VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20250922

[Page version: 20251103 11:56:32]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.344.344.77T:blake2b
4.564.594.60T:k12
5.155.155.15T:skein512256
5.155.155.15T:skein512512
6.826.886.92T:skein10241024
7.177.257.34sha384
7.487.487.48T:blake64
7.727.757.76T:skein256256
7.737.868.12sha512
8.158.188.20blake512
8.728.728.74shake128
8.259.129.12T:blake2s
9.859.859.85T:keccakc448
10.0910.1310.17sha3224
10.3610.4210.59sha224
10.5510.5610.58T:keccakc512
10.5610.5610.56T:blake32
10.8110.8510.87shake256
10.8310.8510.86sha3256
11.2711.2911.31T:keccak
11.3211.3311.33sha256
13.4813.4913.51blake256
13.9513.9814.01T:bblake256
14.0714.0714.15T:keccakc768
14.3714.4114.46sha3384
19.7019.7319.79T:keccakc1024
20.0620.0920.14sha3512
23.9924.1124.32T:groestl256
33.2733.3436.42T:jh512
33.2633.3534.02T:jh384
33.3033.3833.97T:jh256
34.7334.7335.16T:jh224
38.9939.0742.04T:round3jh512
38.9339.0842.15T:round3jh256
36.94?45.98?53.09?T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
4.564.564.56T:blake2b
4.864.864.87T:k12
5.255.255.26T:skein512256
5.265.265.26T:skein512512
7.147.187.18T:skein10241024
7.777.777.77T:blake64
7.867.867.86T:skein256256
8.188.198.31sha512
8.238.238.28sha384
8.478.478.48blake512
8.688.908.90T:blake2s
9.109.109.11shake128
10.2710.2710.27T:keccakc448
10.4910.5010.51sha3224
10.7710.7710.77T:blake32
10.9810.9810.98T:keccakc512
11.2211.2211.23sha3256
11.2111.2211.23shake256
11.3811.4011.47sha224
11.5311.5311.53sha256
11.7011.7011.71T:keccak
13.7413.7413.75blake256
14.1314.1314.17T:keccakc768
14.4214.4214.45sha3384
15.3715.3815.39T:bblake256
20.1220.1420.17T:keccakc1024
20.4720.4720.49sha3512
24.6124.6624.76T:groestl256
33.8533.8735.41T:jh512
33.8733.8834.22T:jh384
33.9033.9234.21T:jh256
35.3835.3835.59T:jh224
39.6739.7041.21T:round3jh256
39.6839.7041.16T:round3jh512
44.50?46.30?49.72?T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
4.634.634.63T:blake2b
5.325.325.32T:k12
5.445.445.44T:skein512512
5.445.445.44T:skein512256
7.637.677.67T:skein10241024
8.038.038.04T:skein256256
8.268.268.26T:blake64
8.688.689.26T:blake2s
8.728.738.85sha512
8.958.958.99blake512
9.729.739.73shake128
9.879.879.88sha384
10.5010.5010.50T:keccakc448
10.6310.6510.65sha3224
11.1211.1211.13T:blake32
11.4311.4311.45T:keccakc512
11.6011.6011.61sha3256
11.5911.6111.61shake256
11.8711.8711.89sha256
12.3812.3812.40T:keccak
13.0313.0613.11sha224
14.1714.1714.17blake256
14.2314.2314.23T:keccakc768
14.4414.4514.47sha3384
17.7217.7317.74T:bblake256
20.8020.8220.82T:keccakc1024
21.1021.1021.11sha3512
25.6125.6225.63T:groestl256
34.7634.7634.79T:jh512
34.7734.7734.78T:jh384
34.8034.8334.83T:jh256
36.4636.4637.03T:jh224
40.7140.7140.77T:round3jh512
40.6940.7440.84T:round3jh256
47.92?47.96?53.78?T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
