VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20250922

[Page version: 20251015 23:19:38]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
6.086.136.13T:blake2b
7.968.008.02T:k12
9.009.009.01T:skein256256
9.039.039.03T:skein512256
9.039.039.03T:skein512512
8.33?9.67?12.19?T:blake64
10.2010.2010.20T:blake2s
10.4510.5110.56blake512
14.0514.3615.07T:blake32
15.0015.0715.25T:skein10241024
15.1815.2015.25shake128
16.8916.9016.92sha512
16.9817.0917.20T:keccakc448
17.6717.6817.71sha3224
18.1118.3318.61T:keccakc512
18.3118.4518.53blake256
18.9118.9318.95sha3256
18.9018.9318.96shake256
18.9218.9518.97T:bblake256
19.2419.4819.78T:keccak
20.8820.9621.08T:keccakc256treed2
24.3024.4124.48T:keccakc768
24.6424.6624.67sha256
25.1525.1725.18sha3384
27.8227.8427.87T:keccakc512treed2
34.0334.1334.16T:keccakc1024
35.0935.1135.14sha3512
46.5546.9847.06T:groestl256
48.0148.0348.05T:jh256
48.0248.0348.05T:jh512
48.0248.0348.06T:jh224
48.0148.0448.06T:jh384
56.8256.8356.84T:round3jh256
56.8156.8356.84T:round3jh512
66.9867.0567.56T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
6.156.176.17T:blake2b
8.438.448.44T:k12
9.169.169.16T:skein256256
9.269.269.26T:skein512256
9.279.279.27T:skein512512
10.03?10.09?11.31?T:blake64
10.2610.2610.26T:blake2s
10.9610.9811.00blake512
14.7214.7315.08T:blake32
15.7315.7315.81T:skein10241024
15.8815.8915.90shake128
17.5017.5017.50sha512
17.8717.9217.92T:keccakc448
18.3418.3418.36sha3224
18.8218.8318.87blake256
19.1219.1719.25T:keccakc512
19.5919.6019.60sha3256
19.6119.6219.62shake256
20.2820.3020.41T:keccak
20.9020.9020.91T:bblake256
24.5524.5824.59T:keccakc768
24.6324.6424.69T:keccakc256treed2
25.1325.1325.14sha256
25.2025.2025.21sha3384
29.7529.7529.76T:keccakc512treed2
34.9034.9134.92T:keccakc1024
35.7935.7935.80sha3512
48.1748.1748.21T:groestl256
48.8248.8248.83T:jh512
48.8248.8248.83T:jh224
48.8248.8248.83T:jh256
48.8248.8248.83T:jh384
57.7557.7557.76T:round3jh256
57.7657.7657.76T:round3jh512
70.4170.4370.58T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
6.246.246.25T:blake2b
9.159.169.18T:k12
9.419.429.42T:skein256256
9.639.639.66T:skein512256
9.649.649.65T:skein512512
10.3110.3510.35T:blake2s
10.68?10.75?12.01?T:blake64
11.7111.7311.78blake512
15.3315.3515.62T:blake32
16.8016.8116.81T:skein10241024
17.0017.0317.03shake128
18.4818.4818.49sha512
18.3618.6418.65T:keccakc448
18.6218.6518.70sha3224
19.4419.4619.53blake256
20.1120.1820.29T:keccakc512
20.2720.2820.29sha3256
20.3120.3520.35shake256
21.5921.6421.92T:keccak
24.1724.1924.20T:bblake256
24.8524.8824.95T:keccakc768
25.2625.2625.27sha3384
25.9225.9325.94sha256
28.4528.4628.53T:keccakc256treed2
32.9132.9532.95T:keccakc512treed2
36.2036.2036.27T:keccakc1024
36.9236.9336.93sha3512
50.1350.1350.14T:jh256
50.1350.1350.14T:jh224
50.1350.1450.15T:jh384
50.1350.1450.15T:jh512
50.1150.1450.20T:groestl256
59.2959.3059.31T:round3jh256
59.3159.3159.32T:round3jh512
76.0576.2176.36T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
