VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Gracemont (906a4-20); 2022 Intel Core i3-1215U, E cores; 4 x 1600MHz; alder2,little, supercop-20251222

[Page version: 20260203 05:35:43]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
1.531.541.57sha224
2.932.972.99T:k12
3.483.503.53T:blake2b
4.714.734.75sha512
4.864.874.88T:blake2s
4.924.944.97T:skein512256
4.934.965.00T:keccakc256treed2
4.964.985.01T:blake64
4.944.995.05T:skein512512
5.055.065.07T:blake32
5.155.215.25sha384
5.275.305.34T:bblake256
5.315.345.37blake512
5.525.555.58shake128
5.395.585.77T:skein10241024
6.416.436.45T:keccakc448
6.486.506.52sha3224
6.526.556.58T:skein256256
6.606.626.63T:keccakc512treed2
6.766.786.84T:keccakc512
6.886.916.96sha3256
6.916.936.95blake256
6.916.956.97shake256
7.267.297.31T:keccak
8.728.868.98T:groestl256
9.119.159.19T:keccakc768
9.179.199.22sha3384
11.8111.8811.98T:groestl512
12.5512.6012.63T:keccakc1024
12.7812.8112.87sha3512
13.7513.8113.87T:jh256
13.7413.8213.89T:jh224
13.7513.8213.88T:jh512
13.7813.8513.91T:jh384
16.2916.3516.42T:round3jh512
16.3116.3916.44T:round3jh256
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
1.841.841.85sha224
3.133.143.14T:k12
3.503.503.51T:blake2b
4.874.874.88T:blake2s
4.884.894.90sha512
5.035.035.04T:skein512256
5.045.065.09T:skein512512
5.155.165.17T:blake64
5.185.185.18T:blake32
5.515.525.52blake512
5.695.715.73sha384
5.755.785.87T:skein10241024
5.805.805.81T:bblake256
5.815.825.83shake128
5.825.835.84T:keccakc256treed2
6.626.626.63T:skein256256
6.676.686.68T:keccakc448
6.746.746.75sha3224
7.047.047.07T:keccakc512
7.047.057.05blake256
7.077.087.08T:keccakc512treed2
7.177.187.19sha3256
7.187.197.20shake256
7.547.557.56T:keccak
9.189.199.21T:keccakc768
9.209.219.22sha3384
9.229.259.29T:groestl256
12.4612.4912.53T:groestl512
12.8812.8812.89T:keccakc1024
13.0713.0813.10sha3512
14.0314.0514.07T:jh224
14.0414.0514.07T:jh512
14.0414.0614.07T:jh256
14.0514.0714.08T:jh384
16.6116.6316.64T:round3jh512
16.6116.6316.65T:round3jh256
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.61sha256
2.332.342.36sha224
3.383.393.40T:k12
3.483.503.51T:blake2b
4.864.874.88T:blake2s
5.155.165.17sha512
5.175.195.20T:skein512256
5.205.215.21T:skein512512
5.375.385.39T:blake32
5.445.455.49T:blake64
5.815.825.84blake512
6.106.136.14T:skein10241024
6.246.256.26shake128
6.536.546.56sha384
6.626.636.65T:bblake256
6.716.716.73T:keccakc256treed2
6.736.756.77T:skein256256
6.796.806.81T:keccakc448
6.856.866.87sha3224
7.237.247.25blake256
7.307.317.32T:keccakc512
7.427.437.45sha3256
7.447.467.46shake256
7.827.837.84T:keccakc512treed2
7.967.977.98T:keccak
9.239.249.26sha3384
9.239.269.27T:keccakc768
9.889.9110.04T:groestl256
13.3113.3413.41T:keccakc1024
13.4813.4913.50sha3512
13.5213.5313.54T:groestl512
14.4014.4314.45T:jh224
14.4114.4514.49T:jh256
14.4114.4514.48T:jh512
14.4314.4614.48T:jh384
17.0517.0617.10T:round3jh256
17.0417.0617.10T:round3jh512
Cycles/byte for 576 bytes
