VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20260217

[Page version: 20260315 18:26:23]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.063.073.08T:blake2b
3.873.913.95T:k12
4.964.995.01T:keccakc256treed2
5.195.245.29T:skein512512
5.195.245.30T:skein512256
5.205.265.34sha512
5.215.275.33sha384
5.345.345.35T:blake2s
5.335.365.40T:bblake256
5.515.555.59T:blake64
5.815.835.85T:blake32
6.286.326.36blake512
6.626.636.66T:keccakc512treed2
6.946.987.00shake128
7.337.447.56T:skein10241024
7.607.627.64blake256
7.657.737.88sha256
7.647.747.86sha224
7.757.817.87T:skein256256
8.298.338.36T:keccakc448
8.328.368.39sha3224
8.658.678.72shake256
8.668.698.72sha3256
8.878.898.93T:keccakc512
8.848.929.02T:groestl256
9.449.479.50T:keccak
11.7411.7811.81T:keccakc768
11.7611.8011.84sha3384
13.0413.0813.14T:groestl512
13.1313.1813.26T:jh384
13.1413.1913.25T:jh224
13.1513.2013.24T:jh256
13.1613.2013.24T:jh512
14.9615.0015.06T:round3jh256
14.9815.0215.08T:round3jh512
16.4016.4416.47T:keccakc1024
16.4116.4716.51sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
3.103.103.10T:blake2b
4.134.144.15T:k12
5.355.365.36T:blake2s
5.355.365.38T:skein512256
5.365.375.38T:skein512512
5.535.565.59sha512
5.765.775.78T:blake64
5.905.915.91T:keccakc256treed2
5.925.935.94T:bblake256
5.965.965.96T:blake32
6.026.036.05sha384
6.536.536.54blake512
7.147.147.15T:keccakc512treed2
7.307.317.31shake128
7.747.747.75blake256
7.727.757.79T:skein10241024
7.867.877.89T:skein256256
8.388.408.44sha256
8.388.418.43sha224
8.648.658.67T:keccakc448
8.668.678.68sha3224
9.019.029.03sha3256
9.029.039.04shake256
9.229.239.24T:keccakc512
9.349.369.41T:groestl256
9.799.809.81T:keccak
11.8111.8211.83T:keccakc768
11.8211.8411.85sha3384
13.4013.4113.43T:jh224
13.4213.4313.44T:jh256
13.4213.4313.44T:jh512
13.4213.4413.46T:jh384
13.8013.8113.83T:groestl512
15.2615.2715.29T:round3jh256
15.2815.2915.31T:round3jh512
16.7416.7516.77sha3512
16.7616.7716.78T:keccakc1024
Cycles/byte for 1536 bytes
25%50%75%hash
3.133.143.15T:blake2b
4.524.534.55T:k12
5.375.375.38T:blake2s
5.515.555.58T:skein512256
5.545.595.62T:skein512512
5.885.925.99sha512
6.116.136.17T:blake64
6.166.176.19T:blake32
6.866.876.88T:keccakc256treed2
6.856.876.89T:bblake256
6.896.906.91blake512
7.237.267.30sha384
7.847.877.89shake128
7.967.967.97blake256
7.967.978.00T:keccakc512treed2
7.988.008.02T:skein256256
8.188.248.31T:skein10241024
8.808.828.84sha3224
8.828.838.85T:keccakc448
9.369.379.39sha3256
9.399.409.42shake256
9.449.509.56sha256
9.459.529.57sha224
9.579.599.60T:keccakc512
10.0710.1010.15T:groestl256
10.3510.3610.36T:keccak
11.8511.8711.89sha3384
11.8911.9011.91T:keccakc768
13.7713.7913.81T:jh224
13.8013.8213.87T:jh384
13.8013.8213.85T:jh512
13.8213.8413.86T:jh256
15.0315.0415.06T:groestl512
15.6915.7115.74T:round3jh256
15.7315.7415.77T:round3jh512
17.2517.2617.29sha3512
17.3017.3117.35T:keccakc1024
Cycles/byte for 576 bytes
25%50%75%hash
3.583.593.62T:blake2b
5.125.145.23T:k12
