VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.003.083.09T:blake2b
3.873.903.93T:k12
4.934.954.98T:keccakc256treed2
3.81?5.19?5.24?T:skein512256
5.105.195.51sha384
5.125.215.26T:skein512512
5.275.325.44T:bblake256
5.345.355.35T:blake2s
5.465.525.62T:blake64
5.825.886.02blake512
6.486.586.60T:blake32
6.586.616.63T:keccakc512treed2
5.47?6.91?6.94?shake128
7.237.287.30T:skein10241024
6.10?7.58?7.60?blake256
5.72?7.67?9.99?sha256
7.717.767.83sha224
7.767.797.83T:skein256256
8.268.298.33T:keccakc448
8.328.428.48sha3224
8.638.678.70shake256
8.62?8.68?16.16?sha3256
8.868.888.90T:keccakc512
8.878.918.95T:groestl256
9.419.469.50T:keccak
4.48?9.66?10.28?sha512
8.64?10.25?15.96?T:groestl512
11.7511.7811.81T:keccakc768
11.8211.8911.95sha3384
13.1113.1513.19T:jh256
13.1113.1713.20T:jh512
13.1413.1913.23T:jh224
13.18?13.23?24.31?T:jh384
15.0115.0515.09T:round3jh256
14.9715.1015.24T:round3jh512
16.3616.3916.41T:keccakc1024
16.5116.5616.61sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
3.093.093.09T:blake2b
4.124.124.13T:k12
5.285.305.31T:skein512256
5.345.355.35T:blake2s
5.345.355.36T:skein512512
5.745.755.79T:blake64
5.845.855.86T:keccakc256treed2
5.875.885.93T:bblake256
5.915.936.08sha384
6.096.106.15blake512
6.706.716.71T:blake32
7.097.107.11T:keccakc512treed2
7.257.257.26shake128
7.567.577.58T:skein10241024
7.717.717.72blake256
6.31?7.78?8.01?sha512
7.867.877.88T:skein256256
8.368.388.40sha224
8.37?8.38?9.50?sha256
8.658.658.67T:keccakc448
8.688.728.74sha3224
8.97?8.98?12.72?sha3256
8.978.999.00shake256
9.219.219.22T:keccakc512
9.339.349.35T:groestl256
9.799.819.82T:keccak
11.8111.8111.83T:keccakc768
11.8511.8811.90sha3384
13.3613.3713.39T:jh256
13.3713.3813.39T:jh512
13.3913.4113.42T:jh224
13.41?13.43?18.96?T:jh384
13.8613.8915.30T:groestl512
15.3015.3215.33T:round3jh256
15.3215.3515.41T:round3jh512
16.7116.7216.72T:keccakc1024
16.8016.8316.84sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
3.113.113.12T:blake2b
4.494.504.52T:k12
5.345.355.35T:blake2s
5.425.445.49T:skein512256
5.545.585.62T:skein512512
5.825.875.99sha512
6.076.116.14T:blake64
6.786.796.80T:keccakc256treed2
6.786.806.83T:bblake256
6.916.916.93T:blake32
7.107.147.18sha384
7.787.807.81shake128
7.887.907.92T:keccakc512treed2
7.937.947.95blake256
7.977.998.01T:skein256256
8.048.078.10T:skein10241024
8.818.828.84T:keccakc448
8.828.858.88sha3224
6.48?9.08?9.12?blake512
9.299.309.32sha3256
9.329.349.36shake256
9.389.409.43sha224
9.419.449.47sha256
9.589.589.59T:keccakc512
10.0210.0510.07T:groestl256
10.3910.4010.41T:keccak
11.8711.9011.91sha3384
11.8911.9011.90T:keccakc768
13.7013.7313.76T:jh256
13.7413.7513.77T:jh512
13.7613.7713.80T:jh224
13.7613.7913.80T:jh384
15.05?15.09?17.38?T:groestl512
