VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20251222

[Page version: 20260315 18:26:23]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.015.025.03T:blake2b
5.295.315.32T:k12
5.955.955.97T:skein512512
5.955.965.97T:skein512256
6.216.216.22T:skein256256
7.337.347.37T:blake64
7.507.537.56blake512
8.248.248.24T:blake2s
9.329.379.49sha384
9.329.409.51sha512
9.679.699.72T:skein10241024
10.2410.2510.26shake128
10.8710.8810.88T:blake32
11.5911.6011.61T:keccakc448
11.9211.9411.96sha3224
12.3712.3812.40T:keccakc512
12.7512.7612.76shake256
12.7612.7712.78sha3256
13.2913.3113.32T:keccak
13.5013.5413.56blake256
13.7513.8013.84T:bblake256
14.5014.6614.83sha224
14.4714.6614.84sha256
16.6216.6416.68T:keccakc768
16.9616.9616.97sha3384
23.2523.2623.27T:keccakc1024
23.6423.6423.64sha3512
33.0933.7234.73T:groestl256
36.5236.5436.56T:jh512
36.5436.5536.56T:jh224
36.5336.5536.58T:jh384
36.5436.5536.62T:jh256
42.3942.4142.44T:round3jh512
42.4042.4442.47T:round3jh256
53.6853.7353.85T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
5.055.055.05T:blake2b
5.595.605.61T:k12
6.096.096.10T:skein512512
6.096.106.10T:skein512256
6.316.316.31T:skein256256
7.637.637.64T:blake64
7.847.847.85blake512
8.278.278.27T:blake2s
10.0910.0910.10T:skein10241024
10.2810.2910.34sha384
10.3010.3210.37sha512
10.7010.7010.70shake128
11.1011.1011.10T:blake32
12.1012.1012.11T:keccakc448
12.3812.3812.39sha3224
12.8912.8912.89T:keccakc512
13.2113.2113.21shake256
13.2213.2213.22sha3256
13.7913.8013.80T:keccak
13.7913.8113.81blake256
15.2715.2715.29T:bblake256
15.5015.5015.59sha224
15.5015.5115.60sha256
16.7316.7316.74T:keccakc768
16.9916.9916.99sha3384
23.7623.7623.76T:keccakc1024
24.0824.0824.09sha3512
34.8634.9135.37T:groestl256
37.1337.1437.14T:jh512
37.1337.1437.15T:jh384
37.1337.1437.17T:jh256
37.1437.1437.15T:jh224
43.1043.1043.11T:round3jh512
43.1043.1243.12T:round3jh256
56.3556.3756.39T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
5.085.095.10T:blake2b
6.086.096.11T:k12
6.326.326.33T:skein512512
6.326.336.33T:skein512256
6.476.476.47T:skein256256
8.118.118.12T:blake64
8.318.318.31T:blake2s
8.368.368.38blake512
10.7610.7610.77T:skein10241024
11.4511.4511.45shake128
11.4711.4811.49T:blake32
11.8311.8411.95sha384
11.8811.8811.90sha512
12.3812.3812.39T:keccakc448
12.5512.5512.57sha3224
13.4313.4313.44T:keccakc512
13.6713.6813.68shake256
13.6713.6813.68sha3256
14.2514.2614.26blake256
14.6014.6014.61T:keccak
16.8616.8716.87T:keccakc768
16.9116.9116.93sha256
16.9116.9316.96sha224
17.0217.0317.03sha3384
17.7217.7317.79T:bblake256
24.5824.5924.60T:keccakc1024
24.8224.8224.83sha3512
36.7636.9137.44T:groestl256
38.1138.1238.12T:jh384
38.1138.1238.13T:jh256
38.1138.1238.15T:jh512
38.1338.1338.14T:jh224
44.2344.2544.26T:round3jh512
44.2444.2544.26T:round3jh256
60.6660.6960.70T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
