VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20260217

[Page version: 20260319 20:29:26]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.097.107.11sha512
9.12?9.17?10.20?shake128
11.5211.5311.60sha256
18.4918.5318.54asconhashav12
18.4918.5518.56asconxofav12
22.8122.8122.81T:xoodyakv1
27.4627.4727.55asconxofv12
27.4727.4727.48asconhashv12
37.4937.5037.52asconhashabi32v12
56.1156.1256.14asconhashbi32v12
57.8157.8157.82T:esch256v2
65.9265.9666.16T:esch384v2
78.0478.0578.10T:romulush
403.00404.40405.47T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
8.048.068.08sha512
9.309.359.80shake128
12.4212.4412.46sha256
18.6118.6218.62asconhashav12
18.6218.6218.62asconxofav12
22.9522.9522.95T:xoodyakv1
27.6927.6927.69asconhashv12
27.6927.7027.70asconxofv12
37.9437.9437.99asconhashabi32v12
56.6656.6656.67asconhashbi32v12
58.1958.1958.19T:esch256v2
66.6166.6766.79T:esch384v2
78.7478.7478.74T:romulush
402.37403.08403.93T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
9.719.739.77sha512
9.9810.0110.01shake128
13.9914.0314.09sha256
18.9418.9418.94asconhashav12
18.9618.9618.96asconxofav12
23.1823.1823.19T:xoodyakv1
28.1028.1028.10asconhashv12
28.1128.1228.12asconxofv12
38.8038.8038.84asconhashabi32v12
57.6557.6557.66asconhashbi32v12
58.8558.8558.85T:esch256v2
67.7567.8367.89T:esch384v2
79.9079.9179.94T:romulush
400.81401.13402.08T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
10.8510.8910.91shake128
13.1513.2913.35sha512
17.8517.9618.11sha256
19.8119.8119.81asconhashav12
19.8619.8619.86asconxofav12
23.8123.8123.81T:xoodyakv1
29.2029.2029.20asconhashv12
29.2129.2129.26asconxofv12
41.1141.1141.12asconhashabi32v12
60.3260.3260.33asconhashbi32v12
60.6160.6160.62T:esch256v2
70.8170.9871.02T:esch384v2
83.0683.1183.14T:romulush
397.40397.44397.53T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
26.4526.4626.68shake128
30.6730.9530.98asconhashav12
30.9430.9531.08asconxofav12
31.2531.2931.74T:xoodyakv1
42.7942.8143.21asconhashv12
42.8642.9543.60asconxofv12
61.0862.1762.89sha512
68.9369.5470.70sha256
69.8769.9770.43asconhashabi32v12
83.1983.2483.42T:esch256v2
93.4393.8994.09asconhashbi32v12
108.59108.90109.32T:esch384v2
122.62123.16123.17T:romulush
353.96354.41355.88T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
112.21112.56116.00T:xoodyakv1
114.25114.26116.46asconxofav12
114.27114.38115.98asconhashav12
150.48150.82154.14asconhashv12
152.08155.54155.62asconxofv12
209.24209.55215.78shake128
296.72302.16302.29asconhashabi32v12
316.10316.39317.10T:esch256v2
351.71353.21355.25T:romulush
357.41357.79358.19asconhashbi32v12
413.96415.20420.10T:photonbeetlehash256rate32v1
455.95459.51466.47sha256
466.59467.47469.22T:esch384v2
493.03498.51503.32sha512