VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4765T; 4 x 2000MHz; prodesk, supercop-20260330

[Page version: 20260503 04:13:04]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.265.275.28sha512
7.127.127.13shake128
7.777.787.80sha256
14.0814.0914.09asconxofav12
14.0814.0914.10asconhashav12
16.4116.4116.42T:xoodyakv1
21.1621.1721.18asconhashv12
21.1521.1721.19asconxofv12
28.5928.6328.66asconhashabi32v12
37.3937.4037.43T:esch256v2
41.9242.3842.46asconhashbi32v12
42.9743.0043.09T:romulush
48.7848.9950.04T:esch384v2
243.86244.11244.27T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.505.525.54sha512
7.297.297.30shake128
8.248.268.27sha256
14.2214.2414.26asconxofav12
14.2314.2414.27asconhashav12
16.49?16.51?20.83?T:xoodyakv1
21.3621.3821.40asconhashv12
21.3721.3921.40asconxofv12
28.8628.8828.90asconhashabi32v12
37.6437.6637.69T:esch256v2
41.9642.5642.72asconhashbi32v12
43.3843.4043.55T:romulush
49.3949.4150.37T:esch384v2
243.30243.38243.42T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.915.935.97sha512
7.817.837.84shake128
9.129.159.20sha256
14.4614.4814.50asconhashav12
14.4714.4914.51asconxofav12
16.6216.6416.66T:xoodyakv1
21.6621.6921.71asconxofv12
21.6621.6921.71asconhashv12
29.1829.3229.35asconhashabi32v12
38.0538.0938.12T:esch256v2
42.5543.3343.39asconhashbi32v12
43.9343.9844.07T:romulush
50.2150.2551.20T:esch384v2
242.51242.60242.70T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.386.416.48sha512
8.478.488.50shake128
11.2611.2911.36sha256
15.0215.0615.13asconhashav12
15.0415.0715.12asconxofav12
16.9817.0117.04T:xoodyakv1
22.4122.4622.53asconhashv12
22.4322.4822.62asconxofv12
30.2830.4430.51asconhashabi32v12
39.1239.1939.20T:esch256v2
44.0744.5144.88asconhashbi32v12
45.5945.7145.78T:romulush
52.3752.5053.52T:esch384v2
240.46240.56240.68T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.9913.1613.38sha512
20.0820.1920.34shake128
21.8121.8821.90T:xoodyakv1
22.3522.5022.66asconhashav12
22.3822.6022.96asconxofav12
32.2332.3732.56asconxofv12
32.4932.6432.94asconhashv12
38.9940.0740.86sha256
44.2744.5344.81asconhashabi32v12
52.1152.3752.65T:esch256v2
63.4563.9664.18asconhashbi32v12
65.5865.7966.03T:romulush
79.9380.3081.55T:esch384v2
213.34213.62214.18T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
74.8875.1775.75T:xoodyakv1
81.0081.7584.04asconxofav12
80.8381.9283.38asconhashav12
104.33105.42108.62sha512
109.58110.75113.17asconxofv12
113.25114.46116.33asconhashv12
156.50157.17158.38asconhashabi32v12
158.04159.08160.42shake128
181.88182.79184.42T:romulush
193.71194.58195.33T:esch256v2
210.58212.17214.12asconhashbi32v12
235.33236.46238.71sha256
242.96243.75244.54T:photonbeetlehash256rate32v1
341.88344.46351.21T:esch384v2