VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20260330

[Page version: 20260415 05:37:15]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
9.769.779.85sha512
9.859.869.87shake128
13.0213.0413.05sha256
18.1118.1218.93T:xoodyakv1
19.7919.7919.80asconxofav12
19.9119.9119.91asconhashav12
29.6729.6729.68asconxofv12
29.6729.6729.68asconhashv12
38.0138.0138.06asconhashabi32v12
53.7253.7353.79T:romulush
56.8756.8757.13asconhashbi32v12
60.4860.7061.10T:esch256v2
82.6283.0983.69T:esch384v2
398.98399.75400.61T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
10.0710.0810.08shake128
10.1610.1810.24sha512
13.3513.3613.37sha256
18.2518.2518.52T:xoodyakv1
20.0020.0020.01asconxofav12
20.0820.0820.08asconhashav12
29.8929.9129.91asconxofv12
29.9129.9129.91asconhashv12
38.4838.4838.48asconhashabi32v12
54.1854.2054.22T:romulush
57.4457.4457.44asconhashbi32v12
60.8861.1161.83T:esch256v2
83.5783.9484.49T:esch384v2
397.70397.82399.49T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
10.7710.7710.77shake128
10.8110.8510.91sha512
13.8513.8713.89sha256
18.4618.4618.64T:xoodyakv1
20.3520.3520.35asconxofav12
20.3920.3920.39asconhashav12
30.2830.2930.29asconxofv12
30.2930.2930.30asconhashv12
39.2739.2739.27asconhashabi32v12
54.9354.9454.96T:romulush
58.4158.4158.41asconhashbi32v12
61.5561.6961.95T:esch256v2
84.7985.2485.82T:esch384v2
396.41396.55396.75T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
11.5211.5711.63sha512
11.5711.5811.58shake128
15.1415.1715.20sha256
18.9818.9819.15T:xoodyakv1
21.2321.2321.23asconhashav12
21.2421.2421.24asconxofav12
31.3931.4131.41asconxofv12
31.4131.4131.43asconhashv12
41.4141.4141.56asconhashabi32v12
56.9356.9757.05T:romulush
60.9560.9560.95asconhashbi32v12
63.3363.3963.64T:esch256v2
88.2588.7789.20T:esch384v2
392.80393.03393.04T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
24.8925.0125.19sha512
25.9225.9226.10T:xoodyakv1
27.1427.2127.32shake128
31.3431.3431.38asconxofav12
31.8631.9432.00asconhashav12
32.0432.2632.53sha256
44.7944.8045.06asconhashv12
44.9444.9444.94asconxofv12
68.0368.0368.14asconhashabi32v12
82.6582.7883.00T:romulush
86.4488.3390.23T:esch256v2
93.6293.6294.34asconhashbi32v12
133.36133.84135.50T:esch384v2
348.98349.14349.65T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
91.5091.5091.96T:xoodyakv1
114.88114.88114.98asconhashav12
116.75116.75116.75asconxofav12
149.46151.00152.36sha256
152.88152.92153.12asconhashv12
154.38154.38154.38asconxofv12
199.48200.79201.81sha512
214.69214.90215.95shake128
234.73235.64237.92T:romulush
279.50279.50279.50asconhashabi32v12
326.70334.41344.24T:esch256v2
347.50347.50347.50asconhashbi32v12
401.15401.35402.50T:photonbeetlehash256rate32v1
571.98580.78599.86T:esch384v2