VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 2 (860f81); 2021 AMD Ryzen 3 5300U; 4 x 2600MHz; lucienne, supercop-20260217

[Page version: 20260315 18:26:23]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
2.022.022.03sha224
3.253.273.29T:blake2b
3.353.383.42T:k12
4.614.644.68sha384
4.704.724.76sha512
4.904.934.95T:bblake256
4.924.954.96T:skein512256
4.944.954.97T:skein512512
5.355.365.36T:blake2s
5.385.405.40T:keccakc256treed2
5.595.625.65blake512
5.865.885.91T:blake64
6.206.216.21T:skein10241024
6.236.266.31shake128
6.596.626.63T:blake32
6.606.696.71T:skein256256
7.137.187.21T:groestl256
7.197.217.23T:keccakc512treed2
7.237.267.28T:keccakc448
7.277.317.34sha3224
7.597.597.60blake256
7.707.727.74T:keccakc512
7.787.817.83shake256
7.807.827.86sha3256
8.368.408.44T:keccak
10.1710.1810.21T:groestl512
10.2810.3110.40T:keccakc768
10.3610.4010.45sha3384
11.1111.1611.18T:jh224
11.1611.1611.18T:jh256
10.8711.1611.74T:jh512
11.1011.1711.28T:jh384
13.1013.2013.31T:round3jh256
13.0813.2913.36T:round3jh512
14.4314.4614.48T:keccakc1024
14.4514.5014.54sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
2.552.552.55sha224
3.273.273.28T:blake2b
3.613.613.62T:k12
4.894.904.91sha512
5.055.065.06T:skein512256
5.085.095.09T:skein512512
5.355.355.35T:blake2s
5.425.425.44sha384
5.535.545.54T:bblake256
5.815.825.83blake512
6.106.116.12T:blake64
6.336.336.33T:keccakc256treed2
6.476.476.48T:skein10241024
6.566.576.58shake128
6.776.776.78T:blake32
6.756.786.79T:skein256256
7.487.497.50T:groestl256
7.577.597.59T:keccakc448
7.607.617.62sha3224
7.697.697.70T:keccakc512treed2
7.737.737.73blake256
8.098.098.10shake256
8.108.118.12sha3256
8.138.148.14T:keccakc512
8.718.718.73T:keccak
10.4110.4210.45T:keccakc768
10.4110.4210.44sha3384
10.7410.7410.75T:groestl512
11.3611.3611.37T:jh224
11.3611.3611.37T:jh256
11.3611.3811.43T:jh384
11.3811.3911.67T:jh512
13.3913.4313.48T:round3jh256
13.4113.5013.51T:round3jh512
14.7714.7814.80sha3512
14.8014.8014.81T:keccakc1024
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.132.13sha256
3.273.283.28T:blake2b
3.423.433.43sha224
3.984.004.01T:k12
5.195.205.21sha512
5.235.245.25T:skein512256
5.305.315.31T:skein512512
5.355.355.35T:blake2s
6.146.146.15blake512
6.516.526.53T:blake64
6.546.556.56T:bblake256
6.676.696.70sha384
6.916.926.92T:skein10241024
6.916.936.94T:skein256256
7.037.047.05T:blake32
7.047.057.09shake128
7.297.307.30T:keccakc256treed2
7.767.767.77sha3224
7.817.837.85T:keccakc448
7.957.957.96blake256
8.018.028.04T:groestl256
8.388.398.40sha3256
8.408.408.41shake256
8.508.508.51T:keccakc512treed2
8.578.578.59T:keccakc512
9.219.229.25T:keccak
10.4510.4510.47sha3384
10.5910.5910.61T:keccakc768
11.6711.6811.69T:groestl512
11.6711.6811.69T:jh224
11.7011.7011.70T:jh256
11.6811.7111.72T:jh384
11.7011.7611.99T:jh512
13.8113.8213.88T:round3jh256
13.8313.8813.89T:round3jh512
15.2115.2215.23sha3512
15.3715.3715.38T:keccakc1024
Cycles/byte for 576 bytes
25%50%75%hash
