VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Zen 5 (b00f21); 2024 AMD EPYC 9555; 64 x 3200MHz; tripwire, supercop-20261004

[Page version: 20261017 17:06:13]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.032.032.03sha256
3.493.493.50sha512
5.105.125.13shake128
9.199.209.20asconhashav12
9.199.209.21asconxofav12
13.7713.7813.78asconhashv12
13.7713.7813.79asconxofv12
14.7314.7414.75T:xoodyakv1
20.5320.5320.55asconhashabi32v12
27.5927.6127.64T:esch256v2
30.0130.0230.03asconhashbi32v12
40.6740.7640.99T:esch384v2
53.63?54.22?60.22?T:romulush
190.69190.81190.94T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
2.072.072.07sha256
3.873.873.88sha512
5.255.275.29shake128
9.309.309.31asconxofav12
9.309.319.31asconhashav12
13.8913.9013.92asconhashv12
13.9013.9113.92asconxofv12
14.8214.8314.84T:xoodyakv1
20.7820.7920.81asconhashabi32v12
27.8027.8128.00T:esch256v2
30.2930.3130.33asconhashbi32v12
41.1641.2041.39T:esch384v2
55.2455.4360.23T:romulush
190.35190.52190.64T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
4.444.464.48sha512
5.685.715.76shake128
9.469.489.49asconxofav12
9.469.489.49asconhashav12
14.1014.1114.13asconhashv12
14.1114.1214.14asconxofv12
14.9414.9715.01T:xoodyakv1
21.1921.2221.25asconhashabi32v12
28.1128.1328.15T:esch256v2
30.7630.7930.83asconhashbi32v12
41.8341.8742.21T:esch384v2
55.5655.8360.96T:romulush
189.99190.13190.29T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
2.292.292.30sha256
5.675.725.74sha512
6.146.226.29shake128
9.859.889.92asconhashav12
9.879.899.92asconxofav12
14.6114.6414.67asconhashv12
14.6114.6514.69asconxofv12
15.2915.3315.40T:xoodyakv1
22.2522.3022.36asconhashabi32v12
28.9729.0029.08T:esch256v2
31.9932.0632.11asconhashbi32v12
43.8443.9144.13T:esch384v2
57.9258.1463.26T:romulush
188.35188.50188.69T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
4.334.384.42sha256
14.8314.9315.05asconhashav12
14.9315.0015.09asconxofav12
15.2715.4215.70shake128
19.2519.3419.62T:xoodyakv1
21.2121.2821.38asconhashv12
21.1921.3021.37asconxofv12
23.5123.7624.11sha512
36.4336.8037.13asconhashabi32v12
40.3140.5540.98T:esch256v2
47.9748.2848.56asconhashbi32v12
69.0069.2369.66T:esch384v2
81.55?82.38?91.05?T:romulush
168.75169.79170.41T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
23.91?26.55?27.89?sha256
54.6055.0955.55asconxofav12
54.8055.2655.96asconhashav12
64.7665.3666.23T:xoodyakv1
73.3073.7974.26asconhashv12
73.2373.8575.88asconxofv12
122.39124.00127.68shake128
146.16147.34148.88asconhashabi32v12
151.43152.38154.86T:esch256v2
183.86184.86186.18T:photonbeetlehash256rate32v1
183.57185.07186.96asconhashbi32v12
188.71193.21194.96sha512
217.93?220.64?242.69?T:romulush
303.01304.16305.32T:esch384v2