VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20260330

[Page version: 20260503 04:13:04]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.779.789.80sha512
9.819.829.84shake128
13.7713.7913.83sha256
19.8619.8619.86asconhashav12
19.9519.9619.97asconxofav12
29.7929.7929.95asconhashv12
29.9130.0030.09asconxofv12
32.0032.1132.34T:xoodyakv1
37.5737.5837.91asconhashabi32v12
55.5555.6556.20asconhashbi32v12
63.4963.6864.25T:esch256v2
81.3081.3681.77T:romulush
93.3493.8394.28T:esch384v2
389.76390.18390.83T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.0410.0510.06shake128
10.8010.8110.83sha512
14.7014.7114.73sha256
20.0620.0620.06asconhashav12
20.1220.1420.15asconxofav12
30.0430.0430.04asconhashv12
30.2330.2430.24asconxofv12
32.1332.2432.42T:xoodyakv1
38.0338.0438.07asconhashabi32v12
56.1256.1356.15asconhashbi32v12
63.8664.0664.15T:esch256v2
81.5781.9582.43T:romulush
93.8694.2795.01T:esch384v2
387.85389.36391.87T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.7510.7710.78shake128
12.5212.5512.58sha512
16.2016.2316.31sha256
20.4020.4020.41asconhashav12
20.4120.4320.45asconxofav12
30.4930.4930.49asconhashv12
30.6330.6430.64asconxofv12
32.3432.4332.57T:xoodyakv1
38.7838.7938.82asconhashabi32v12
57.0657.0857.10asconhashbi32v12
64.2664.6664.86T:esch256v2
83.0283.2183.49T:romulush
95.5195.8696.31T:esch384v2
386.65386.76389.35T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.6211.6211.63shake128
16.0316.1516.24sha512
20.3020.3420.44sha256
21.1921.2021.38asconxofav12
21.3121.3121.31asconhashav12
31.5631.5631.57asconhashv12
31.6831.7031.70asconxofv12
33.0633.0933.27T:xoodyakv1
40.7840.8340.89asconhashabi32v12
59.5959.6359.66asconhashbi32v12
66.5366.7366.79T:esch256v2
86.0486.2286.45T:romulush
99.81100.20100.75T:esch384v2
383.13383.41383.79T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
27.5727.6427.86shake128
31.9531.9532.05asconxofav12
32.0532.0532.05asconhashav12
42.5342.5543.23T:xoodyakv1
45.7045.7245.88asconhashv12
45.8845.8945.96asconxofv12
65.1566.1967.46sha512
66.5066.5066.82asconhashabi32v12
72.0372.3373.06sha256
90.7590.9791.28T:esch256v2
91.3391.3391.57asconhashbi32v12
124.95125.21125.46T:romulush
153.76154.32154.91T:esch384v2
341.18341.58341.85T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
115.25115.25115.55asconxofav12
117.00117.00117.24asconhashav12
145.50145.78147.07T:xoodyakv1
155.88155.90156.00asconxofv12
156.00157.50157.50asconhashv12
220.28220.59222.62shake128
271.66274.34274.38asconhashabi32v12
341.17343.77344.76asconhashbi32v12
347.39349.69352.25T:romulush
350.25350.48352.99T:esch256v2
399.46399.62399.62T:photonbeetlehash256rate32v1
471.55474.12478.99sha256
558.05565.23579.84sha512
672.69674.65676.77T:esch384v2