VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20260330

[Page version: 20260717 01:32:41]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.554.564.57T:blake2b
4.564.584.62T:k12
5.145.165.18T:skein512512
5.145.185.20T:skein512256
6.786.886.93T:skein10241024
7.177.237.33sha384
7.427.487.54T:blake64
7.447.547.62T:blake2s
7.777.797.81T:skein256256
7.847.968.16sha512
8.138.218.24blake512
9.269.289.31shake128
9.839.899.95T:keccakc448
10.2710.4810.65sha224
10.5510.5810.63T:keccakc512
10.5610.5810.63T:blake32
10.7710.8110.85sha3224
11.2111.2511.30shake256
11.3311.3411.35sha256
11.2711.3411.43T:keccak
11.5511.5711.59sha3256
13.4613.4913.51blake256
13.9213.9413.98T:bblake256
14.0014.0714.15T:keccakc768
15.2415.3915.43sha3384
19.6519.7519.78T:keccakc1024
21.3421.3921.47sha3512
23.9624.0124.10T:groestl256
33.3033.3733.44T:jh384
33.3833.4033.46T:jh256
33.3533.4133.49T:jh512
33.3233.4333.52T:jh224
39.0039.0439.12T:round3jh512
39.0139.0739.14T:round3jh256
37.96?42.83?50.91?T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
4.684.684.68T:blake2b
4.964.974.97T:k12
5.315.325.33T:skein512512
5.325.345.34T:skein512256
7.207.247.24T:skein10241024
7.637.647.67T:blake2s
7.887.897.91T:blake64
7.967.967.97T:skein256256
8.308.348.41sha512
8.578.598.60blake512
8.598.608.63sha384
9.779.789.79shake128
10.4310.4510.47T:keccakc448
10.8710.8810.89T:blake32
11.1211.1311.14T:keccakc512
11.2711.2911.30sha3224
11.5911.5911.60sha256
11.6611.6811.69shake256
11.6811.7311.80sha224
11.8611.8811.92T:keccak
12.0212.0212.03sha3256
13.8313.8413.84blake256
14.2814.2914.32T:keccakc768
15.4415.4415.46sha3384
15.4815.4815.49T:bblake256
20.2620.2820.30T:keccakc1024
21.8321.8421.87sha3512
24.7124.7224.74T:groestl256
33.9433.9533.97T:jh384
33.9833.9934.02T:jh256
33.9934.0134.04T:jh512
34.0034.0234.05T:jh224
39.6939.7139.74T:round3jh512
39.7239.7439.76T:round3jh256
44.7345.0548.88T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
4.874.874.88T:blake2b
5.565.575.58T:skein512512
5.565.575.60T:skein512256
5.575.605.61T:k12
7.787.797.86T:blake2s
7.797.837.85T:skein10241024
8.248.258.26T:skein256256
8.558.588.63T:blake64
8.929.009.02sha512
9.209.249.27blake512
10.5910.6010.61shake128
10.8310.8911.02sha384
10.9110.9310.96T:keccakc448
11.3511.3711.39T:blake32
11.5511.5711.58sha3224
11.8211.8211.83T:keccakc512
12.0112.0212.03sha256
12.1512.1612.17shake256
12.5112.5212.53sha3256
12.7812.8012.82T:keccak
13.8213.8613.98sha224
14.4114.4214.46blake256
14.6114.6314.69T:keccakc768
15.5315.5815.69sha3384
18.0218.0318.05T:bblake256
21.1821.1921.21T:keccakc1024
22.5922.6022.64sha3512
25.8225.8625.91T:groestl256
34.9034.9334.95T:jh384
34.9634.9735.00T:jh256
34.9734.9935.02T:jh512
34.9935.0135.08T:jh224
40.8140.8240.84T:round3jh512
40.8440.8640.87T:round3jh256
48.3648.9352.97T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
