VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20260217

[Page version: 20260315 18:26:23]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 3.06 3.08 3.09 T:blake2b 3.94 3.96 3.98 T:k12 4.94 4.96 4.99 T:keccakc256treed2 5.14 5.20 5.29 sha384 5.25? 5.30? 6.55? sha512 5.22 5.31 5.50 T:bblake256 5.34 5.34 5.36 T:blake2s 5.42 5.45 5.49 T:skein512256 5.40 5.47 5.51 T:skein512512 5.78 5.82 5.87 T:blake64 5.85 5.90 5.97 blake512 6.57 6.59 6.60 T:blake32 6.59 6.61 6.64 T:keccakc512treed2 6.91 6.93 7.01 shake128 4.64? 7.61? 10.47? T:skein10241024 7.57 7.61 7.63 blake256 4.62? 7.74? 7.85? sha224 7.70 7.77 7.84 sha256 7.73 7.77 7.81 T:skein256256 8.34 8.37 8.46 T:keccakc448 8.41 8.47 8.58 sha3224 8.63 8.66 8.70 sha3256 8.64 8.67 8.91 shake256 8.87 8.91 8.98 T:keccakc512 9.00 9.03 9.07 T:groestl256 9.81 9.91 9.98 T:keccak 11.43 11.85 11.91 sha3384 11.98 12.05 12.07 T:keccakc768 13.00 13.05 13.12 T:groestl512 13.10 13.15 13.20 T:jh224 13.09 13.15 13.21 T:jh512 13.09 13.15 13.20 T:jh256 13.10 13.18 13.24 T:jh384 14.79 14.84 14.91 T:round3jh512 14.77 14.88 15.04 T:round3jh256 16.47 16.52 16.61 sha3512 16.80 16.85 16.88 T:keccakc1024

Cycles/byte for 4096 bytes 25% 50% 75% hash 3.09 3.09 3.10 T:blake2b 4.15 4.16 4.17 T:k12 5.34 5.35 5.35 T:blake2s 5.49? 5.50? 6.12? sha512 5.54 5.55 5.56 T:skein512256 5.54 5.57 5.58 T:skein512512 5.85 5.85 5.86 T:keccakc256treed2 5.87 5.89 5.96 T:bblake256 5.92 5.93 5.97 sha384 6.04 6.05 6.06 T:blake64 6.09 6.11 6.13 blake512 6.70 6.70 6.71 T:blake32 7.09 7.10 7.10 T:keccakc512treed2 7.25 7.26 7.29 shake128 7.73 7.73 7.74 blake256 7.85 7.85 7.86 T:skein256256 7.75? 7.89? 9.26? T:skein10241024 8.37 8.38 8.41 sha224 8.38 8.40 8.42 sha256 8.70 8.71 8.75 T:keccakc448 8.77 8.79 8.81 sha3224 8.97 8.98 8.99 sha3256 8.97 8.98 9.09 shake256 9.25 9.26 9.29 T:keccakc512 9.40 9.41 9.42 T:groestl256 10.24 10.25 10.27 T:keccak 11.85 11.87 11.89 sha3384 12.03 12.05 12.06 T:keccakc768 13.35 13.36 13.38 T:jh512 13.36 13.37 13.39 T:jh256 13.36 13.38 13.39 T:jh224 13.37 13.40 13.42 T:jh384 13.73 13.75 13.78 T:groestl512 15.12 15.14 15.16 T:round3jh512 15.14 15.17 15.22 T:round3jh256 16.79 16.81 16.84 sha3512 17.13 17.13 17.14 T:keccakc1024

Cycles/byte for 1536 bytes 25% 50% 75% hash 3.10 3.11 3.12 T:blake2b 4.50 4.50 4.51 T:k12 5.34 5.35 5.35 T:blake2s 5.70 5.72 5.74 T:skein512256 5.72 5.73 5.76 T:skein512512 5.79 5.82 5.88 sha512 6.39 6.42 6.45 T:blake64 6.41 6.43 6.45 blake512 6.78 6.79 6.81 T:keccakc256treed2 6.77 6.81 6.87 T:bblake256 6.93 6.93 6.94 T:blake32 7.09 7.12 7.14 sha384 7.80? 7.82? 10.50? shake128 7.88 7.88 7.89 T:keccakc512treed2 7.96 7.96 7.97 blake256 7.97 8.00 8.01 T:skein256256 8.16 8.22 8.34 T:skein10241024 8.86 8.89 8.90 T:keccakc448 8.89 8.92 8.96 sha3224 9.29 9.30 9.32 sha3256 9.32 9.35 9.44 shake256 9.37 9.40 9.42 sha224 9.39 9.45 9.49 sha256 9.64 9.67 9.71 T:keccakc512 9.98 10.01 10.03 T:groestl256 10.80 10.84 10.89 T:keccak 11.88 11.90 11.92 sha3384 12.09 12.11 12.11 T:keccakc768 13.70 13.73 13.76 T:jh512 13.71 13.74 13.76 T:jh256 13.72 13.74 13.76 T:jh224 13.75 13.76 13.79 T:jh384 14.93 14.94 14.97 T:groestl512 15.57 15.61 15.65 T:round3jh512 15.56 15.62 15.65 T:round3jh256 17.28 17.30 17.32 sha3512 17.64 17.67 17.69 T:keccakc1024

