VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 65nm (6fb); 2007 Intel Core 2 Duo T7300; 2 x 2000MHz; trident, supercop-20260627

[Page version: 20260905 10:40:04]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.789.849.89sha512
9.859.859.85shake128
13.7813.7913.84sha256
19.8619.8619.88asconhashav12
19.9619.9619.97asconxofav12
29.7929.7929.79asconhashv12
29.8529.9930.01asconxofv12
32.0132.0732.14T:xoodyakv1
37.5837.5837.61asconhashabi32v12
55.5555.5955.67asconhashbi32v12
63.7263.7763.83T:esch256v2
81.3281.5181.61T:romulush
89.5590.1193.74T:esch384v2
388.12388.78388.88T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.0810.0810.08shake128
10.8310.9010.96sha512
14.6814.7014.72sha256
20.0620.0620.06asconhashav12
20.1220.1420.25asconxofav12
30.0430.0430.04asconhashv12
30.1930.2430.24asconxofv12
32.1332.2332.32T:xoodyakv1
38.0338.0438.05asconhashabi32v12
56.1256.1356.26asconhashbi32v12
64.0664.0964.18T:esch256v2
81.1981.6381.84T:romulush
91.1491.6994.35T:esch384v2
387.51387.89388.16T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.7810.7910.80shake128
12.5312.6512.70sha512
16.2216.2416.27sha256
20.4020.4020.41asconhashav12
20.4320.4320.43asconxofav12
30.4930.5030.51asconhashv12
30.5130.6430.64asconxofv12
32.3432.4732.64T:xoodyakv1
38.7838.7938.82asconhashabi32v12
57.0857.0957.22asconhashbi32v12
64.8564.8764.90T:esch256v2
82.0582.1382.43T:romulush
92.9193.1995.99T:esch384v2
386.27386.57386.66T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.6311.6311.64shake128
16.0716.3016.44sha512
20.3320.4020.43sha256
21.1921.1921.19asconxofav12
21.3121.3121.31asconhashav12
31.5631.5931.60asconhashv12
31.5431.7031.70asconxofv12
33.0633.1233.26T:xoodyakv1
40.7540.7940.89asconhashabi32v12
59.6459.6860.18asconhashbi32v12
66.7766.7866.86T:esch256v2
85.1885.2485.71T:romulush
96.8997.12100.17T:esch384v2
382.85383.20383.39T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
27.5627.5727.64shake128
31.9531.9532.07asconxofav12
32.0532.0532.05asconhashav12
42.5342.5443.21T:xoodyakv1
45.7045.7045.74asconhashv12
45.8845.8845.97asconxofv12
66.5066.5066.76asconhashabi32v12
65.4066.7368.01sha512
72.4072.6272.94sha256
90.7090.8891.27T:esch256v2
91.6491.6491.76asconhashbi32v12
124.76125.27125.60T:romulush
147.76149.26155.06T:esch384v2
341.46341.79342.23T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
115.25115.25115.97asconxofav12
117.00117.00117.50asconhashav12
145.50145.50145.95T:xoodyakv1
155.88156.42159.35asconxofv12
157.50159.60160.66asconhashv12
219.25219.25219.41shake128
271.49273.49274.38asconhashabi32v12
340.92343.00344.83asconhashbi32v12
346.75349.38351.73T:romulush
349.17350.69352.85T:esch256v2
397.90399.65399.88T:photonbeetlehash256rate32v1
470.17473.54475.93sha256
560.34567.32579.83sha512
641.16651.19673.64T:esch384v2