VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20240909

[Page version: 20241017 10:58:48]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
8.548.558.56T:blake2b
9.439.459.46T:k12
10.1610.1610.16T:blake2s
11.6111.6111.61T:skein512256
11.6111.6211.63T:skein512512
11.6911.6911.69T:blake32
11.7211.7211.72T:skein256256
12.4912.4912.50T:blake64
12.8112.8112.81T:keccakc256treed2
13.5913.6013.60blake512
13.6213.6313.63blake256
15.1715.2115.25T:bblake256
17.2217.2317.23sha512
17.2317.2317.27T:keccakc512treed2
17.2217.2317.24sha384
17.8117.8817.93T:skein10241024
18.4918.5218.54shake128
20.4520.4520.46sha256
20.4520.4520.46sha224
20.8320.9621.31T:keccakc448
21.5121.5421.57sha3224
22.1822.6022.76T:keccakc512
22.6322.6723.06shake256
23.0523.0523.05sha3256
24.2024.2724.30T:keccak
25.7225.7225.72T:jh512
25.7225.7225.73T:jh224
25.7225.7225.72T:jh384
25.7125.7225.72T:jh256
29.5329.5329.55T:round3jh512
29.5329.5329.53T:round3jh256
30.2030.2130.34T:keccakc768
30.6430.7130.73sha3384
32.7132.7732.79T:groestl256
42.1942.2842.34T:keccakc1024
42.7142.7742.83sha3512
49.2649.2949.39T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
8.608.608.60T:blake2b
9.949.959.95T:k12
10.1610.1610.16T:blake2s
11.8511.8511.85T:skein512256
11.8511.8611.86T:skein512512
11.8811.8811.88T:skein256256
11.9511.9511.95T:blake32
12.9712.9812.98T:blake64
13.9213.9213.92blake256
14.1414.1514.15blake512
15.1015.1015.10T:keccakc256treed2
16.4316.4416.46T:bblake256
17.8817.8917.89sha384
17.8917.8917.89sha512
18.4718.4718.49T:keccakc512treed2
18.5518.5618.58T:skein10241024
19.3319.3319.34shake128
20.8820.8820.89sha224
20.8920.8920.89sha256
22.1822.2022.21T:keccakc448
22.3222.3322.34sha3224
23.6423.6623.69T:keccakc512
23.8223.8223.82sha3256
23.8423.8623.86shake256
25.1025.1125.13T:keccak
26.1426.1426.14T:jh384
26.1426.1426.14T:jh512
26.1426.1426.15T:jh224
26.1426.1426.14T:jh256
30.0230.0230.02T:round3jh256
30.0230.0230.03T:round3jh512
30.3830.3830.44T:keccakc768
30.7030.7230.73sha3384
33.6433.6733.68T:groestl256
43.1743.1843.20T:keccakc1024
43.5843.6043.60sha3512
52.1152.1152.14T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
8.658.658.66T:blake2b
10.1710.1710.17T:blake2s
10.7910.8010.81T:k12
12.1512.1612.16T:skein256256
12.2612.2612.26T:skein512256
12.2612.2612.26T:skein512512
12.3812.3812.39T:blake32
13.7813.7814.02T:blake64
14.4114.4214.42blake256
15.0515.0515.06blake512
17.5217.5217.52T:keccakc256treed2
18.4918.5118.52T:bblake256
18.9818.9818.98sha384
19.0019.0019.00sha512
19.6819.7119.75T:skein10241024
20.5320.5320.53T:keccakc512treed2
20.7320.7420.76shake128
21.6021.6021.60sha224
21.6021.6121.61sha256
22.6222.6423.07sha3224
22.7023.0723.45T:keccakc448
24.6224.6225.02sha3256
24.6624.6724.99shake256
24.6625.1625.39T:keccakc512
26.5726.6527.14T:keccak
26.8526.8526.85T:jh384
26.8526.8526.85T:jh224
26.8526.8526.85T:jh512
26.8426.8526.85T:jh256
30.5930.5930.65T:keccakc768
30.7530.7530.82sha3384
30.8330.8330.83T:round3jh256
30.8330.8330.83T:round3jh512
35.1935.2035.21T:groestl256
44.6544.6845.01T:keccakc1024
44.9044.9044.90sha3512
56.7556.7656.82T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
