VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.275.285.28sha512
7.127.127.13shake128
7.797.807.82sha256
14.0714.0914.10asconhashav12
14.0814.0914.10asconxofav12
16.4116.4116.42T:xoodyakv1
21.1521.1621.18asconxofv12
21.1621.1821.19asconhashv12
28.2728.6328.66asconhashabi32v12
37.3837.4137.44T:esch256v2
41.5141.6042.42asconhashbi32v12
42.9843.0243.12T:romulush
46.62?50.15?76.30?T:esch384v2
244.88249.36250.16T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.505.515.53sha512
7.297.307.31shake128
8.248.258.27sha256
14.2314.2414.26asconxofav12
14.2314.2414.27asconhashav12
16.4916.5016.50T:xoodyakv1
21.3621.3721.39asconxofv12
21.3521.3821.39asconhashv12
28.8728.8828.92asconhashabi32v12
37.6437.6737.72T:esch256v2
41.9642.4942.78asconhashbi32v12
43.3643.4043.49T:romulush
50.05?50.60?73.00?T:esch384v2
245.15248.84249.03T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.925.925.97sha512
7.817.837.85shake128
9.069.109.14sha256
14.4614.4814.51asconxofav12
14.4614.4814.52asconhashav12
16.6216.6316.65T:xoodyakv1
21.6621.6921.72asconxofv12
21.6621.7021.72asconhashv12
28.8729.1129.33asconhashabi32v12
38.0438.0838.12T:esch256v2
42.5542.9643.34asconhashbi32v12
43.9544.0244.17T:romulush
50.55?51.42?73.97?T:esch384v2
244.38248.04248.16T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.396.436.46sha512
8.458.488.52shake128
11.2611.3011.33sha256
15.0215.0815.12asconhashav12
15.0415.1015.13asconxofav12
16.9917.0117.04T:xoodyakv1
22.4122.4722.54asconxofv12
22.4322.4822.55asconhashv12
30.0530.1830.46asconhashabi32v12
39.0739.1739.21T:esch256v2
44.0744.5244.90asconhashbi32v12
45.6245.6945.82T:romulush
52.62?53.68?77.00?T:esch384v2
241.51245.93246.09T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
12.9913.1513.38sha512
20.2020.3320.47shake128
21.6721.7321.82T:xoodyakv1
22.3622.5122.68asconhashav12
22.4522.5722.92asconxofav12
32.1132.2932.56asconhashv12
32.4632.6732.90asconxofv12
38.6238.8239.02sha256
44.3644.6444.96asconhashabi32v12
52.1852.3352.73T:esch256v2
63.6064.0064.45asconhashbi32v12
65.5865.8266.13T:romulush
80.62?81.80?116.82?T:esch384v2
214.73218.11218.79T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
74.5074.8875.38T:xoodyakv1
80.8881.7984.08asconhashav12
81.1281.8883.12asconxofav12
104.58105.17107.46sha512
110.21110.92112.12asconhashv12
113.00114.75116.58asconxofv12
156.71157.50159.25asconhashabi32v12
158.71160.42162.33shake128
182.67183.79185.17T:romulush
194.42195.17196.21T:esch256v2
214.46215.38217.50asconhashbi32v12
235.67236.96238.92sha256
246.75248.83250.38T:photonbeetlehash256rate32v1
344.67?353.29?505.12?T:esch384v2