5.425.425.43T:blake2s
5.996.036.06T:skein512256
6.066.096.11T:skein512512
6.486.506.57T:blake64
6.596.626.65sha512
6.766.786.81T:blake32
7.157.187.20blake512
8.388.418.46T:skein256256
8.548.588.64shake128
8.608.608.61blake256
9.449.459.47T:keccakc256treed2
9.669.679.69T:bblake256
9.659.689.72sha384
10.2910.3910.52T:skein10241024
10.4910.5210.53sha3256
10.5410.5610.58shake256
10.7310.7410.79T:keccakc512
10.7410.7510.76T:keccak
10.7310.7610.79sha3224
10.7610.7810.81T:keccakc448
11.9111.9412.02T:groestl256
12.0312.3012.36sha224
12.3312.3412.36T:keccakc512treed2
12.1212.3912.43sha256
12.7512.7712.80sha3384
12.7712.7812.82T:keccakc768
14.7514.8014.86T:jh224
14.7814.8314.87T:jh256
14.7814.8314.89T:jh512
14.8314.8814.94T:jh384
16.8216.8216.90T:round3jh256
16.9116.9616.99T:round3jh512
17.1117.1317.15T:groestl512
18.8618.8918.93sha3512
18.9919.0419.09T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
5.965.986.11T:blake2s
7.397.497.57T:blake2b
12.3712.5512.72T:skein512256
12.8112.9513.05T:skein512512
13.5013.7314.06T:blake64
13.6513.7613.90T:skein256256
13.9414.1614.63T:blake32
14.4614.6214.97blake512
14.5914.7215.22T:k12
14.7614.9015.25sha512
16.9116.9316.98blake256
19.8620.0420.17sha3256
20.1020.1620.27sha3384
20.2220.2320.43sha3224
20.1620.2320.41sha3512
20.2420.3220.50T:keccakc1024
20.6220.7921.16shake256
20.7620.8320.96T:keccakc768
20.6220.9121.55shake128
20.9220.9621.06T:keccakc448
20.9120.9821.16T:keccakc512
21.0521.1421.29T:keccak
27.4127.6128.08T:jh256
27.4827.7428.08T:jh512
27.6227.8028.08T:jh384
27.6427.8228.09T:jh224
31.9532.0832.27T:round3jh256
32.2532.4732.89T:round3jh512
32.9133.3134.40T:skein10241024
36.0836.2436.83T:groestl256
41.1841.4841.66sha384
43.9444.1144.43T:bblake256
44.6945.3146.17sha224
45.2846.0546.38sha256
49.0249.1749.35T:groestl512
57.8358.0058.40T:keccakc512treed2
58.2558.3158.41T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
51.2551.2552.09T:blake2s
59.3959.7560.84T:blake2b
68.8270.5273.73T:blake32
77.4177.6478.48blake256
77.4878.0279.05T:skein256256
98.81100.26102.41T:skein512256
103.76104.78106.34T:skein512512
105.90107.22111.96sha512
108.76110.49113.03T:blake64
115.89116.42119.79T:k12
115.82118.72123.14blake512
158.70159.47160.91sha3256
159.07159.61161.16sha3384
159.61160.14160.95sha3512
160.09161.22161.67sha3224
164.56165.24166.81T:keccakc1024
164.88165.43167.74T:keccakc768
164.00165.91169.23shake256
163.64165.92170.10shake128
166.58167.00168.08T:keccakc448
167.14168.95170.07T:keccakc512
169.02169.58171.62T:keccak
221.02222.82224.95T:jh256
221.73223.01225.65T:jh384
221.91223.64225.50T:jh512
222.56223.90228.38T:groestl256
222.90224.54226.79T:jh224
259.67260.97263.45T:round3jh256
262.47264.10268.52T:round3jh512
263.65267.59273.20T:skein10241024
283.28286.73290.60sha224
285.94292.21296.01sha256
293.28295.86299.40T:bblake256
329.57331.04332.58sha384
374.86375.85378.64T:groestl512
462.75463.77467.48T:keccakc512treed2
465.29466.02467.78T:keccakc256treed2