asconxofv12
48.1248.1348.16asconhashv12
67.8767.9068.01asconhashabi32v12
102.98103.03103.17asconhashbi32v12
111.51111.54111.60T:esch256v2
126.82126.86126.91T:esch384v2
153.81153.86153.93T:romulush
619.86620.42621.14T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
17.8917.8917.91sha512
19.2819.2819.28shake128
20.4020.4020.42T:xoodyakv1
20.8820.8820.89sha256
32.6832.6832.69asconxofav12
32.6832.6832.69asconhashav12
48.5348.5348.53asconxofv12
48.5348.5348.53asconhashv12
68.7268.7368.75asconhashabi32v12
104.04104.06104.18asconhashbi32v12
112.19112.19112.20T:esch256v2
128.06128.06128.07T:esch384v2
155.07155.07155.18T:romulush
618.34618.75619.43T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
18.9919.0019.03sha512
20.6220.6420.99shake128
20.6620.6620.66T:xoodyakv1
21.6021.6121.64sha256
33.2033.2033.20asconhashav12
33.2033.2033.21asconxofav12
49.2049.2049.20asconxofv12
49.2049.2049.21asconhashv12
70.0970.0970.09asconhashabi32v12
105.81105.92106.00asconhashbi32v12
113.35113.35113.35T:esch256v2
130.13130.13130.14T:esch384v2
157.16157.16157.19T:romulush
616.36617.33617.86T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
20.1120.1120.11sha512
21.3421.3421.34T:xoodyakv1
22.1322.2022.56shake128
23.5123.5123.51sha256
34.5834.5834.58asconhashav12
34.5834.5834.62asconxofav12
50.9850.9850.98asconhashv12
50.9850.9850.98asconxofv12
73.8073.8674.03asconhashabi32v12
110.35110.38110.49asconhashbi32v12
116.44116.44116.44T:esch256v2
135.67135.67135.67T:esch384v2
162.75162.75162.81T:romulush
611.01612.63612.91T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
29.8029.9930.52T:xoodyakv1
42.3442.3442.40sha512
47.6747.7247.86sha256
51.1251.1251.31shake128
51.9751.9752.02asconhashav12
51.9751.9752.10asconxofav12
73.6473.6473.75asconhashv12
73.6473.6473.81asconxofv12
121.39122.46122.95asconhashabi32v12
155.92155.92155.96T:esch256v2
168.80169.42171.01asconhashbi32v12
206.56206.56206.57T:esch384v2
234.28234.28234.35T:romulush
543.30544.13547.62T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
114.50114.50114.85T:xoodyakv1
189.12189.12190.43asconxofav12
189.12189.12192.18asconhashav12
213.06213.50214.64sha256
252.25252.25254.29asconxofv12
252.25252.25256.26asconhashv12
336.62336.65338.22sha512
407.12407.12408.19shake128
490.25493.51500.26asconhashabi32v12
581.25581.25582.65T:esch256v2
601.98608.81613.06T:photonbeetlehash256rate32v1
629.38629.38633.54asconhashbi32v12
648.88648.88651.54T:romulush
895.00895.05897.02T:esch384v2