VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20260217

[Page version: 20260315 18:26:23]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
2.012.022.04sha224
3.013.033.05T:k12
3.413.433.45T:blake2b
3.843.853.87T:keccakc256treed2
4.214.234.27sha512
4.224.244.25sha384
4.424.424.43T:skein512256
4.444.454.45T:skein512512
4.514.564.60T:blake64
4.594.614.63T:bblake256
5.115.135.14T:keccakc512treed2
5.115.145.17blake512
5.255.265.28T:blake2s
5.415.465.55shake128
5.625.635.63T:skein10241024
5.695.705.71T:skein256256
6.186.286.41T:keccakc448
6.346.356.37sha3224
6.406.476.65T:blake32
6.696.716.74T:groestl256
6.766.776.79sha3256
6.706.776.82T:keccakc512
6.806.826.87shake256
7.107.127.14T:keccak
7.517.527.53blake256
8.858.928.97T:keccakc768
8.999.029.04sha3384
9.459.499.53T:groestl512
10.4910.5210.55T:jh224
10.5010.5310.57T:jh384
10.4310.5310.70T:jh256
10.4210.5510.70T:jh512
12.4212.4612.55T:keccakc1024
12.4612.4812.51T:round3jh512
12.4512.4912.52T:round3jh256
12.5512.5712.65sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
2.342.342.35sha224
3.213.213.22T:k12
3.423.423.43T:blake2b
4.524.524.52T:skein512256
4.524.534.53T:keccakc256treed2
4.554.554.55T:skein512512
4.724.724.72sha384
4.724.734.74sha512
4.734.754.76T:blake64
5.175.185.18T:bblake256
5.255.265.26T:blake2s
5.315.325.33blake512
5.485.495.49T:keccakc512treed2
5.725.725.75shake128
5.785.785.78T:skein256256
5.855.855.85T:skein10241024
6.576.586.67T:blake32
6.596.596.60sha3224
6.586.606.65T:keccakc448
7.007.017.01T:groestl256
7.027.027.03sha3256
7.007.037.04T:keccakc512
7.047.047.06shake256
7.377.377.38T:keccak
7.647.647.65blake256
8.938.958.97T:keccakc768
9.049.059.05sha3384
10.0010.0110.03T:groestl512
10.7010.7110.72T:jh224
10.7010.7110.72T:jh384
10.7010.7210.79T:jh256
10.7010.7210.79T:jh512
12.6812.6812.69T:round3jh512
12.6812.6912.70T:round3jh256
12.6912.7012.74T:keccakc1024
12.8212.8212.86sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
2.142.142.14sha256
2.892.892.90sha224
3.403.413.42T:blake2b
3.493.503.50T:k12
4.684.684.68T:skein512256
4.704.704.70T:skein512512
5.015.025.10T:blake64
5.225.235.23T:keccakc256treed2
5.255.255.26T:blake2s
5.535.545.57sha384
5.535.545.56sha512
5.605.625.64blake512
5.915.915.92T:skein256256
6.086.086.09T:keccakc512treed2
6.106.116.18shake128
6.116.126.14T:bblake256
6.206.206.21T:skein10241024
6.686.696.69sha3224
6.776.806.89T:blake32
6.806.816.84T:keccakc448
7.227.257.29T:keccakc512
7.277.287.29shake256
7.277.287.29sha3256
7.487.507.51T:groestl256
7.787.797.79T:keccak
7.847.857.85blake256
8.978.999.01T:keccakc768
9.089.089.10sha3384
10.8810.8910.91T:groestl512
11.0011.0111.03T:jh384
11.0011.0211.03T:jh224
11.0111.0311.10T:jh512
11.0011.0311.10T:jh256
13.0213.0313.05T:round3jh512
13.0213.0313.04T:round3jh256
13.1013.1313.18T:keccakc1024
13.2313.2413.25sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.342.342.34sha256
3.753.773.81T:blake2b