25%50%75%hash
1.721.731.73sha256
3.653.673.68sha224
3.753.763.80T:k12
3.873.903.92T:blake2b
4.864.864.88T:blake2s
5.575.585.60T:skein512256
5.575.585.65sha512
5.615.635.64T:skein512512
5.705.715.73T:blake64
5.825.835.86T:blake32
6.046.066.10blake512
6.656.686.69shake128
7.097.107.12T:skein256256
7.617.677.68T:skein10241024
7.727.737.75blake256
8.248.268.27T:keccakc512
8.258.278.31sha3224
8.258.278.31sha3256
8.278.288.30shake256
8.288.298.31T:keccak
8.308.318.36sha384
8.328.358.38T:keccakc448
9.029.039.10T:bblake256
9.069.069.09T:keccakc256treed2
9.859.879.90sha3384
9.989.9910.01T:keccakc768
11.5911.7512.07T:groestl256
12.0312.0412.07T:keccakc512treed2
14.7114.7414.75T:keccakc1024
14.7514.7914.84sha3512
15.1115.1415.19T:groestl512
15.3815.4115.48T:jh256
15.3715.4215.48T:jh512
15.3815.4215.49T:jh224
15.4315.4915.54T:jh384
18.2118.2618.29T:round3jh512
18.2418.2718.32T:round3jh256
Cycles/byte for 64 bytes
25%50%75%hash
3.533.593.61sha256
4.784.814.86T:blake2s
7.097.277.47T:blake2b
10.0310.2010.38T:k12
10.5210.5810.62T:skein512256
10.7310.8010.86T:skein512512
11.2511.3311.45T:blake64
11.5211.5611.67T:skein256256
11.9712.0612.11T:blake32
12.0612.1612.38blake512
12.2512.3013.28sha512
14.2214.3014.41blake256
15.1415.1915.27sha3512
15.1415.2015.30sha3256
15.1715.2215.41sha3384
15.1715.2315.31sha3224
15.2815.3415.78shake256
15.3015.3415.64shake128
16.0316.1116.28T:keccakc1024
16.1616.2316.58T:keccak
16.1716.2516.34T:keccakc512
16.2516.3016.34T:keccakc768
16.3816.4816.64T:keccakc448
21.0921.5022.16sha224
23.9423.9824.06T:skein10241024
27.8627.9728.34T:jh256
28.0328.1628.75T:jh512
28.0328.1728.47T:jh224
28.0328.2028.53T:jh384
32.7332.8933.41sha384
33.1233.2833.52T:round3jh256
33.3033.5933.84T:round3jh512
33.41?34.00?37.81?T:groestl256
39.2839.3639.53T:bblake256
41.1141.3141.59T:groestl512
54.9555.2255.28T:keccakc512treed2
55.2555.3055.33T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
19.5021.1221.62sha256
42.8843.1243.38T:blake2s
54.1254.5055.12T:blake32
57.8859.0060.38T:blake2b
64.1264.2564.62blake256
66.0066.8868.62T:skein256256
80.0081.1282.88T:k12
84.0084.3885.25T:skein512256
84.2584.6288.75sha512
85.3886.0086.62T:skein512512
90.7591.5092.00T:blake64
96.8897.2597.88blake512
120.75121.12121.62sha3512
120.88121.25122.38sha3224
121.00121.25124.75sha3384
120.88121.50125.25sha3256
121.50122.00125.12shake256
121.62122.00122.62shake128
128.25129.62135.50T:keccakc1024
129.62130.00130.25T:keccak
129.88130.38132.00T:keccakc512
130.38130.88132.38T:keccakc768
131.25132.50133.88T:keccakc448
162.62164.75171.88sha224
191.88192.25196.12T:skein10241024
198.00198.75201.38T:groestl256
224.50227.12227.12T:jh384
227.38227.88230.25T:jh256
225.38228.75230.12T:jh512
226.75228.75231.38T:jh224
258.50259.00260.00T:bblake256
261.12262.12263.38sha384
266.75268.00270.62T:round3jh512
266.75269.12271.00T:round3jh256
316.50317.25319.75T:groestl512
438.00439.25443.12T:keccakc256treed2
441.00441.88443.50T:keccakc512treed2