VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20250922

[Page version: 20251001 12:36:44]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.383.403.42T:blake2b
4.294.304.32T:k12
5.185.225.25T:bblake256
5.285.295.31T:keccakc256treed2
5.345.345.35T:blake2s
5.925.996.04T:blake64
6.086.136.18blake512
6.266.286.30T:skein512256
6.356.406.44T:skein512512
6.416.426.44T:blake32
7.037.057.07T:keccakc512treed2
7.087.157.24sha384
6.897.357.64sha512
7.577.587.59blake256
8.328.508.60T:skein256256
8.638.668.70shake128
8.658.678.70T:skein10241024
9.449.469.47T:keccakc448
9.439.509.53T:groestl256
10.0610.0710.09sha3224
10.0710.1210.15sha256
10.0910.1210.15T:keccakc512
10.0810.1410.20sha224
10.7510.7710.79sha3256
10.7510.7810.82shake256
10.7710.7810.80T:keccak
12.8512.8812.91T:groestl512
12.8612.9012.94T:jh384
12.8512.9012.95T:jh224
12.8812.9012.96T:jh256
12.8012.9113.05T:jh512
13.4813.5013.52T:keccakc768
14.3014.3214.35sha3384
15.2615.2915.33T:round3jh256
15.2715.2915.34T:round3jh512
18.8418.8618.89T:keccakc1024
19.9119.9620.00sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
3.433.433.44T:blake2b
4.534.544.54T:k12
5.365.365.36T:blake2s
5.815.825.83T:bblake256
6.196.216.22T:blake64
6.266.266.26T:keccakc256treed2
6.376.386.39blake512
6.446.446.45T:skein512256
6.526.536.55T:skein512512
6.586.586.59T:blake32
7.577.577.58T:keccakc512treed2
7.727.737.73blake256
7.887.907.92sha384
7.868.058.12sha512
8.518.598.61T:skein256256
9.049.049.05T:skein10241024
9.049.059.06shake128
9.849.869.86T:groestl256
9.859.869.86T:keccakc448
10.4510.4510.46sha3224
10.5310.5410.55T:keccakc512
10.6810.6910.70sha256
10.6910.7010.73sha224
11.1511.1611.16sha3256
11.1511.1611.17shake256
11.1811.1911.19T:keccak
13.1213.1313.15T:jh384
13.1113.1313.15T:jh224
13.1313.1413.21T:jh512
13.1413.1513.17T:jh256
13.5513.5513.56T:keccakc768
13.6013.6113.61T:groestl512
14.3414.3514.35sha3384
15.5515.5615.57T:round3jh256
15.5615.5615.58T:round3jh512
19.2519.2619.26T:keccakc1024
20.3220.3420.35sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
3.483.483.49T:blake2b
4.934.934.94T:k12
5.375.385.38T:blake2s
6.596.616.63T:blake64
6.696.706.71T:skein512256
6.756.766.77T:skein512512
6.796.816.84T:bblake256
6.796.826.85blake512
6.826.836.84T:blake32
7.297.307.31T:keccakc256treed2
7.998.008.00blake256
8.448.458.46T:keccakc512treed2
8.708.768.79T:skein256256
9.059.099.14sha384
9.099.249.34sha512
9.669.679.68T:skein10241024
9.669.679.68shake128
10.0610.0610.07T:keccakc448
10.4410.4510.47T:groestl256
10.6110.6110.63sha3224
10.9610.9610.97T:keccakc512
11.5311.5411.55sha3256
11.5411.5511.56shake256
11.5711.5911.61sha256
11.6211.6311.68sha224
11.8411.8511.85T:keccak
13.4913.5213.54T:jh224
13.5013.5213.54T:jh384
13.5213.5313.61T:jh512
13.5413.5413.54T:jh256
13.6213.6313.64T:keccakc768
14.3714.3914.39sha3384
14.7914.8014.81T:groestl512
15.9816.0216.02T:round3jh256
15.9916.0216.04T:round3jh512
19.9119.9319.95T:keccakc1024
20.9520.9921.29sha3512
Cycles/byte for 576 bytes
25%50%75%hash
