VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
1.531.541.57sha224
2.932.972.99T:k12
3.483.503.53T:blake2b
4.714.734.75sha512
4.864.874.88T:blake2s
4.924.944.97T:skein512256
4.934.965.00T:keccakc256treed2
4.964.985.01T:blake64
4.944.995.05T:skein512512
5.055.065.07T:blake32
5.155.215.25sha384
5.275.305.34T:bblake256
5.315.345.37blake512
5.525.555.58shake128
5.395.585.77T:skein10241024
6.416.436.45T:keccakc448
6.486.506.52sha3224
6.526.556.58T:skein256256
6.606.626.63T:keccakc512treed2
6.766.786.84T:keccakc512
6.886.916.96sha3256
6.916.936.95blake256
6.916.956.97shake256
7.267.297.31T:keccak
8.728.868.98T:groestl256
9.119.159.19T:keccakc768
9.179.199.22sha3384
11.8111.8811.98T:groestl512
12.5512.6012.63T:keccakc1024
12.7812.8112.87sha3512
13.7513.8113.87T:jh256
13.7413.8213.89T:jh224
13.7513.8213.88T:jh512
13.7813.8513.91T:jh384
16.2916.3516.42T:round3jh512
16.3116.3916.44T:round3jh256
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
1.841.841.85sha224
3.133.143.14T:k12
3.503.503.51T:blake2b
4.874.874.88T:blake2s
4.884.894.90sha512
5.035.035.04T:skein512256
5.045.065.09T:skein512512
5.155.165.17T:blake64
5.185.185.18T:blake32
5.515.525.52blake512
5.695.715.73sha384
5.755.785.87T:skein10241024
5.805.805.81T:bblake256
5.815.825.83shake128
5.825.835.84T:keccakc256treed2
6.626.626.63T:skein256256
6.676.686.68T:keccakc448
6.746.746.75sha3224
7.047.047.07T:keccakc512
7.047.057.05blake256
7.077.087.08T:keccakc512treed2
7.177.187.19sha3256
7.187.197.20shake256
7.547.557.56T:keccak
9.189.199.21T:keccakc768
9.209.219.22sha3384
9.229.259.29T:groestl256
12.4612.4912.53T:groestl512
12.8812.8812.89T:keccakc1024
13.0713.0813.10sha3512
14.0314.0514.07T:jh224
14.0414.0514.07T:jh512
14.0414.0614.07T:jh256
14.0514.0714.08T:jh384
16.6116.6316.64T:round3jh512
16.6116.6316.65T:round3jh256
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.61sha256
2.332.342.36sha224
3.383.393.40T:k12
3.483.503.51T:blake2b
4.864.874.88T:blake2s
5.155.165.17sha512
5.175.195.20T:skein512256
5.205.215.21T:skein512512
5.375.385.39T:blake32
5.445.455.49T:blake64
5.815.825.84blake512
6.106.136.14T:skein10241024
6.246.256.26shake128
6.536.546.56sha384
6.626.636.65T:bblake256
6.716.716.73T:keccakc256treed2
6.736.756.77T:skein256256
6.796.806.81T:keccakc448
6.856.866.87sha3224
7.237.247.25blake256
7.307.317.32T:keccakc512
7.427.437.45sha3256
7.447.467.46shake256
7.827.837.84T:keccakc512treed2
7.967.977.98T:keccak
9.239.249.26sha3384
9.239.269.27T:keccakc768
9.889.9110.04T:groestl256
13.3113.3413.41T:keccakc1024
13.4813.4913.50sha3512
13.5213.5313.54T:groestl512
14.4014.4314.45T:jh224
14.4114.4514.49T:jh256
14.4114.4514.48T:jh512
14.4314.4614.48T:jh384
17.0517.0617.10T:round3jh256
17.0417.0617.10T:round3jh512
Cycles/byte for 576 bytes
25%50%75%hash
1.721.731.73sha256
3.653.673.68sha224
3.753.763.80T:k12
3.873.903.92T:blake2b
