VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530

[Page version: 20240726 23:45:59]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
44.8544.8545.12sha256
77.0077.0077.00T:xoodyakv1
90.1390.1390.14shake128
90.5090.5090.56asconhashabi32v12
103.00103.00103.13sha512
103.75103.75103.83asconhashav12
103.75103.75103.75asconxofav12
133.00133.00133.07asconhashbi32v12
146.25146.25146.39asconhashv12
146.25146.25146.31asconxofv12
189.13194.12194.15T:esch256v2
286.88287.78289.24T:esch384v2
2380.652382.012383.16T:photonbeetlehash256rate32v1
3294.443306.783310.65T:romulush
Cycles/byte for 4096 bytes
25%50%75%hash
45.8345.8346.05sha256
77.6377.6377.63T:xoodyakv1
92.1592.1592.15asconhashabi32v12
92.4492.4592.45shake128
104.87104.88104.88asconxofav12
104.87104.88104.88asconhashav12
106.59106.59106.59sha512
134.68134.68134.68asconhashbi32v12
147.63147.63147.63asconhashv12
147.63147.63147.63asconxofv12
195.48195.48195.50T:esch256v2
283.81289.87289.88T:esch384v2
2375.202377.362380.52T:photonbeetlehash256rate32v1
3320.703321.203325.31T:romulush
Cycles/byte for 1536 bytes
25%50%75%hash
47.4247.4547.65sha256
78.6878.6878.68T:xoodyakv1
94.9094.9194.91asconhashabi32v12
99.0599.0599.07shake128
106.76106.76106.76asconhashav12
106.76106.76106.76asconxofav12
112.56112.56112.56sha512
137.49137.49137.49asconhashbi32v12
149.92149.93149.93asconhashv12
149.93149.93149.93asconxofv12
197.74197.75197.75T:esch256v2
288.71294.86294.86T:esch384v2
2367.632367.632367.96T:photonbeetlehash256rate32v1
3361.723361.853370.35T:romulush
Cycles/byte for 576 bytes
25%50%75%hash
51.6951.8351.94sha256
81.4881.4881.63T:xoodyakv1
102.26102.26106.36asconhashabi32v12
107.88107.88107.93shake128
111.76111.76111.81asconxofav12
111.76111.76113.98asconhashav12
117.25117.25119.42sha512
144.96144.96147.60asconhashbi32v12
156.06156.06158.85asconxofv12
156.06156.06156.11asconhashv12
203.80203.81210.19T:esch256v2
295.39301.76308.17T:esch384v2
2347.852347.852349.10T:photonbeetlehash256rate32v1
3477.183477.203502.06T:romulush
Cycles/byte for 64 bytes
25%50%75%hash
105.84106.12106.28sha256
117.31117.44117.50T:xoodyakv1
175.88175.88175.88asconhashav12
175.88175.88175.88asconxofav12
196.31196.31196.62asconhashabi32v12
231.19231.19231.41sha512
234.31234.53234.72asconhashv12
234.50234.53234.75asconxofv12
240.66240.66240.91asconhashbi32v12
262.03262.03262.69shake128
280.97280.97281.19T:esch256v2
478.56478.56478.56T:esch384v2
2094.622094.692096.41T:photonbeetlehash256rate32v1
4955.224955.224960.06T:romulush
Cycles/byte for 8 bytes
25%50%75%hash
466.75467.25467.25T:xoodyakv1
496.50497.75500.00sha256
679.50679.50679.50asconhashav12
679.50679.50679.50asconxofav12
849.50851.00856.50asconxofv12
849.50851.25852.75asconhashv12
936.00936.00936.00asconhashabi32v12
995.00995.00995.00asconhashbi32v12
1103.501103.501107.00T:esch256v2
1848.751850.501852.25sha512
2029.252029.252032.75shake128
2132.752132.752134.25T:esch384v2
2484.252485.752485.75T:photonbeetlehash256rate32v1
13293.0013293.0013467.00T:romulush