VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20250922

[Page version: 20251015 23:19:38]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 4.80 4.83 4.85 T:blake2b 4.95 4.97 4.98 T:k12 5.89 5.89 5.90 T:blake2s 6.31 6.33 6.44 T:skein512512 6.33 6.37 6.45 T:skein512256 6.49 6.53 6.56 T:blake32 6.48 6.55 6.70 T:bblake256 7.06 7.10 7.12 T:blake64 7.22 7.23 7.25 T:keccakc256treed2 7.39 7.42 7.45 blake512 8.24 8.24 8.25 T:skein256256 8.44 8.46 8.48 blake256 9.35 9.35 9.36 T:keccakc512treed2 9.37 9.38 9.38 T:skein10241024 9.67 9.68 9.78 shake128 9.67 9.77 9.83 sha512 9.75 9.78 9.79 sha384 11.10 11.11 11.16 T:keccakc448 11.19 11.19 11.19 sha3224 11.81 11.84 11.89 T:keccakc512 12.01 12.01 12.03 sha3256 12.01 12.04 12.07 shake256 12.64 12.65 12.66 T:keccak 12.98 13.04 13.07 sha224 12.94 13.05 13.30 sha256 15.69 15.71 15.72 T:keccakc768 15.86 15.87 15.88 sha3384 16.91 16.94 16.98 T:jh256 16.92 16.95 17.03 T:jh384 16.90 16.95 17.04 T:jh512 16.96 16.99 16.99 T:jh224 19.98 19.99 20.01 T:round3jh256 20.00 20.02 20.09 T:round3jh512 21.84 21.85 21.86 T:keccakc1024 22.16 22.17 22.17 sha3512 22.18 22.21 22.35 T:groestl256 31.39 31.48 31.64 T:groestl512

Cycles/byte for 4096 bytes 25% 50% 75% hash 4.86 4.87 4.88 T:blake2b 5.25 5.25 5.25 T:k12 5.92 5.92 5.92 T:blake2s 6.51 6.52 6.55 T:skein512512 6.52 6.53 6.56 T:skein512256 6.67 6.68 6.70 T:blake32 7.22 7.23 7.30 T:bblake256 7.39 7.41 7.41 T:blake64 7.68 7.69 7.69 blake512 8.35 8.36 8.36 T:skein256256 8.52 8.52 8.53 T:keccakc256treed2 8.64 8.65 8.65 blake256 9.76 9.76 9.76 T:skein10241024 10.09 10.09 10.14 shake128 10.09 10.09 10.10 T:keccakc512treed2 10.15 10.16 10.16 sha384 10.15 10.17 10.19 sha512 11.60 11.61 11.62 T:keccakc448 11.61 11.61 11.61 sha3224 12.36 12.36 12.37 T:keccakc512 12.43 12.43 12.43 sha3256 12.45 12.46 12.47 shake256 13.12 13.12 13.12 T:keccak 13.32 13.35 13.36 sha224 13.35 13.35 13.47 sha256 15.78 15.78 15.79 T:keccakc768 15.91 15.91 15.91 sha3384 17.22 17.23 17.25 T:jh256 17.24 17.25 17.28 T:jh384 17.22 17.25 17.26 T:jh512 17.25 17.25 17.26 T:jh224 20.32 20.32 20.33 T:round3jh256 20.38 20.39 20.42 T:round3jh512 22.31 22.32 22.32 T:keccakc1024 22.58 22.58 22.58 sha3512 22.89 22.90 22.97 T:groestl256 33.46 33.48 33.55 T:groestl512

Cycles/byte for 1536 bytes 25% 50% 75% hash 4.94 4.95 4.97 T:blake2b 5.72 5.73 5.73 T:k12 5.96 5.96 5.96 T:blake2s 6.77 6.77 6.79 T:skein512256 6.77 6.77 6.79 T:skein512512 6.94 6.95 6.96 T:blake32 7.90 7.92 7.93 T:blake64 8.13 8.14 8.16 blake512 8.34 8.37 8.43 T:bblake256 8.54 8.54 8.55 T:skein256256 8.94 8.95 8.96 blake256 9.88 9.90 9.91 T:keccakc256treed2 10.39 10.39 10.40 T:skein10241024 10.78 10.78 10.78 shake128 10.79 10.79 10.80 sha384 10.80 10.83 10.88 sha512 11.35 11.35 11.35 T:keccakc512treed2 11.79 11.79 11.79 sha3224 11.86 11.87 11.88 T:keccakc448 12.86 12.86 12.86 sha3256 12.87 12.88 12.91 T:keccakc512 12.88 12.88 12.90 shake256 13.84 13.84 13.85 sha224 13.84 13.86 13.94 sha256 13.90 13.90 13.90 T:keccak 15.91 15.91 15.92 T:keccakc768 15.96 15.96 15.97 sha3384 17.71 17.71 17.73 T:jh224 17.72 17.72 17.74 T:jh256 17.72 17.73 17.75 T:jh512 17.71 17.73 17.76 T:jh384 20.86 20.88 20.89 T:round3jh256 20.97 20.97 20.97 T:round3jh512 23.09 23.10 23.10 T:keccakc1024 23.28 23.28 23.28 sha3512 24.00 24.02 24.05 T:groestl256 36.80 36.82 36.87 T:groestl512

