VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of NISTLWC hash candidates on one machine: riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107

[Page version: 20241120 00:41:22]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt is for NISTLWC, specifically (starting with supercop-20221005) finalists.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
34.0934.1134.25shake128
39.9239.9640.09sha512
61.7661.8062.91sha256
65.1465.1766.03asconhashav12
65.15?66.06?86.23?asconxofav12
95.0596.2997.06asconxofv12
96.1796.3097.08asconhashv12
98.9299.0199.85T:xoodyakv1
136.94137.78137.87asconhashabi32v12
190.83191.29191.60T:esch256v2
200.94201.02201.17asconhashbi32v12
289.04289.12289.79T:esch384v2
343.48344.24344.30T:romulush
1375.451376.031377.26T:photonbeetlehash256rate32v1
Cycles/byte for 4096 bytes
25%50%75%hash
34.8434.8434.87shake128
41.8641.8641.88sha512
63.0763.0863.14sha256
65.7465.7465.76asconxofav12
65.7465.7465.77asconhashav12
96.9296.9296.98asconhashv12
96.9296.9297.00asconxofv12
99.3199.3799.43T:xoodyakv1
138.11138.12138.17asconhashabi32v12
191.80191.81191.84T:esch256v2
201.73201.74202.22asconhashbi32v12
291.13291.14294.11T:esch384v2
345.14348.23372.03T:romulush
1371.411371.931374.37T:photonbeetlehash256rate32v1
Cycles/byte for 1536 bytes
25%50%75%hash
37.2237.2337.24shake128
45.1045.1245.21sha512
65.2665.2865.33sha256
66.7666.7666.78asconhashav12
66.7666.7666.77asconxofav12
98.2498.2498.26asconhashv12
98.2498.2598.27asconxofv12
100.13100.13100.21T:xoodyakv1
140.17140.18140.24asconhashabi32v12
193.31193.87193.88T:esch256v2
204.41204.41204.43asconhashbi32v12
295.91295.93295.96T:esch384v2
349.29349.30349.48T:romulush
1364.051371.611372.06T:photonbeetlehash256rate32v1
Cycles/byte for 576 bytes
25%50%75%hash
39.9139.9239.97shake128
49.4849.5149.57sha512
69.4869.4869.51asconxofav12
69.4969.4969.53asconhashav12
71.1171.1571.19sha256
101.77101.77101.81asconhashv12
101.77101.78101.81asconxofv12
102.33102.41102.45T:xoodyakv1
145.67145.68145.70asconhashabi32v12
198.81199.38199.40T:esch256v2
211.56211.56211.57asconhashbi32v12
308.68308.71308.75T:esch384v2
360.50360.50360.62T:romulush
1352.381352.411352.56T:photonbeetlehash256rate32v1
Cycles/byte for 64 bytes
25%50%75%hash
91.7091.7092.45shake128
104.30104.44104.64asconxofav12
104.44104.52104.62asconhashav12
114.78114.86115.58sha512
130.31130.38130.45T:xoodyakv1
145.92146.02146.22sha256
146.92146.92147.09asconhashv12
146.92146.92147.09asconxofv12
216.00216.02216.19asconhashabi32v12
269.22269.52269.62T:esch256v2
303.00303.00303.00asconhashbi32v12
472.02472.19472.42T:esch384v2
504.00504.00504.34T:romulush
1203.111203.381203.50T:photonbeetlehash256rate32v1
Cycles/byte for 8 bytes
25%50%75%hash
378.38379.12380.75asconxofav12
378.38379.50382.00asconhashav12
439.12441.88444.62T:xoodyakv1
502.00502.00504.75asconhashv12
502.12503.12506.12asconxofv12
672.62674.00694.00sha256
729.25729.25750.88shake128
769.62769.62770.12asconhashabi32v12
918.75921.50934.75sha512
1020.621021.121024.88T:esch256v2
1023.001023.001023.38asconhashbi32v12
1290.381290.381292.75T:romulush
1400.251402.501404.50T:photonbeetlehash256rate32v1
2053.502055.502058.12T:esch384v2