VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20250922

[Page version: 20251015 23:19:38]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: old (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 2.76 2.77 2.79 T:blake2b 3.61 3.63 3.66 T:k12 4.27 4.28 4.29 T:blake2s 4.41 4.49 4.58 sha384 4.49 4.52 4.55 T:bblake256 4.57 4.61 4.65 T:keccakc256treed2 4.84 4.86 4.89 blake512 5.12 5.17 5.20 T:skein512256 5.14 5.17 5.22 T:skein512512 5.21 5.24 5.27 T:blake64 5.24 5.26 5.28 sha512 5.44 5.46 5.48 T:blake32 5.96 5.97 5.99 blake256 6.10 6.14 6.20 T:keccakc512treed2 6.14 6.17 6.19 shake128 6.74 6.77 6.81 sha256 6.76 6.79 6.84 sha224 7.00 7.02 7.04 T:skein10241024 7.40 7.45 7.48 sha3224 7.53 7.64 7.68 T:skein256256 7.65 7.68 7.71 sha3256 7.67? 7.71? 10.81? shake256 7.87 7.89 7.92 T:keccakc448 8.15 8.19 8.20 T:groestl256 8.40 8.42 8.44 T:keccakc512 8.95 8.97 8.99 T:keccak 10.49 10.52 10.57 sha3384 11.10 11.16 11.29 T:keccakc768 11.41 11.48 11.58 T:groestl512 12.96 13.00 13.04 T:jh384 12.92 13.01 13.10 T:jh256 12.97 13.01 13.06 T:jh224 12.95 13.04 13.13 T:jh512 11.54? 14.59? 14.64? sha3512 14.63 14.68 14.73 T:round3jh512 14.64 14.69 14.75 T:round3jh256 15.48 15.51 15.55 T:keccakc1024

Cycles/byte for 4096 bytes 25% 50% 75% hash 2.77 2.77 2.78 T:blake2b 3.82 3.82 3.83 T:k12 4.28 4.28 4.28 T:blake2s 4.96 4.97 4.98 T:bblake256 5.05 5.06 5.07 blake512 5.10 5.12 5.15 sha384 5.27 5.28 5.29 T:skein512256 5.27 5.28 5.30 T:skein512512 5.43 5.44 5.45 T:blake64 5.44 5.45 5.45 sha512 5.45 5.46 5.47 T:keccakc256treed2 5.57 5.58 5.58 T:blake32 6.10 6.10 6.11 blake256 6.44 6.45 6.45 shake128 6.61 6.62 6.63 T:keccakc512treed2 7.25 7.26 7.27 sha256 7.25 7.26 7.28 sha224 7.33 7.33 7.34 T:skein10241024 7.71 7.72 7.74 sha3224 7.69 7.74 7.76 T:skein256256 7.96 7.96 7.97 sha3256 7.98? 7.99? 9.53? shake256 8.22 8.23 8.23 T:keccakc448 8.54 8.54 8.55 T:groestl256 8.72 8.72 8.73 T:keccakc512 9.26 9.27 9.27 T:keccak 10.54 10.55 10.56 sha3384 11.22 11.23 11.29 T:keccakc768 12.13 12.14 12.18 T:groestl512 13.20 13.21 13.23 T:jh384 13.20 13.22 13.23 T:jh224 13.22 13.24 13.28 T:jh512 13.21 13.24 13.27 T:jh256 14.89 14.90 14.91 sha3512 14.92 14.94 14.96 T:round3jh256 14.94 14.95 14.97 T:round3jh512 15.88 15.88 15.90 T:keccakc1024

Cycles/byte for 1536 bytes 25% 50% 75% hash 2.77 2.77 2.78 T:blake2b 4.13 4.14 4.15 T:k12 4.28 4.28 4.29 T:blake2s 5.38 5.39 5.41 blake512 5.43 5.44 5.46 T:skein512512 5.42 5.45 5.47 T:skein512256 5.72 5.73 5.75 T:bblake256 5.74 5.75 5.76 T:blake32 5.76 5.77 5.78 sha512 5.77 5.78 5.81 T:blake64 6.12 6.14 6.22 sha384 6.31 6.32 6.33 blake256 6.36 6.38 6.39 T:keccakc256treed2 6.92 6.93 6.97 shake128 7.40 7.42 7.44 T:keccakc512treed2 7.83 7.84 7.86 sha3224 7.85 7.86 7.87 T:skein10241024 7.91 7.92 7.93 T:skein256256 8.06 8.07 8.09 sha224 8.06 8.08 8.10 sha256 8.24 8.27 8.29 sha3256 8.28 8.29 8.31 shake256 8.40 8.41 8.42 T:keccakc448 9.13 9.14 9.15 T:keccakc512 9.14 9.15 9.16 T:groestl256 9.75 9.76 9.78 T:keccak 10.57 10.60 10.62 sha3384 11.32 11.34 11.38 T:keccakc768 13.23 13.24 13.26 T:groestl512 13.54 13.57 13.60 T:jh384 13.54 13.57 13.60 T:jh224 13.56 13.59 13.62 T:jh512 13.57 13.60 13.63 T:jh256 15.33 15.35 15.38 T:round3jh256 15.34 15.35 15.38 sha3512 15.38 15.41 15.45 T:round3jh512 16.37 16.39 16.41 T:keccakc1024

