VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20260627

[Page version: 20260805 22:02:12]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.769.779.78sha512
9.819.829.82shake128
13.0413.0413.05sha256
18.1118.8819.33T:xoodyakv1
19.7919.7919.79asconxofav12
19.9119.9119.91asconhashav12
29.6629.6729.68asconxofv12
29.6729.6729.68asconhashv12
38.0138.0138.05asconhashabi32v12
53.5253.7455.59T:romulush
56.8756.8756.91asconhashbi32v12
60.4460.7260.88T:esch256v2
81.9682.2082.43T:esch384v2
398.48398.68398.94T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.0310.0410.04shake128
10.1610.1610.17sha512
13.3113.3313.35sha256
18.2518.2518.60T:xoodyakv1
20.0020.0020.01asconxofav12
20.0820.0820.08asconhashav12
29.9129.9129.91asconhashv12
29.9129.9229.97asconxofv12
38.4838.4838.48asconhashabi32v12
54.1754.2355.92T:romulush
57.4457.4457.44asconhashbi32v12
60.7860.9761.58T:esch256v2
82.5482.9083.36T:esch384v2
397.70397.85398.06T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.7310.7310.74shake128
10.8110.8110.83sha512
13.8213.8513.86sha256
18.4618.4618.72T:xoodyakv1
20.3520.3520.36asconxofav12
20.3920.3920.39asconhashav12
30.2930.2930.29asconhashv12
30.3030.3230.35asconxofv12
39.2739.2739.28asconhashabi32v12
54.9254.9356.86T:romulush
58.4158.4158.41asconhashbi32v12
61.4361.6062.01T:esch256v2
83.8683.9384.14T:esch384v2
396.35396.41396.59T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.4911.5211.54sha512
11.5411.5611.58shake128
15.1015.1815.20sha256
18.9818.9819.15T:xoodyakv1
21.2321.2321.23asconhashav12
21.2421.2421.27asconxofav12
31.4131.4131.43asconhashv12
31.3831.4631.56asconxofv12
41.4141.4141.42asconhashabi32v12
56.9256.9859.08T:romulush
60.9560.9560.95asconhashbi32v12
63.2163.2664.25T:esch256v2
87.5287.6588.07T:esch384v2
392.68392.85392.98T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
24.8024.8324.93sha512
25.9225.9226.10T:xoodyakv1
27.0527.0827.19shake128
31.3431.3431.40asconxofav12
31.8631.9432.00asconhashav12
32.0532.1932.53sha256
44.8044.8044.80asconhashv12
45.2945.4845.67asconxofv12
68.0368.0368.09asconhashabi32v12
82.7382.9385.02T:romulush
86.7589.7790.56T:esch256v2
93.6994.4194.41asconhashbi32v12
132.99133.22135.27T:esch384v2
348.81348.93349.02T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
91.5091.9493.90T:xoodyakv1
114.50114.53114.88asconhashav12
116.75116.75116.75asconxofav12
148.34148.70150.52sha256
152.55152.88152.88asconhashv12
154.24155.58157.01asconxofv12
198.67199.51200.50sha512
215.48215.50216.12shake128
235.00237.35241.42T:romulush
279.50279.50279.51asconhashabi32v12
327.20336.88342.38T:esch256v2
347.50347.50347.50asconhashbi32v12
401.25401.35402.50T:photonbeetlehash256rate32v1
572.18579.58600.44T:esch384v2