0.00?4.63?6.17?T:blake2b
5.935.935.93T:skein512256
5.945.945.94T:skein512512
5.975.986.00T:k12
8.478.478.50T:skein256256
8.698.698.72T:blake64
7.72?9.26?9.26?T:blake2s
9.399.399.39blake512
9.519.519.65sha512
9.709.749.75T:skein10241024
10.4110.4210.45shake128
12.0212.0212.08T:blake32
12.7712.7712.77sha256
12.8612.8712.88sha3224
12.9012.9012.99sha3256
12.9312.9312.97shake256
12.9512.9513.01T:keccakc448
12.9812.9812.98T:keccakc512
13.0013.0113.01T:keccak
13.4513.5013.78sha384
15.2715.3015.36blake256
15.4315.4315.46sha3384
15.4515.4615.46T:keccakc768
16.8316.9016.96sha224
22.9422.9522.99T:keccakc1024
23.0823.0823.09sha3512
24.0224.0224.02T:bblake256
28.3528.3628.38T:groestl256
37.1737.1737.17T:jh512
37.1637.1837.18T:jh384
37.1937.2037.22T:jh256
38.5938.5940.13T:jh224
43.5143.5143.56T:round3jh512
43.5043.5443.61T:round3jh256
52.23?52.38?58.75?T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
11.8911.8911.89T:skein512256
11.9511.9511.95T:skein512512
0.00?13.89?13.89?T:blake2b
0.00?13.89?13.89?T:blake2s
14.1114.2514.25T:skein256256
17.1717.3317.48T:k12
17.7817.7817.83T:blake64
18.9418.9418.94blake512
20.7320.8321.00sha512
23.5823.5823.62sha3384
23.5923.5923.91sha3256
23.6223.6223.67sha3224
23.6923.7023.70T:blake32
23.8323.8323.83shake256
23.9723.9724.00shake128
23.9824.0224.02sha3512
24.0524.0524.08sha256
26.3626.3826.41T:keccakc1024
26.5226.5226.52T:keccakc512
26.5226.5226.53T:keccakc768
26.5226.5326.53T:keccakc448
26.7226.7226.78T:keccak
29.5329.5329.53blake256
31.5331.6731.67T:skein10241024
62.3862.9163.19sha384
62.9563.0063.33T:groestl256
67.6267.6768.17T:jh384
67.7867.8068.53T:jh256
67.8067.8068.53T:jh512
68.4569.1169.97sha224
69.4569.4569.45T:jh224
78.9879.0379.05T:round3jh256
79.1279.5079.94T:round3jh512
104.14104.16104.58T:bblake256
130.00?130.08?150.53?T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
80.7581.1281.12T:skein256256
94.2594.2594.25T:skein512256
94.7594.7594.88T:skein512512
103.12103.25103.62T:blake32
103.25103.25103.25sha256
0.00?111.12?111.12?T:blake2b
0.00?111.12?111.12?T:blake2s
126.25126.25126.50blake256
136.38138.25139.88T:k12
144.00144.00147.00T:blake64
151.00151.25153.38sha512
156.50164.25164.25blake512
187.00187.00188.12sha3384
187.12187.12187.12sha3256
186.50187.62187.62sha3224
188.62189.00189.00shake256
189.62189.62189.62shake128
190.38191.00191.00sha3512
211.88212.12213.00T:keccakc1024
212.38213.12215.25T:keccakc768
213.88214.12214.75T:keccakc512
214.25214.50214.88T:keccakc448
214.88215.12215.62T:keccak
253.75253.75253.75T:skein10241024
314.50314.75317.38T:groestl256
463.12465.38478.00sha224
502.50503.62508.00sha384
542.50542.50542.50T:jh384
542.62542.62543.25T:jh256
542.75542.75542.75T:jh512
555.62555.62555.62T:jh224
633.12633.25634.88T:round3jh512
633.25633.25633.25T:round3jh256
723.75726.25756.88T:bblake256
1037.00?1042.12?1207.62?T:groestl512