Cycles/byte for 576 bytes 25% 50% 75% hash 3.50 3.51 3.52 T:blake2b 4.98 4.99 5.02 T:k12 5.34? 5.35? 7.20? T:blake2s 6.21 6.24 6.29 T:skein512512 6.19? 6.26? 8.37? T:skein512256 6.30 6.33 6.39 sha512 6.66 6.68 6.76 T:blake64 6.68 6.70 6.73 blake512 7.58? 8.01? 9.87? T:blake32 8.35 8.37 8.42 T:skein256256 8.46 8.48 8.52 shake128 8.54 8.57 8.61 blake256 9.31 9.32 9.34 T:keccakc256treed2 9.53 9.59 9.63 T:bblake256 9.56 9.59 9.62 sha384 10.27 10.35 10.42 T:skein10241024 10.41? 10.45? 14.05? sha3256 10.46 10.48 10.51 shake256 10.83 10.86 10.94 T:keccakc448 10.85 10.88 10.93 T:keccakc512 10.86 10.91 10.97 sha3224 11.07 11.10 11.17 T:keccak 11.46 11.49 11.52 T:groestl256 12.05? 12.15? 16.36? sha224 12.19 12.21 12.24 T:keccakc512treed2 12.30? 12.46? 16.43? sha256 12.74 12.77 12.81 sha3384 13.03 13.08 13.11 T:keccakc768 14.66 14.68 14.72 T:jh224 14.65 14.69 14.74 T:jh512 14.66 14.71 14.74 T:jh256 14.66 14.71 14.74 T:jh384 16.72 16.78 16.85 T:round3jh256 16.71 16.78 16.88 T:round3jh512 16.80 16.85 16.89 T:groestl512 18.91 18.97 19.92 sha3512 19.31 19.36 19.43 T:keccakc1024

Cycles/byte for 64 bytes 25% 50% 75% hash 5.29 5.34 5.40 T:blake2s 6.67 6.76 7.09 T:blake2b 11.97 12.10 12.21 T:skein512256 12.07 12.23 12.70 T:skein512512 13.07 13.24 13.37 T:skein256256 13.14 13.26 13.58 T:k12 13.22 13.30 13.41 blake512 13.29 13.44 13.90 T:blake64 13.56 13.68 13.80 sha512 15.31? 16.04? 18.81? T:blake32 16.44 16.50 16.69 blake256 19.53 19.66 19.87 sha3256 19.62 19.76 20.09 sha3384 19.65 19.78 20.03 sha3512 20.36 20.46 20.72 shake128 20.05? 20.47? 27.18? shake256 20.27 20.48 20.82 sha3224 20.53 20.78 21.48 T:keccak 21.12 21.19 21.38 T:keccakc512 21.18 21.23 21.41 T:keccakc1024 21.16 21.24 21.49 T:keccakc448 21.28 21.34 21.54 T:keccakc768 26.85 26.98 27.28 T:jh512 27.04 27.24 27.40 T:jh256 26.91 27.29 28.60 T:jh384 26.86? 27.53? 36.68? T:jh224 30.39 30.46 30.79 T:groestl256 31.33 31.52 31.65 T:round3jh256 31.39 31.98 32.93 T:round3jh512 32.93 33.13 33.43 T:skein10241024 42.91 43.09 43.27 sha384 43.43 43.76 44.09 T:bblake256 45.48 45.64 45.86 sha224 45.54 45.85 47.20 sha256 46.87 47.13 47.58 T:groestl512 57.11 57.26 57.38 T:keccakc512treed2 57.23 57.37 57.49 T:keccakc256treed2

Cycles/byte for 8 bytes 25% 50% 75% hash 47.12 47.50 47.67 T:blake2s 52.79 53.04 53.96 T:blake2b 71.29 72.58 76.33 blake256 73.04 73.96 75.25 T:skein256256 76.12? 78.88? 104.76? T:blake32 95.29 96.25 97.71 T:skein512256 97.46 98.00 99.17 sha512 96.79 98.50 102.58 T:skein512512 103.92 105.04 107.96 T:k12 106.12 106.92 110.62 blake512 107.12 109.67 113.71 T:blake64 155.08 156.21 158.46 sha3256 155.79 156.62 158.38 sha3224 155.50 156.83 158.54 sha3384 155.96 157.33 158.79 sha3512 159.50? 161.33? 216.54? shake256 161.67 163.17 165.00 shake128 164.67 167.54 171.54 T:keccak 169.46 170.04 172.12 T:keccakc512 169.79 170.21 172.00 T:keccakc1024 169.71 170.96 172.62 T:keccakc448 170.67 171.00 172.50 T:keccakc768 173.54 174.25 177.92 T:groestl256 218.08 219.25 220.29 T:jh512 218.62 219.75 221.12 T:jh256 218.88 221.58 232.46 T:jh384 219.12? 221.92? 300.23? T:jh224 256.96 258.46 258.92 T:round3jh512 256.29 259.88 261.71 T:round3jh256 262.50 264.54 266.88 T:skein10241024 287.62 290.25 295.12 T:bblake256 292.17 293.96 296.42 sha224 293.58 294.67 296.71 sha256 347.46 348.71 349.58 sha384 359.83 362.12 365.58 T:groestl512 457.17 458.46 459.83 T:keccakc512treed2 457.54 458.54 459.92 T:keccakc256treed2