5.915.925.95T:blake2b
6.256.266.28T:skein512512
6.266.286.32T:skein512256
6.646.666.68T:k12
8.248.268.30T:blake2s
8.948.989.00T:skein256256
9.479.519.54T:blake64
9.819.869.94sha512
10.0110.0310.06blake512
10.1010.1610.20T:skein10241024
11.6811.7011.74shake128
12.5812.6312.69T:blake32
13.1413.1513.18sha256
13.7813.8013.81shake256
13.9413.9513.97T:keccakc512
13.9613.9714.00T:keccakc448
14.0314.0514.07T:keccak
14.1814.1914.22sha3256
14.1914.2114.25sha3224
15.9115.9416.05blake256
16.0216.1216.24sha384
16.4516.4816.52T:keccakc768
16.8216.8516.88sha3384
19.1019.2519.37sha224
23.9423.9523.98T:keccakc1024
24.7824.8124.85T:bblake256
24.9424.9725.03sha3512
28.8228.8728.91T:groestl256
37.5137.5337.56T:jh384
37.5837.6237.66T:jh256
37.6237.6437.69T:jh512
37.6337.6937.76T:jh224
43.8143.8343.88T:round3jh512
43.8643.9443.97T:round3jh256
53.7954.3758.28T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
12.8613.0613.16T:blake2s
14.6514.7614.88T:skein512512
14.7914.8814.93T:skein512256
14.8215.1916.02T:blake2b
18.3618.5418.73T:skein256256
22.9123.0723.31T:k12
22.8023.1123.47sha512
24.2724.5724.85T:blake64
24.7125.0426.14blake512
27.1527.3127.50sha256
28.0028.0928.31sha3384
28.3228.4928.55shake256
28.7128.8429.00sha3256
28.8629.1129.36sha3512
28.8429.4729.68T:blake32
30.7631.0231.31sha3224
30.8531.0631.39shake128
33.9334.0734.28T:keccakc1024
34.2634.5835.18T:skein10241024
34.5634.7234.91T:keccakc768
34.6034.8035.05T:keccakc512
35.1635.2935.50T:keccakc448
35.2235.3835.54T:keccak
35.1035.3935.96blake256
66.8067.2768.02T:groestl256
70.5270.6170.95T:jh384
70.9571.0471.17T:jh256
71.1071.2271.36T:jh512
71.2571.6071.90T:jh224
81.8581.9382.16T:round3jh512
82.4882.8383.05T:round3jh256
84.9686.1486.98sha384
89.4290.3791.23sha224
111.39111.57112.05T:bblake256
140.70146.52146.60T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
102.59104.64106.34T:blake2s
116.65117.69118.28T:skein512512
116.76117.97119.49T:skein512256
119.62119.77120.92T:skein256256
120.83122.95124.62T:blake2b
127.26128.07129.73sha256
149.10152.64154.69T:blake32
172.06175.30179.29blake256
181.75182.90184.86T:k12
184.42187.31193.39sha512
196.41199.59201.83T:blake64
200.38203.97212.14blake512
222.28223.36225.55sha3384
225.64226.29227.45shake256
226.53227.26229.09sha3256
230.04231.40233.21sha3512
239.44242.01244.20sha3224
241.59243.62246.17shake128
276.99278.91281.91T:keccakc512
278.60279.10280.66T:keccakc1024
280.77281.39283.79T:keccakc768
279.78281.41283.42T:keccak
278.91282.46286.28T:skein10241024
281.30283.52285.54T:keccakc448
346.84349.28352.43T:groestl256
565.95567.30569.57T:jh384
568.23569.31570.99T:jh256
568.68569.80573.11T:jh512
570.09572.59574.50T:jh224
624.24631.15644.59sha224
655.47656.82660.32T:round3jh512
660.14663.59666.25T:round3jh256
684.54694.39709.98sha384
784.86793.11817.10T:bblake256
1130.991164.431186.58T:groestl512