VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Tiger Lake (806c1); 2020 Intel Core i7-1165G7; 4 x 2800MHz; panther, supercop-20260217

[Page version: 20260310 02:19:30]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.202.212.21sha256
4.484.494.50shake128
5.545.555.56sha512
8.638.648.65T:xoodyakv1
14.4014.4114.43asconhashav12
14.4114.4514.50asconxofav12
21.6721.6821.71asconxofv12
21.6821.7121.75asconhashv12
28.3228.3428.36asconhashabi32v12
33.0233.0833.14T:esch256v2
39.3539.4439.51T:romulush
40.2440.5543.07T:esch384v2
42.2042.2242.24asconhashbi32v12
219.15221.13221.34T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.262.262.26sha256
4.614.624.63shake128
5.755.765.78sha512
8.688.698.71T:xoodyakv1
14.5814.6114.64asconxofav12
14.6014.6214.65asconhashav12
21.8721.8921.91asconxofv12
21.9321.9621.98asconhashv12
28.6528.6828.70asconhashabi32v12
33.3233.3833.43T:esch256v2
39.7539.8339.92T:romulush
40.7840.8943.20T:esch384v2
42.6342.6542.68asconhashbi32v12
217.05217.70219.24T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.342.342.36sha256
4.974.985.00shake128
6.066.096.13sha512
8.758.778.80T:xoodyakv1
14.8014.8414.88asconhashav12
14.8114.8514.89asconxofav12
22.1522.2022.26asconxofv12
22.1822.2222.27asconhashv12
29.2029.2429.28asconhashabi32v12
33.7933.9234.06T:esch256v2
40.2840.4140.48T:romulush
41.5341.5943.93T:esch384v2
43.3143.3843.43asconhashbi32v12
216.88217.04218.12T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.562.582.60sha256
5.435.465.49shake128
6.306.326.41sha512
8.958.989.01T:xoodyakv1
15.4115.4715.53asconxofav12
15.4515.4915.56asconhashav12
22.9423.0023.09asconxofv12
22.9923.0623.17asconhashv12
30.7630.8130.86asconhashabi32v12
34.7434.9635.19T:esch256v2
41.6541.7841.93T:romulush
43.3443.4245.65T:esch384v2
45.2645.3745.46asconhashbi32v12
214.84215.18217.32T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
5.765.855.99sha256
11.7511.8512.33T:xoodyakv1
11.9912.1412.34sha512
13.1913.3513.64shake128
23.6423.8624.25asconxofav12
23.6423.8924.39asconhashav12
33.2733.4933.72asconxofv12
33.3633.6333.89asconhashv12
46.2146.7748.23T:esch256v2
49.6649.9850.20asconhashabi32v12
59.6159.9960.45T:romulush
65.6066.1769.39T:esch384v2
69.3769.7370.10asconhashbi32v12
190.97192.05193.79T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
29.1129.6930.59sha256
41.7242.2543.18T:xoodyakv1
86.4987.7289.77asconxofav12
88.5290.1493.40asconhashav12
98.8999.95106.94sha512
105.03107.08110.69shake128
114.96116.34118.02asconxofv12
114.89116.46118.69asconhashv12
165.29169.59171.46T:romulush
168.85177.79185.14T:esch256v2
198.80199.95201.35asconhashabi32v12
220.19222.68226.72T:photonbeetlehash256rate32v1
255.74257.20259.80asconhashbi32v12
285.77289.41302.88T:esch384v2