VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i3-6100; 2 x 3700MHz; skydell, supercop-20260330

[Page version: 20260522 07:40:46]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.255.255.26sha512
6.266.266.27shake128
7.697.707.71sha256
14.3614.3814.48asconhashav12
14.3714.4614.51asconxofav12
14.9414.9514.96T:xoodyakv1
21.6221.6721.68asconxofv12
21.6421.6721.69asconhashv12
27.3427.3527.37asconhashabi32v12
34.5534.5734.59T:esch256v2
40.5840.6040.63asconhashbi32v12
43.6143.6343.65T:romulush
46.0846.7547.50T:esch384v2
223.67224.59231.09T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.465.475.47sha512
6.426.436.44shake128
8.148.158.16sha256
14.5414.6014.65asconhashav12
14.5414.6014.65asconxofav12
15.0815.0915.10T:xoodyakv1
21.8521.8721.89asconhashv12
21.8521.8721.90asconxofv12
27.6527.6827.72asconhashabi32v12
34.8234.8534.88T:esch256v2
40.9941.0141.08asconhashbi32v12
43.9944.0244.04T:romulush
46.6747.2147.84T:esch384v2
223.95224.19229.97T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.805.815.83sha512
6.916.936.94shake128
8.888.898.91sha256
14.7714.8014.85asconhashav12
14.7714.8114.87asconxofav12
15.2415.2615.28T:xoodyakv1
22.1422.1922.22asconxofv12
22.1722.2122.24asconhashv12
28.2028.2228.25asconhashabi32v12
35.2135.2735.32T:esch256v2
41.6541.6841.73asconhashbi32v12
44.5844.6144.66T:romulush
47.4648.0348.65T:esch384v2
223.22223.36229.29T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.126.146.16sha512
7.547.567.60shake128
10.9711.0011.05sha256
15.4315.4915.55asconhashav12
15.4515.5115.56asconxofav12
15.8115.8615.91T:xoodyakv1
22.9723.0423.12asconhashv12
23.0023.0523.12asconxofv12
29.5229.5629.60asconhashabi32v12
36.5036.6036.70T:esch256v2
43.3243.3943.45asconhashbi32v12
46.2546.3246.38T:romulush
49.5650.1050.77T:esch384v2
221.34221.64227.44T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.5412.6012.69sha512
18.4318.5218.68shake128
20.1920.3720.52T:xoodyakv1
23.4323.7524.20asconhashav12
23.5223.7724.13asconxofav12
33.4233.6234.13asconhashv12
33.4433.7334.19asconxofv12
37.6437.8238.00sha256
43.6443.9044.27asconhashabi32v12
49.1049.5850.07T:esch256v2
61.7661.8962.03asconhashbi32v12
67.3267.5667.82T:romulush
75.8476.8677.68T:esch384v2
196.71197.22202.41T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
71.8973.2174.76T:xoodyakv1
90.7691.4292.50asconhashav12
90.9991.8093.09asconxofav12
100.31100.80101.83sha512
119.66120.54122.16asconxofv12
119.94121.17123.53asconhashv12
146.09146.76148.21shake128
156.90157.79159.45asconhashabi32v12
182.28183.54185.04T:esch256v2
190.05190.77191.45T:romulush
210.09210.73212.72asconhashbi32v12
226.46229.14233.45T:photonbeetlehash256rate32v1
230.85231.79233.26sha256
326.59331.99335.93T:esch384v2