7.047.047.04T:blake2b
10.0810.1010.10T:skein256256
10.1710.2010.24T:k12
10.4810.4810.48T:blake2s
10.6210.6210.63T:skein512256
10.6610.6610.67T:skein512512
11.44?11.49?12.77?T:blake64
12.6512.6512.65blake512
17.0217.0417.08T:blake32
18.3118.4018.40shake128
19.3019.3019.31sha512
21.1221.1421.39blake256
21.4521.4521.45T:skein10241024
22.6422.6422.70sha3256
22.6422.6522.68sha3224
22.8022.8522.97shake256
22.8923.0823.88T:keccak
22.8223.1723.19T:keccakc448
22.8823.3223.58T:keccakc512
27.0727.0727.07sha3384
27.0927.4127.53T:keccakc768
28.0228.0228.08sha256
32.9032.9233.06T:bblake256
38.5638.6738.73T:keccakc256treed2
40.0740.1040.14T:keccakc1024
40.4740.5040.53sha3512
50.5450.6450.64T:keccakc512treed2
53.6253.6453.69T:jh224
53.6253.6553.70T:jh256
53.6253.6553.68T:jh384
53.6253.6553.67T:jh512
55.3855.4255.43T:groestl256
63.4063.4063.43T:round3jh256
63.4463.4563.50T:round3jh512
83.5683.7183.81T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
12.6112.6612.67T:blake2s
14.7314.7314.73T:blake2b
18.6718.6918.92T:skein256256
22.6922.7022.72T:skein512256
23.0023.0623.20T:skein512512
24.6724.8126.84T:blake64
27.4827.4828.33T:k12
29.8829.8829.88blake512
36.0937.6638.56T:blake32
37.7037.7037.70sha512
42.1942.1942.98sha3384
42.2542.2542.94sha3256
42.2542.3142.78sha3224
42.3342.5945.97blake256
43.0943.0943.72shake256
43.1943.1943.47shake128
43.0943.4143.81sha3512
47.8848.1448.39T:keccakc1024
46.9149.4250.58T:keccakc768
48.17?49.62?56.28?T:keccak
48.1751.0651.09T:keccakc448
48.50?51.19?54.44?T:keccakc512
57.1957.1957.47sha256
70.3970.3970.39T:skein10241024
98.0398.0399.03T:jh384
98.0698.0699.06T:jh512
98.0998.0999.09T:jh224
98.0298.2899.02T:jh256
115.64115.86116.38T:round3jh256
116.16116.44116.70T:round3jh512
122.84122.98123.81T:groestl256
144.44144.53144.62T:bblake256
212.03212.05214.56T:groestl512
232.09232.94232.94T:keccakc512treed2
233.69233.81235.92T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
98.5098.5098.88T:blake2s
109.62110.00111.75T:skein256256
115.50115.50115.50T:blake2b
162.12166.75169.25T:blake32
179.38179.38179.38T:skein512256
180.12180.12180.88T:skein512512
188.00189.50204.50blake256
199.62?201.25?235.50?T:blake64
218.38218.38220.88T:k12
239.00239.00239.00blake512
247.00247.00247.62sha256
302.50302.62303.62sha512
335.00335.00335.50sha3384
337.00337.00337.00sha3256
337.00337.00337.50sha3224
342.75342.75344.25shake256
342.00343.00343.50sha3512
343.50343.50344.25shake128
382.12386.50400.62T:keccakc1024
377.62388.38398.88T:keccakc768
384.25?396.00?429.75?T:keccakc512
386.12?397.75?453.25?T:keccak
385.12407.00409.25T:keccakc448
563.25563.25565.38T:skein10241024
606.88606.88607.50T:groestl256
788.25788.25790.38T:jh256
788.38788.38790.50T:jh384
788.88788.88791.00T:jh224
788.62789.88790.75T:jh512
933.38933.38935.12T:round3jh256
937.12937.12937.75T:round3jh512
1009.121009.501009.75T:bblake256
1702.251707.501729.25T:groestl512
1855.501862.001862.00T:keccakc512treed2
1869.001870.881885.50T:keccakc256treed2