Cycles/byte for 576 bytes 25% 50% 75% hash 3.08 3.09 3.11 T:blake2b 4.27 4.27 4.29 T:blake2s 4.63 4.65 4.75 T:k12 5.49 5.51 5.52 blake512 5.89 5.91 5.98 T:skein512256 5.89 5.92 5.97 T:skein512512 6.06 6.07 6.10 sha512 6.10 6.15 6.19 T:blake64 6.20 6.22 6.24 T:blake32 6.90 6.90 6.91 blake256 7.49 7.51 7.56 shake128 7.93 7.95 7.97 T:bblake256 8.34 8.37 8.57 sha384 8.33 8.37 8.40 T:skein256256 8.46 8.51 8.53 T:keccakc256treed2 9.25 9.27 9.35 sha3256 9.30 9.33 9.40 shake256 9.51 9.54 9.59 sha3224 10.00 10.01 10.05 T:skein10241024 10.04 10.06 10.11 T:keccak 10.14 10.16 10.22 T:keccakc448 10.36 10.38 10.45 T:keccakc512 10.36 10.39 10.41 sha224 10.38 10.41 10.44 sha256 10.80 10.82 10.88 T:groestl256 11.23 11.28 11.33 T:keccakc512treed2 11.35 11.38 11.45 sha3384 12.34 12.36 12.39 T:keccakc768 14.47 14.51 14.58 T:jh384 14.49 14.53 14.55 T:jh224 14.49 14.55 14.61 T:jh512 14.49 14.55 14.59 T:jh256 15.10 15.12 15.14 T:groestl512 16.43 16.49 16.53 T:round3jh256 16.55 16.59 16.62 T:round3jh512 16.80 16.83 16.85 sha3512 17.98 18.02 18.07 T:keccakc1024

Cycles/byte for 64 bytes 25% 50% 75% hash 4.22 4.25 4.30 T:blake2s 5.58 5.64 5.83 T:blake2b 10.80 10.84 10.92 blake512 11.78 11.91 12.03 T:skein512256 11.88 11.97 12.09 T:skein512512 11.97 12.06 12.22 sha512 12.16 12.22 12.31 T:blake32 12.50 12.59 12.95 T:blake64 12.52 12.62 12.86 T:k12 14.23 14.31 14.39 blake256 14.25 14.38 14.55 T:skein256256 17.52 17.61 17.80 sha3384 17.48 17.64 17.80 sha3224 17.58 17.64 18.00 sha3256 17.58 17.67 17.80 sha3512 17.98 18.05 18.25 shake128 17.95 18.12 18.78 shake256 18.48 18.58 18.75 T:keccakc768 18.62 18.67 18.75 T:keccakc512 18.69 18.77 18.94 T:keccakc448 18.73 18.80 18.88 T:keccak 19.75 19.81 19.97 T:keccakc1024 26.50 26.62 26.86 T:jh512 26.58 26.69 26.94 T:jh256 26.58 26.78 26.97 T:jh384 26.72 26.84 27.19 T:jh224 30.64 30.81 31.31 T:round3jh256 30.94 30.97 31.16 T:skein10241024 31.48 31.59 31.77 T:round3jh512 31.53 31.72 31.97 T:groestl256 35.16 35.33 36.06 T:bblake256 36.44 37.39 39.66 sha384 39.19 39.31 39.59 sha224 39.41 39.69 39.81 sha256 41.73 41.84 41.91 T:groestl512 51.31 51.50 51.95 T:keccakc512treed2 51.28 51.62 51.80 T:keccakc256treed2

Cycles/byte for 8 bytes 25% 50% 75% hash 37.88 38.12 38.38 T:blake2s 48.38 48.62 49.12 T:blake2b 58.75 59.00 60.25 T:blake32 70.75 71.50 72.88 blake256 86.00 86.62 87.75 T:skein256256 86.38 87.00 88.00 blake512 94.75 95.00 96.25 sha512 95.00 95.75 100.25 T:skein512256 95.50 96.25 98.75 T:skein512512 99.12 101.25 102.38 T:k12 100.62 101.62 104.38 T:blake64 138.88 139.88 141.38 sha3224 139.12 139.88 140.62 sha3256 139.75 140.62 141.62 sha3512 139.88 141.12 143.12 sha3384 142.50 143.88 148.12 shake128 142.62 143.88 148.62 shake256 148.88 149.62 151.00 T:keccakc768 150.00 150.62 151.62 T:keccakc448 150.00 150.62 152.88 T:keccakc512 150.00 150.75 152.25 T:keccak 157.12 157.75 160.38 T:keccakc1024 188.75 190.25 193.50 T:groestl256 214.25 215.62 218.00 T:jh512 214.50 215.75 217.62 T:jh256 214.50 216.62 218.50 T:jh384 216.50 217.75 218.75 T:jh224 232.38 234.38 238.75 T:bblake256 249.00 249.75 250.50 T:skein10241024 250.25 251.00 252.00 T:round3jh256 250.75 252.00 253.00 sha224 252.50 253.50 254.50 sha256 254.50 255.62 258.25 T:round3jh512 291.25? 293.00? 323.62? sha384 320.38 321.12 322.25 T:groestl512 411.00 412.62 415.38 T:keccakc512treed2 411.25 413.25 414.88 T:keccakc256treed2