VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Skylake (506e3); 2015 Intel Core i5-6500T; 4 x 2500MHz; thinksky, supercop-20261018

[Page version: 20261105 21:27:33]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.245.245.25sha512
6.286.286.29shake128
7.687.697.70sha256
14.4414.4714.52asconhashav12
14.4614.5114.53asconxofav12
15.0215.0315.04T:xoodyakv1
21.7321.7421.76asconxofv12
21.7321.7521.76asconhashv12
27.0227.0427.06asconhashabi32v12
34.1034.1534.18T:esch256v2
40.9241.1441.27asconhashbi32v12
43.5543.5743.59T:romulush
46.3047.5747.79T:esch384v2
223.71224.49230.94T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
5.455.455.46sha512
6.456.466.46shake128
8.128.138.15sha256
14.6114.6414.69asconxofav12
14.6214.6614.69asconhashav12
15.1415.1515.17T:xoodyakv1
21.9321.9521.97asconhashv12
21.9421.9521.97asconxofv12
27.3327.3627.44asconhashabi32v12
34.3734.4134.45T:esch256v2
40.9541.2441.43asconhashbi32v12
43.9243.9443.97T:romulush
46.9048.0648.13T:esch384v2
223.92224.03229.84T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
5.775.785.80sha512
6.926.946.96shake128
8.868.888.91sha256
14.8314.8714.92asconhashav12
14.8614.8914.93asconxofav12
15.2915.3215.34T:xoodyakv1
22.2422.2822.32asconxofv12
22.2522.2822.32asconhashv12
27.8427.8728.23asconhashabi32v12
34.7834.8534.92T:esch256v2
41.2041.5642.01asconhashbi32v12
44.5644.6044.64T:romulush
47.7348.8848.94T:esch384v2
223.26223.39229.07T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
6.196.206.22sha512
7.537.567.59shake128
10.9410.9811.02sha256
15.5215.5615.61asconhashav12
15.5015.5715.63asconxofav12
15.8215.8515.91T:xoodyakv1
23.0823.1323.20asconhashv12
23.0523.1323.20asconxofv12
29.1129.1529.38asconhashabi32v12
35.9736.0536.16T:esch256v2
42.7942.8943.53asconhashbi32v12
46.2246.2746.34T:romulush
49.7651.0251.08T:esch384v2
221.35221.62227.23T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
13.2813.3613.57sha512
18.4518.4718.75shake128
20.2720.3920.57T:xoodyakv1
23.4523.6824.24asconhashav12
23.3523.7123.96asconxofav12
33.6033.8234.19asconxofv12
33.4833.8734.46asconhashv12
37.3937.6037.75sha256
43.2043.5744.03asconhashabi32v12
48.5548.9949.45T:esch256v2
61.1161.2761.65asconhashbi32v12
67.1567.3567.59T:romulush
76.0478.2078.78T:esch384v2
196.58197.16201.86T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
72.0774.1475.88T:xoodyakv1
90.1990.9292.30asconhashav12
90.9891.8593.44asconxofav12
98.8299.22100.53sha512
120.49121.16121.74asconxofv12
120.23121.24121.94asconhashv12
146.34146.80147.84shake128
156.17156.91158.06asconhashabi32v12
180.23182.18184.77T:esch256v2
189.31190.22191.90T:romulush
207.59208.29210.33asconhashbi32v12
226.23228.64233.17T:photonbeetlehash256rate32v1
228.14229.65231.11sha256
328.17335.99343.56T:esch384v2