3.994.004.10T:blake2b
5.435.435.43T:blake2s
5.545.545.55T:k12
7.097.117.14T:blake64
7.297.337.42blake512
7.317.347.37T:skein512512
7.357.367.37T:skein512256
7.487.507.51T:blake32
8.638.648.69blake256
9.139.189.20T:skein256256
9.599.609.61T:bblake256
10.0410.0510.08T:keccakc256treed2
10.3610.3810.40shake128
11.6011.6711.74sha384
11.4911.7311.95sha512
12.0712.1012.15T:groestl256
12.2912.3012.31T:skein10241024
12.3712.3812.41T:keccak
12.3712.3912.44T:keccakc448
12.3912.4012.41T:keccakc512
12.8612.8712.90sha3256
12.8912.9112.92shake256
12.8912.9112.94sha3224
13.0713.0913.10T:keccakc512treed2
14.0214.0514.10sha256
14.0514.1014.14sha224
14.4514.4514.48T:jh256
14.4414.4614.50T:jh224
14.4514.4814.51T:jh384
14.4714.5414.61T:jh512
14.7514.7714.78T:keccakc768
15.3915.4115.43sha3384
16.8016.8116.83T:groestl512
17.1017.1317.19T:round3jh256
17.1317.1417.19T:round3jh512
21.9721.9822.00T:keccakc1024
22.9322.9523.00sha3512
Cycles/byte for 64 bytes
25%50%75%hash
6.066.066.09T:blake2s
8.568.839.20T:blake2b
14.4514.4714.62T:skein512512
14.7714.8814.98T:skein256256
15.2015.2315.23T:k12
15.6915.7515.84T:skein512256
15.9516.0316.09T:blake32
16.1416.2216.30T:blake64
16.6616.7716.89blake512
17.2317.7817.89blake256
23.8123.8623.95sha3512
23.7323.9424.02sha3256
23.9824.0324.08shake256
24.0624.0824.08sha3384
24.1424.1924.30shake128
24.4524.5224.58sha3224
24.5624.6424.95T:keccak
24.5824.6624.70T:keccakc768
24.8324.8924.94T:keccakc512
24.8624.9125.00T:keccakc448
25.0225.0625.25T:keccakc1024
26.9727.0027.11T:jh384
26.9827.0227.23T:jh256
27.1427.2827.38T:jh512
27.0527.3027.31T:jh224
31.7731.7731.77T:round3jh256
31.8631.8832.16T:round3jh512
32.8633.0233.16T:groestl256
40.8640.9741.08T:skein10241024
43.8343.8944.02T:bblake256
45.2545.3645.69sha256
43.5545.5645.80sha512
45.4145.6445.86sha224
45.8147.1947.94sha384
48.2348.3148.38T:groestl512
61.6261.7362.00T:keccakc512treed2
61.9862.1262.28T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
51.8851.8852.12T:blake2s
69.2570.3873.75T:blake2b
81.2581.5081.88T:blake32
80.6281.6282.25blake256
84.2585.0086.38T:skein256256
115.25116.00117.25T:skein512512
120.75120.88122.25T:k12
125.12125.62126.75T:skein512256
129.50129.75131.00T:blake64
133.50134.50135.62blake512
189.75190.00191.00sha3384
189.75190.38191.12T:groestl256
189.88190.38192.00sha3512
190.25191.25192.38sha3256
191.62191.75192.62shake256
191.88192.38192.88shake128
193.88193.88194.75sha3224
197.25197.75198.88T:keccak
197.75198.25199.12T:keccakc768
198.88199.38200.38T:keccakc512
199.00199.75201.38T:keccakc448
201.25201.88202.75T:keccakc1024
217.75219.00220.50T:jh256
218.12219.50220.88T:jh384
218.38219.62220.38T:jh512
219.12219.88221.12T:jh224
256.88256.88257.00T:round3jh256
256.25257.00257.50T:round3jh512
278.88280.88284.25sha256
281.00282.88285.50sha224
293.88295.38301.75T:bblake256
306.00306.62307.12T:skein10241024
360.12361.88381.12sha384
355.12363.75365.12sha512
367.50367.88368.75T:groestl512
493.25493.88495.00T:keccakc512treed2
495.25496.38497.62T:keccakc256treed2