4.864.864.88T:blake2s
5.575.585.60T:skein512256
5.575.585.65sha512
5.615.635.64T:skein512512
5.705.715.73T:blake64
5.825.835.86T:blake32
6.046.066.10blake512
6.656.686.69shake128
7.097.107.12T:skein256256
7.617.677.68T:skein10241024
7.727.737.75blake256
8.248.268.27T:keccakc512
8.258.278.31sha3224
8.258.278.31sha3256
8.278.288.30shake256
8.288.298.31T:keccak
8.308.318.36sha384
8.328.358.38T:keccakc448
9.029.039.10T:bblake256
9.069.069.09T:keccakc256treed2
9.859.879.90sha3384
9.989.9910.01T:keccakc768
11.5911.7512.07T:groestl256
12.0312.0412.07T:keccakc512treed2
14.7114.7414.75T:keccakc1024
14.7514.7914.84sha3512
15.1115.1415.19T:groestl512
15.3815.4115.48T:jh256
15.3715.4215.48T:jh512
15.3815.4215.49T:jh224
15.4315.4915.54T:jh384
18.2118.2618.29T:round3jh512
18.2418.2718.32T:round3jh256
Cycles/byte for 64 bytes
25%50%75%hash
3.533.593.61sha256
4.784.814.86T:blake2s
7.097.277.47T:blake2b
10.0310.2010.38T:k12
10.5210.5810.62T:skein512256
10.7310.8010.86T:skein512512
11.2511.3311.45T:blake64
11.5211.5611.67T:skein256256
11.9712.0612.11T:blake32
12.0612.1612.38blake512
12.2512.3013.28sha512
14.2214.3014.41blake256
15.1415.1915.27sha3512
15.1415.2015.30sha3256
15.1715.2215.41sha3384
15.1715.2315.31sha3224
15.2815.3415.78shake256
15.3015.3415.64shake128
16.0316.1116.28T:keccakc1024
16.1616.2316.58T:keccak
16.1716.2516.34T:keccakc512
16.2516.3016.34T:keccakc768
16.3816.4816.64T:keccakc448
21.0921.5022.16sha224
23.9423.9824.06T:skein10241024
27.8627.9728.34T:jh256
28.0328.1628.75T:jh512
28.0328.1728.47T:jh224
28.0328.2028.53T:jh384
32.7332.8933.41sha384
33.1233.2833.52T:round3jh256
33.3033.5933.84T:round3jh512
33.41?34.00?37.81?T:groestl256
39.2839.3639.53T:bblake256
41.1141.3141.59T:groestl512
54.9555.2255.28T:keccakc512treed2
55.2555.3055.33T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
19.5021.1221.62sha256
42.8843.1243.38T:blake2s
54.1254.5055.12T:blake32
57.8859.0060.38T:blake2b
64.1264.2564.62blake256
66.0066.8868.62T:skein256256
80.0081.1282.88T:k12
84.0084.3885.25T:skein512256
84.2584.6288.75sha512
85.3886.0086.62T:skein512512
90.7591.5092.00T:blake64
96.8897.2597.88blake512
120.75121.12121.62sha3512
120.88121.25122.38sha3224
121.00121.25124.75sha3384
120.88121.50125.25sha3256
121.50122.00125.12shake256
121.62122.00122.62shake128
128.25129.62135.50T:keccakc1024
129.62130.00130.25T:keccak
129.88130.38132.00T:keccakc512
130.38130.88132.38T:keccakc768
131.25132.50133.88T:keccakc448
162.62164.75171.88sha224
191.88192.25196.12T:skein10241024
198.00198.75201.38T:groestl256
224.50227.12227.12T:jh384
227.38227.88230.25T:jh256
225.38228.75230.12T:jh512
226.75228.75231.38T:jh224
258.50259.00260.00T:bblake256
261.12262.12263.38sha384
266.75268.00270.62T:round3jh512
266.75269.12271.00T:round3jh256
316.50317.25319.75T:groestl512
438.00439.25443.12T:keccakc256treed2
441.00441.88443.50T:keccakc512treed2