VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Coffee Lake (806ea); 2018 Intel Core i3-8109U; 2 x 3000MHz; like, supercop-20241011

[Page version: 20241017 10:58:48]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 3.19 3.20 3.21 T:blake2b 3.80 3.83 3.87 T:k12 4.61 4.64 4.68 T:keccakc256treed2 4.76 4.83 4.89 T:blake2s 5.08 5.12 5.16 sha384 5.14 5.19 5.22 T:skein512512 5.15 5.19 5.22 T:skein512256 5.15 5.20 5.23 T:bblake256 5.22 5.25 5.28 sha512 5.30 5.53 5.66 T:blake64 5.50 5.54 5.59 blake512 5.77 5.81 5.85 T:blake32 6.14 6.17 6.19 T:keccakc512treed2 6.52 6.59 6.65 T:skein10241024 6.76 6.78 6.80 blake256 7.11 7.14 7.18 shake128 7.59 7.62 7.64 T:skein256256 7.63 7.65 7.68 shake256 7.64 7.68 7.72 sha256 7.64 7.68 7.71 sha224 7.73 7.76 7.79 T:keccakc448 8.12 8.15 8.18 T:groestl256 8.25 8.31 8.39 T:keccakc512 8.30 8.33 8.36 sha3224 8.84 8.88 8.92 T:keccak 8.85 8.90 8.93 sha3256 10.96 11.01 11.05 T:keccakc768 11.54 11.57 11.60 T:groestl512 11.74 11.79 11.82 sha3384 13.25 13.32 13.38 T:jh224 13.29 13.33 13.37 T:jh512 13.28 13.33 13.39 T:jh384 13.27 13.34 13.38 T:jh256 14.63 14.68 14.73 T:round3jh512 14.59 14.70 14.83 T:round3jh256 15.22 15.48 15.80 T:keccakc1024 16.43 16.46 16.51 sha3512

Cycles/byte for 4096 bytes 25% 50% 75% hash 3.21 3.21 3.21 T:blake2b 4.08 4.09 4.10 T:k12 4.83 4.84 4.86 T:blake2s 5.30 5.31 5.32 T:skein512512 5.30 5.31 5.33 T:skein512256 5.38 5.39 5.40 sha384 5.46 5.47 5.48 sha512 5.47 5.48 5.49 T:keccakc256treed2 5.71 5.72 5.73 T:bblake256 5.63 5.73 5.75 T:blake64 5.73 5.74 5.75 blake512 5.93 5.95 5.96 T:blake32 6.64 6.64 6.65 T:keccakc512treed2 6.86 6.88 6.90 T:skein10241024 6.91 6.92 6.93 blake256 7.45 7.46 7.48 shake128 7.72 7.73 7.74 T:skein256256 7.86 7.87 7.88 sha224 7.86 7.87 7.88 sha256 7.94 7.95 7.96 shake256 8.10 8.10 8.11 T:keccakc448 8.53 8.53 8.54 T:groestl256 8.63 8.65 8.67 T:keccakc512 8.64 8.65 8.66 sha3224 9.19 9.21 9.22 sha3256 9.24 9.25 9.26 T:keccak 11.05 11.06 11.07 T:keccakc768 11.80 11.82 11.83 sha3384 12.24 12.25 12.26 T:groestl512 13.54 13.55 13.56 T:jh512 13.53 13.55 13.57 T:jh256 13.54 13.56 13.58 T:jh384 13.54 13.56 13.58 T:jh224 14.93 14.96 14.97 T:round3jh512 14.93 14.96 15.01 T:round3jh256 15.75 15.85 15.93 T:keccakc1024 16.78 16.79 16.80 sha3512

Cycles/byte for 1536 bytes 25% 50% 75% hash 3.22 3.23 3.24 T:blake2b 4.51 4.53 4.54 T:k12 4.85 4.86 4.92 T:blake2s 5.48 5.50 5.52 T:skein512256 5.48 5.50 5.52 T:skein512512 5.79 5.81 5.83 sha384 5.82 5.84 5.86 sha512 5.97 6.06 6.10 T:blake64 6.06 6.07 6.09 blake512 6.16 6.18 6.20 T:blake32 6.36 6.38 6.40 T:keccakc256treed2 6.58 6.60 6.62 T:bblake256 7.14 7.15 7.16 blake256 7.36 7.39 7.40 T:skein10241024 7.42 7.43 7.45 T:keccakc512treed2 7.90 7.92 7.94 T:skein256256 7.98 8.00 8.02 shake128 8.17 8.18 8.21 sha256 8.18? 8.21? 10.72? sha224 8.27 8.28 8.30 shake256 8.29 8.30 8.32 T:keccakc448 8.76 8.78 8.81 sha3224 8.99 9.02 9.04 T:keccakc512 9.15 9.17 9.18 T:groestl256 9.51 9.53 9.55 sha3256 9.80 9.82 9.83 T:keccak 11.12 11.15 11.18 T:keccakc768 11.86 11.88 11.89 sha3384 13.36 13.37 13.38 T:groestl512 13.90 13.91 13.95 T:jh256 13.90 13.93 13.96 T:jh512 13.92 13.94 13.97 T:jh224 13.91 13.94 13.97 T:jh384 15.39 15.39 15.41 T:round3jh512 15.37 15.41 15.45 T:round3jh256 16.28 16.41 16.51 T:keccakc1024 17.31 17.33 17.36 sha3512