3.983.994.01T:k12
4.344.354.37sha224
5.105.115.11T:skein512256
5.125.125.12T:skein512512
5.225.235.24T:blake2s
5.375.565.64T:blake64
5.815.855.88blake512
6.286.286.28T:skein256256
6.546.556.70shake128
7.087.097.11T:keccakc256treed2
7.297.307.34sha384
7.337.367.44sha512
7.367.377.38T:blake32
7.857.857.85T:skein10241024
8.118.128.13sha3256
8.118.128.13shake256
8.078.128.33T:keccakc512
8.128.138.14sha3224
8.138.148.17T:keccak
8.128.328.51T:keccakc448
8.378.388.40blake256
8.808.818.84T:groestl256
8.968.999.02T:bblake256
9.369.389.57T:keccakc512treed2
9.609.639.75T:keccakc768
9.719.749.75sha3384
11.7811.8111.85T:jh384
11.8111.8411.90T:jh512
11.8111.8411.86T:jh224
11.8111.8511.93T:jh256
12.5712.5912.62T:groestl512
13.9213.9513.97T:round3jh256
13.9413.9513.99T:round3jh512
14.3714.4014.45T:keccakc1024
14.4514.4614.49sha3512
Cycles/byte for 64 bytes
25%50%75%hash
4.814.834.87sha256
5.015.055.08T:blake2s
7.107.157.24T:blake2b
10.2010.2010.20T:skein512512
10.2910.3010.39T:skein512256
10.9210.9310.95T:skein256256
11.2911.4011.49blake512
11.9011.9112.06T:k12
11.8811.9412.45T:blake64
14.9314.9915.15T:blake32
15.1715.1915.26sha3256
15.1715.2015.28sha3512
15.2015.2015.30sha3384
15.2115.2515.31sha3224
15.1815.2615.47T:keccakc768
15.2315.2715.42T:keccakc512
15.2415.3015.38blake256
15.2315.3215.42shake256
15.2815.3716.58shake128
15.24?15.76?21.34?T:keccakc1024
16.2216.4117.43T:keccak
15.53?16.43?17.31?T:keccakc448
21.9922.1022.23T:jh256
22.0322.1322.23T:jh384
22.0022.1522.38T:jh224
22.0822.1522.20T:jh512
22.8422.9823.36sha224
25.3725.4125.44T:skein10241024
25.5725.6525.79T:round3jh256
25.6125.6625.73T:groestl256
25.6125.7725.91T:round3jh512
30.8431.0231.53sha384
31.8632.0232.45sha512
37.2937.4137.54T:groestl512
43.0743.2043.31T:keccakc512treed2
43.2543.4643.66T:bblake256
43.5243.7244.48T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
24.1224.1824.25sha256
46.4046.5946.88T:blake2s
57.8858.5459.35T:blake2b
65.5165.9768.05T:blake32
67.2167.3867.50T:skein256256
68.4968.9269.33blake256
81.4281.5382.06T:skein512512
82.3882.3883.29T:skein512256
90.8091.8293.21blake512
94.3994.5295.73T:k12
96.5297.09101.71T:blake64
120.56121.22121.52sha3256
120.75121.23131.04shake128
121.20121.25121.71sha3224
121.04121.29122.22sha3512
121.18121.49122.67shake256
121.32121.62124.76T:keccakc1024
121.12121.72122.90sha3384
121.94123.94130.33T:keccakc768
122.48124.85135.29T:keccakc512
127.93133.74138.20T:keccakc448
133.28?142.48?182.48?T:keccak
151.01152.01152.74T:groestl256
171.61174.25179.00sha224
177.61178.41180.01T:jh224
177.54178.74180.80T:jh256
177.75178.77179.55T:jh512
178.10179.21180.41T:jh384
204.32204.46205.36T:skein10241024
207.73208.76209.86T:round3jh256
208.25209.12210.00T:round3jh512
248.55252.60259.28sha384
253.75255.22257.67sha512
270.20271.05272.04T:groestl512
287.01288.31289.83T:bblake256
345.57348.81350.78T:keccakc512treed2
348.55349.95354.86T:keccakc256treed2