Cycles/byte for 576 bytes 25% 50% 75% hash 5.66 5.66 5.68 T:blake2b 6.09 6.09 6.09 T:blake2s 6.44 6.47 6.48 T:k12 7.43 7.44 7.45 T:skein512256 7.44 7.45 7.46 T:skein512512 7.62 7.64 7.68 T:blake32 8.39 8.42 8.46 T:blake64 8.61 8.64 8.67 blake512 9.07 9.07 9.08 T:skein256256 9.73 9.74 9.76 blake256 11.47 11.49 11.50 sha384 11.55 11.58 11.62 sha512 11.61 11.65 11.70 T:bblake256 11.68 11.68 11.68 shake128 13.17 13.17 13.17 T:skein10241024 13.51 13.55 13.55 T:keccakc256treed2 14.34 14.34 14.34 sha3256 14.34 14.35 14.36 sha3224 14.42 14.42 14.45 shake256 14.56 14.57 14.58 T:keccak 14.61 14.65 14.69 T:keccakc512 14.66 14.66 14.74 T:keccakc448 15.15 15.15 15.17 sha224 15.09 15.19 15.25 sha256 17.14 17.14 17.14 sha3384 17.26 17.28 17.28 T:keccakc768 17.71 17.71 17.71 T:keccakc512treed2 18.95 18.97 19.05 T:jh512 18.98 18.98 19.00 T:jh224 18.98 18.99 19.01 T:jh384 18.92 19.06 19.06 T:jh256 22.35 22.35 22.35 T:round3jh256 22.43 22.43 22.43 T:round3jh512 25.47 25.47 25.51 sha3512 25.54 25.55 25.56 T:keccakc1024 27.00 27.03 27.05 T:groestl256 42.17 42.20 42.28 T:groestl512

Cycles/byte for 64 bytes 25% 50% 75% hash 7.06 7.09 7.25 T:blake2s 12.23 12.23 12.28 T:blake2b 15.36 15.36 15.48 T:skein512256 15.42 15.42 15.42 T:skein512512 15.52 15.58 15.59 T:skein256256 16.42 16.50 16.64 T:blake32 17.80 17.81 18.20 T:blake64 18.30 18.42 18.58 T:k12 19.77 19.86 20.00 blake512 19.92 20.12 20.45 blake256 24.56 24.61 24.64 sha384 25.33 25.36 26.14 sha512 26.72 26.72 26.72 sha3256 26.81 26.81 26.81 sha3384 26.92 26.92 26.92 sha3224 26.95 26.95 26.95 sha3512 27.17 27.19 27.22 shake128 27.23 27.23 27.47 shake256 29.27 29.33 29.34 T:keccakc1024 29.33 29.44 29.50 T:keccakc768 29.45 29.52 29.53 T:keccak 29.89 29.94 30.84 T:keccakc512 30.25 30.36 31.00 T:keccakc448 32.08 32.08 32.17 sha256 31.81 32.20 32.20 sha224 35.05 35.11 35.31 T:jh512 34.97 35.28 35.28 T:jh256 35.64 35.64 35.64 T:jh224 35.64 35.66 35.66 T:jh384 41.33 41.33 41.33 T:round3jh512 41.22 41.67 41.67 T:round3jh256 42.08 42.09 42.09 T:skein10241024 52.23 52.38 52.70 T:bblake256 65.11 65.42 65.53 T:groestl256 82.23 82.23 82.53 T:keccakc256treed2 84.42 84.42 84.42 T:keccakc512treed2 127.05 127.19 127.31 T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 57.75 58.38 59.62 T:blake2s 79.12 79.88 81.12 T:blake32 88.75 89.00 89.00 T:skein256256 91.62 92.50 93.25 blake256 98.75 98.75 98.75 T:blake2b 121.75 122.12 122.62 T:skein512256 122.62 122.62 122.88 T:skein512512 145.25 145.50 146.38 T:k12 145.50 145.88 146.88 sha224 146.75 147.00 149.62 T:blake64 148.12 148.62 148.88 sha256 151.25 152.00 152.62 blake512 196.50 197.12 198.25 sha384 202.62 202.88 209.12 sha512 213.25 213.25 213.25 sha3224 213.25 213.25 213.25 sha3256 213.50 213.50 213.50 sha3384 213.75 213.75 213.75 sha3512 216.12 216.12 216.62 shake128 215.75 216.50 217.62 shake256 234.12 234.25 235.50 T:keccakc1024 235.88 236.75 238.12 T:keccakc768 237.12 237.38 239.00 T:keccak 237.75 239.62 244.12 T:keccakc512 240.12 240.75 246.62 T:keccakc448 283.75 283.75 283.75 T:jh224 283.88 284.12 287.38 T:jh512 285.00 285.00 285.25 T:jh384 283.50 286.38 286.38 T:jh256 333.88 333.88 333.88 T:round3jh256 334.62 334.62 338.12 T:round3jh512 335.25 335.25 335.25 T:skein10241024 342.88 344.25 346.00 T:groestl256 348.88 350.12 352.00 T:bblake256 658.62 659.00 660.25 T:keccakc256treed2 671.25 671.25 671.25 T:keccakc512treed2 1017.88 1019.75 1022.25 T:groestl512