9.749.749.76T:blake2b
10.1810.1810.18T:blake2s
12.0212.0512.10T:k12
12.8812.8912.89T:skein256256
13.3113.3113.31T:skein512256
13.3213.3213.32T:skein512512
13.5413.5413.54T:blake32
14.6514.7714.88T:blake64
15.7315.7415.76blake256
16.0116.0116.01blake512
20.0720.0720.09sha384
20.1320.1320.16sha512
22.2222.2922.53shake128
23.5123.5123.51sha224
23.5323.5323.54sha256
23.9623.9624.15T:keccakc256treed2
23.9324.1324.16T:bblake256
24.8124.8224.86T:skein10241024
27.4727.4727.55sha3256
27.4427.5027.75sha3224
27.6227.6527.99shake256
27.7727.7928.66T:keccak
27.8927.9928.51T:keccakc448
27.8928.0628.10T:keccakc512
28.7228.7228.72T:jh384
28.7228.7328.75T:jh256
28.7328.7328.74T:jh512
28.7328.7328.73T:jh224
31.7331.7631.76T:keccakc512treed2
32.9032.9033.43sha3384
32.9832.9832.99T:round3jh512
32.9832.9932.99T:round3jh256
33.7533.8734.37T:keccakc768
39.3539.3839.39T:groestl256
49.0449.0449.05sha3512
49.3249.6849.90T:keccakc1024
63.6463.6563.89T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
10.2510.2510.73T:blake2s
18.8618.8618.88T:blake2b
21.9121.9121.91T:skein256256
26.4826.4826.48T:skein512256
26.6126.6126.61T:skein512512
28.1628.1628.16T:blake32
30.6630.9231.08T:blake64
31.8031.8632.27T:k12
32.5332.5332.62blake256
35.1135.1235.12blake512
42.0642.0642.11sha384
42.5842.5942.59sha512
47.6947.6947.72sha224
47.8347.8447.84sha256
50.1250.1450.47sha3256
50.1950.2250.45sha3512
50.1450.9152.50sha3224
50.8951.0251.64sha3384
51.4451.9455.12shake128
52.0252.0252.81shake256
52.4252.4252.42T:jh384
52.3852.4452.52T:jh256
52.4552.4552.48T:jh224
52.4452.5252.53T:jh512
55.3455.4257.14T:keccakc768
55.6255.6456.28T:keccak
55.5256.0658.56T:keccakc1024
56.8156.9759.83T:keccakc448
57.0057.7759.17T:keccakc512
60.2760.3060.55T:round3jh256
60.3060.3060.34T:round3jh512
78.9178.9178.91T:skein10241024
92.0092.0292.27T:groestl256
93.6293.6293.62T:bblake256
146.64146.64146.64T:keccakc256treed2
147.22147.22147.42T:keccakc512treed2
175.69176.02177.33T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
83.6283.6283.62T:blake2s
127.38127.38127.38T:skein256256
138.12138.12138.88T:blake32
149.38149.38150.38T:blake2b
157.38157.38157.50blake256
210.12210.12210.25T:skein512256
211.12211.12211.25T:skein512512
213.25213.25213.50sha224
214.25214.50214.50sha256
247.12248.50248.62T:blake64
258.00258.38261.62T:k12
277.75277.75277.75blake512
334.38334.38334.75sha384
338.62338.62339.25sha512
399.00399.00399.00sha3256
400.00400.00400.00sha3384
400.12400.12400.50sha3512
399.62402.75407.25sha3224
406.62407.50408.00shake256
410.38415.38418.12shake128
420.88420.88421.50T:jh384
421.38421.38422.00T:jh512
421.38421.38422.50T:jh256
421.12421.50422.25T:jh224
439.12443.75443.75T:keccak
443.75444.25445.38T:keccakc768
444.25444.50451.25T:keccakc1024
448.38448.75453.75T:keccakc512
454.62456.00458.50T:keccakc448
471.12472.25474.12T:groestl256
485.00485.00485.00T:round3jh256
485.38485.62485.62T:round3jh512
630.75630.75630.75T:skein10241024
635.50635.62635.88T:bblake256
1171.751171.751171.75T:keccakc256treed2
1176.621176.621176.62T:keccakc512treed2
1402.001402.621404.12T:groestl512