2.312.312.31sha256
3.683.703.73T:blake2b
4.554.604.63T:k12
5.345.345.35T:blake2s
5.435.455.46sha512
5.665.685.71T:skein512256
5.735.735.82sha224
5.875.885.91T:skein512512
6.396.426.43blake512
6.866.886.91T:blake64
7.327.357.39T:skein256256
7.567.587.58shake128
7.697.707.71T:blake32
8.558.558.56blake256
8.778.778.79T:skein10241024
9.359.379.40sha3256
9.349.379.48sha3224
9.379.379.39shake256
9.439.479.47T:groestl256
9.479.489.51T:bblake256
9.509.509.56T:keccak
9.569.629.71sha384
9.589.739.76T:keccakc448
9.849.859.87T:keccakc256treed2
9.969.979.98T:keccakc512
11.1711.1811.20sha3384
11.6211.6211.70T:keccakc768
12.4712.4812.51T:jh224
12.5412.5612.63T:jh256
12.5312.5912.63T:jh384
12.5412.5912.85T:jh512
13.0513.0613.08T:keccakc512treed2
13.5113.5313.53T:groestl512
14.7214.7314.79T:round3jh256
14.7714.8814.94T:round3jh512
16.6716.6716.73sha3512
17.1117.1217.21T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
4.634.644.74sha256
5.225.235.24T:blake2s
6.976.977.07T:blake2b
10.8110.8310.89sha512
11.3411.4111.83T:skein512256
12.4512.5612.64T:skein256256
12.5412.6312.76blake512
12.8912.9413.00T:k12
12.8812.9613.23T:skein512512
13.8513.9714.24T:blake64
16.3616.3916.44T:blake32
16.3616.4016.50blake256
17.3917.3917.42sha3256
17.3617.4017.51sha3384
17.4017.4217.42sha3512
17.4117.5017.78sha3224
17.5617.5617.73shake256
17.5717.6317.67shake128
17.9918.0018.12T:keccak
19.7119.7519.88T:keccakc448
19.8419.8519.90T:keccakc1024
20.4420.4420.44T:keccakc768
20.89?20.91?27.43?T:keccakc512
23.1223.1823.39T:jh224
23.3023.3123.39T:jh384
23.3823.4623.64T:jh256
23.5223.7424.01T:jh512
27.2927.3827.59T:round3jh256
27.2727.4327.66T:round3jh512
27.8827.8827.88T:groestl256
28.4628.5328.66T:skein10241024
35.5935.7935.90sha224
40.2040.4040.49T:groestl512
44.4244.5144.63T:bblake256
46.0946.4046.76sha384
59.7059.7759.92T:keccakc256treed2
60.1160.1660.23T:keccakc512treed2
Cycles/byte for 8 bytes
25%50%75%hash
25.3427.5027.73sha256
47.7547.7547.94T:blake2s
56.8257.1757.50T:blake2b
72.5772.7473.41blake256
75.7575.7575.75T:skein256256
84.3185.0085.00T:blake32
87.5488.4689.24sha512
90.2390.9391.86T:skein512256
100.60101.81102.85blake512
101.92102.62102.62T:k12
104.00105.16106.72T:skein512512
113.00113.54114.30T:blake64
138.35138.56138.98sha3384
138.80138.88139.42sha3512
138.25138.90140.88sha3224
139.12139.12139.12shake256
139.62139.65139.75shake128
143.88143.97144.43T:keccak
142.03150.25150.25sha3256
157.81158.00159.69T:keccakc448
161.12161.12161.12T:groestl256
161.92162.00162.00T:keccakc1024
163.81?164.09?212.90?T:keccakc768
167.50167.58168.42T:keccakc512
187.74188.51190.31T:jh224
189.09190.44191.95T:jh256
189.43190.75191.33T:jh384
187.92191.43194.22T:jh512
222.38223.20223.79T:round3jh256
222.33223.46223.92T:round3jh512
230.39231.69231.94T:skein10241024
274.49274.95276.21sha224
293.86294.44294.92T:groestl512
297.12298.55301.67T:bblake256
372.73?376.85?504.33?sha384
477.08477.55478.45T:keccakc256treed2
480.00480.41480.75T:keccakc512treed2