5.705.705.70T:blake2b
6.846.866.94T:k12
6.896.906.90T:skein256256
6.906.906.90T:skein512256
6.916.916.91T:skein512512
8.428.428.42T:blake2s
8.598.598.60T:blake64
8.928.928.95blake512
12.3312.3512.37shake128
12.5012.5012.51T:blake32
13.6813.6913.71T:skein10241024
14.9515.0315.09sha384
15.1915.2115.46sha512
15.2515.2515.25T:keccakc512
15.2615.2615.28sha3224
15.2715.2815.29sha3256
15.2815.2815.31T:keccak
15.2815.2915.29T:keccakc448
15.3115.3115.33shake256
15.4515.4615.47blake256
18.2518.2518.27sha3384
18.3018.3018.32T:keccakc768
20.5920.6320.65sha224
20.6420.6920.72sha256
24.2424.2824.43T:bblake256
27.0727.0927.13T:keccakc1024
27.1527.1627.18sha3512
40.7240.7340.75T:jh256
40.7240.7340.74T:jh384
40.7240.7340.76T:jh512
40.7740.7840.79T:jh224
41.7041.8842.81T:groestl256
47.2447.2747.37T:round3jh256
47.2747.2847.29T:round3jh512
66.2766.3066.32T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
9.949.949.95T:blake2s
10.9710.9711.13T:blake2b
12.0812.1112.26T:skein256256
14.1214.1214.12T:skein512256
14.1914.1914.20T:skein512512
17.7117.7518.06T:blake64
18.6118.6319.11T:k12
20.0620.0620.06blake512
25.2125.2725.48T:blake32
28.1328.1728.48sha3224
28.2028.2428.60sha3384
28.2428.2728.67sha3256
28.2528.2828.64sha3512
28.6328.6528.99shake256
28.7328.7429.08shake128
30.4030.4230.48T:keccak
30.4230.4430.47T:keccakc1024
30.6330.6430.77blake256
30.8330.8831.16T:keccakc768
31.1631.2131.45T:keccakc448
31.0831.2831.34T:keccakc512
44.3644.4444.44T:skein10241024
58.9859.3959.76sha384
60.7561.1561.37sha512
67.8467.9868.31sha224
68.4068.8969.54sha256
73.9773.9974.45T:jh384
73.9374.0274.47T:jh256
73.9674.0574.50T:jh512
74.4174.4774.94T:jh224
85.6385.7186.10T:round3jh256
85.7485.7986.14T:round3jh512
105.89106.64108.82T:groestl256
107.44107.96109.36T:bblake256
164.53164.66164.91T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
69.4169.7670.12T:skein256256
73.0073.0073.00T:blake2s
86.8886.9788.89T:blake2b
110.75110.99111.96T:blake32
111.62111.64113.81T:skein512256
112.00112.33113.74T:skein512512
139.12139.12139.12blake256
143.12143.22144.07T:blake64
148.00148.23149.81T:k12
160.38160.38160.38blake512
225.09225.13227.47sha3256
225.17225.25228.25sha3224
225.10225.26228.00sha3384
225.46225.50227.74sha3512
228.88228.99230.82shake128
228.60229.00230.63shake256
243.95244.36245.91T:keccak
245.41246.56247.59T:keccakc1024
247.71249.01252.78T:keccakc512
249.62249.66254.12T:keccakc448
250.15252.04252.26T:keccakc768
353.63355.16356.79T:skein10241024
422.67423.68424.85sha224
423.34423.74424.49sha256
472.15475.82482.83sha384
486.65488.47490.26sha512
575.73592.72604.48T:groestl256
594.12594.28595.83T:jh256
594.55594.77596.18T:jh512
594.69594.86595.80T:jh384
596.53597.44598.95T:jh224
687.39687.67689.03T:round3jh256
688.38688.45689.09T:round3jh512
753.16756.91763.55T:bblake256
1319.261320.001320.12T:groestl512