Cycles/byte for 576 bytes 25% 50% 75% hash 3.63 3.64 3.65 T:blake2b 4.90 4.91 4.91 T:blake2s 4.92 4.94 4.99 T:k12 5.99 6.02 6.07 T:skein512256 6.00 6.02 6.07 T:skein512512 6.13 6.15 6.18 sha512 6.34 6.36 6.39 blake512 6.33 6.38 6.43 T:blake64 6.43 6.47 6.50 sha384 6.69 6.72 6.76 T:blake32 7.76 7.77 7.78 blake256 8.40 8.42 8.44 T:skein256256 8.54 8.57 8.64 shake128 8.76 8.78 8.82 T:keccakc256treed2 9.02 9.06 9.12 sha224 9.02 9.08 9.13 sha256 9.09 9.12 9.14 T:bblake256 9.32 9.34 9.36 shake256 9.36 9.39 9.43 T:skein10241024 10.12 10.18 10.23 T:keccakc512 10.23 10.26 10.31 T:keccakc448 10.23 10.27 10.34 T:keccak 10.62 10.65 10.71 sha3256 10.60 10.72 10.78 sha3224 10.84 10.85 10.89 T:groestl256 11.49 11.52 11.54 T:keccakc512treed2 12.02 12.09 12.18 T:keccakc768 12.68 12.70 12.78 sha3384 14.86 14.93 14.99 T:jh256 14.89 14.94 15.01 T:jh384 14.90 14.97 15.03 T:jh512 14.94 14.97 15.03 T:jh224 15.33 15.36 15.38 T:groestl512 16.51 16.56 16.60 T:round3jh256 16.55 16.58 16.60 T:round3jh512 17.98 18.11 18.22 T:keccakc1024 18.93 18.96 19.03 sha3512

Cycles/byte for 64 bytes 25% 50% 75% hash 5.56 5.59 5.66 T:blake2s 7.33 7.38 7.50 T:blake2b 12.34 12.45 12.56 T:skein512256 12.41 12.48 12.66 T:skein512512 12.61 12.69 12.75 sha512 13.03? 13.22? 19.30? blake512 13.33 13.39 13.56 T:blake64 13.31 13.42 13.86 T:k12 13.95 13.98 14.09 T:blake32 14.72 14.78 14.92 T:skein256256 15.61 15.69 15.75 blake256 15.94 16.16 16.42 sha384 18.41 18.47 18.59 shake256 19.95 20.02 20.22 sha3512 19.97 20.02 20.22 sha3224 19.94 20.03 20.27 sha3384 19.95 20.11 20.28 sha256 19.98 20.11 20.28 sha224 20.02 20.12 20.17 sha3256 20.14 20.27 20.45 shake128 20.38 20.52 20.61 T:keccakc1024 20.28 20.69 21.19 T:keccakc768 20.69 21.06 21.66 T:keccakc448 20.64 21.16 21.52 T:keccakc512 20.77 21.16 21.59 T:keccak 27.62 27.73 28.17 T:jh256 27.56 27.89 27.98 T:jh512 27.88 28.12 28.27 T:jh384 28.09 28.23 28.61 T:jh224 29.25 29.34 29.58 T:skein10241024 31.22 31.42 31.67 T:round3jh256 31.75 31.91 32.08 T:round3jh512 32.08 32.27 32.59 T:groestl256 40.50 40.59 40.73 T:bblake256 42.94 43.05 43.39 T:groestl512 53.83 54.00 54.30 T:keccakc256treed2 54.02 54.25 54.59 T:keccakc512treed2

Cycles/byte for 8 bytes 25% 50% 75% hash 47.25 47.50 47.62 T:blake2s 59.25 59.62 61.38 T:blake2b 68.00 68.50 69.12 T:blake32 72.25 72.75 73.38 blake256 88.88 89.25 89.88 T:skein256256 89.88 90.62 92.38 sha256 91.00? 93.25? 174.50? sha224 99.38 100.00 101.38 T:skein512256 99.38 100.12 101.38 T:skein512512 100.88 102.00 103.00 sha512 103.50 104.75 106.00 blake512 106.12 106.62 108.50 T:k12 106.62 107.50 109.25 T:blake64 130.50 131.62 134.50 sha384 144.75 145.50 146.50 shake256 158.50 159.25 160.50 sha3256 159.12 159.50 160.88 sha3224 158.75 159.62 160.75 sha3384 159.00 160.12 165.88 sha3512 160.12 160.75 162.38 shake128 162.50 163.75 165.38 T:keccakc1024 162.50 166.50 171.00 T:keccakc768 164.75 168.75 171.25 T:keccakc512 165.25 169.25 173.12 T:keccakc448 166.62 170.12 172.88 T:keccak 197.25 198.62 200.75 T:groestl256 223.50 224.38 226.75 T:jh256 223.62 224.75 226.75 T:jh512 225.62 226.88 227.88 T:jh384 226.25 227.88 229.50 T:jh224 235.00 236.25 237.12 T:skein10241024 256.88 258.50 259.50 T:round3jh256 260.50 262.12 262.50 T:round3jh512 268.62 269.75 271.88 T:bblake256 330.12 330.62 331.12 T:groestl512 428.75 430.62 433.00 T:keccakc256treed2 429.88 431.00 432.75 T:keccakc512treed2