VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Coffee Lake (906ea); 2018 Intel Xeon E-2124; 4 x 3300MHz; r24000, supercop-20260214

[Page version: 20260319 20:29:26]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
6.946.946.95shake128
7.677.687.69sha256
14.5114.5214.53asconxofav12
14.4714.5214.53asconhashav12
15.0115.0315.04T:xoodyakv1
21.7321.7521.76asconxofv12
21.7321.7521.76asconhashv12
26.9626.9927.11asconhashabi32v12
34.1434.1934.23T:esch256v2
40.0740.1440.86asconhashbi32v12
44.4944.5144.53T:romulush
47.7848.1948.25T:esch384v2
225.21231.63232.46T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.455.46sha512
7.087.097.09shake128
8.248.268.27sha256
14.6614.6814.69asconxofav12
14.6314.6814.70asconhashav12
15.1415.1615.18T:xoodyakv1
21.9321.9521.97asconxofv12
21.9321.9521.97asconhashv12
27.3527.3727.81asconhashabi32v12
34.4434.4734.51T:esch256v2
40.5740.5941.18asconhashbi32v12
44.9144.9344.95T:romulush
48.2748.6748.70T:esch384v2
225.47231.16231.22T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.775.785.80sha512
7.577.587.59shake128
9.189.209.24sha256
14.8514.8914.93asconhashav12
14.8814.9214.96asconxofav12
15.3315.3515.39T:xoodyakv1
22.2422.2822.31asconxofv12
22.2522.2922.31asconhashv12
27.8527.8827.91asconhashabi32v12
34.9034.9535.02T:esch256v2
41.2341.3142.11asconhashbi32v12
45.5545.5945.62T:romulush
49.0949.4549.51T:esch384v2
225.07230.46230.52T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.106.116.12sha512
8.148.158.17shake128
11.8411.8811.92sha256
15.5215.5615.60asconhashav12
15.5415.5815.62asconxofav12
15.8415.9015.94T:xoodyakv1
23.0623.1123.17asconhashv12
23.0823.1323.19asconxofv12
29.1829.2629.81asconhashabi32v12
36.0236.1536.32T:esch256v2
42.9042.9843.67asconhashbi32v12
47.3547.4347.50T:romulush
51.2351.5851.70T:esch384v2
223.30228.41228.53T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.4912.5312.65sha512
18.6718.7418.80shake128
20.4020.6120.77T:xoodyakv1
23.7524.2324.72asconxofav12
23.7424.3224.71asconhashav12
33.5733.8634.14asconhashv12
33.6534.2434.76asconxofv12
43.2943.8344.11asconhashabi32v12
45.3845.7846.55sha256
48.8549.3049.73T:esch256v2
61.1761.3761.79asconhashbi32v12
69.9970.3870.98T:romulush
78.4478.9679.50T:esch384v2
198.30202.85203.20T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.0772.4774.01T:xoodyakv1
90.0391.7995.65asconhashav12
91.0792.4295.10asconxofav12
99.70100.14102.27sha512
120.43121.00123.41asconhashv12
120.45121.57124.29asconxofv12
146.77147.31149.10shake128
156.09156.74158.34asconhashabi32v12
181.84183.62186.02T:esch256v2
208.18208.62209.32asconhashbi32v12
206.99209.38211.53T:romulush
229.17233.58235.16T:photonbeetlehash256rate32v1
292.78297.00302.53sha256
337.32339.41341.67T:esch384v2