15.75?15.80?22.31?T:round3jh256
15.7915.8015.89T:round3jh512
17.2417.2617.28T:keccakc1024
17.2817.2917.31sha3512
Cycles/byte for 576 bytes
25%50%75%hash
3.513.533.58T:blake2b
5.065.085.18T:k12
5.345.355.35T:blake2s
5.835.865.89T:skein512256
6.126.156.19T:skein512512
6.396.426.47T:blake64
6.37?6.51?8.95?sha512
6.69?6.74?9.47?blake512
7.537.557.65T:blake32
8.358.388.43T:skein256256
8.448.478.49shake128
8.518.518.52blake256
9.319.329.33T:keccakc256treed2
9.539.559.57T:bblake256
9.629.649.69sha384
10.1410.1510.20T:skein10241024
10.4210.4410.47sha3256
10.4710.5010.56shake256
10.7410.8110.86T:keccakc512
10.8310.8710.95T:keccakc448
10.8810.8810.99T:keccak
11.8411.9311.97T:groestl256
12.0212.0512.08sha224
12.0512.1312.24sha256
12.05?12.21?15.21?sha3224
12.1912.2112.24T:keccakc512treed2
12.7012.7612.79sha3384
12.8212.8312.94T:keccakc768
14.6514.6714.72T:jh512
14.6714.6914.74T:jh224
14.6514.7014.76T:jh256
14.6714.7214.76T:jh384
16.8516.8916.94T:round3jh256
16.9717.0117.05T:round3jh512
17.12?17.15?24.26?T:groestl512
18.9018.9318.97sha3512
18.9619.0519.10T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
5.31?5.44?7.52?T:blake2s
6.69?6.75?7.56?T:blake2b
11.3111.3811.44T:skein512256
12.9413.0613.31T:blake64
13.06?13.25?18.33?blake512
13.1213.2513.38T:skein256256
13.81?13.94?16.75?T:skein512512
14.25?14.50?20.08?T:k12
15.38?15.56?21.70?T:blake32
16.3116.3816.44blake256
13.94?18.78?19.20?sha512
19.6219.6919.94sha3384
19.6919.7519.94sha3512
19.6919.7520.00sha3224
19.81?20.12?22.31?sha3256
20.0620.1220.31shake256
20.31?20.38?28.61?shake128
21.1221.1921.25T:keccakc1024
21.2521.3121.62T:keccakc768
21.25?21.44?29.67?T:keccakc512
21.44?21.50?30.73?T:keccakc448
21.9422.0022.06T:keccak
26.7526.9427.25T:jh256
26.8827.0027.19T:jh384
26.8827.0627.31T:jh224
27.06?27.38?30.69?T:jh512
31.94?32.25?44.89?T:round3jh256
31.9432.3832.44T:round3jh512
32.7532.8833.00T:skein10241024
35.1935.7536.12T:groestl256
42.9443.1943.38sha384
43.4443.4443.56T:bblake256
45.2545.5045.75sha224
45.5046.0647.06sha256
48.88?49.25?69.06?T:groestl512
57.12?57.31?80.94?T:keccakc512treed2
57.2557.3157.44T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
47.50?48.50?67.12?T:blake2s
53.50?55.00?75.00?T:blake2b
71.0071.5074.50blake256
74.0074.5075.50T:skein256256
75.00?78.00?106.25?T:blake32
91.0092.5094.00T:skein512256
103.50105.00107.00T:blake64
105.00?108.00?147.25?blake512
112.50?117.00?160.25?T:k12
114.00?119.00?142.00?T:skein512512
100.50?139.00?142.38?sha512
155.50156.50158.00sha3384
156.00157.00158.00sha3512
157.00158.00158.50sha3224
159.00160.00160.50shake256
159.00160.00161.50shake128
158.50?161.50?178.00?sha3256
169.50170.00171.00T:keccakc1024
170.50171.00171.50T:keccakc768
172.50?173.00?243.12?T:keccakc448
168.50?174.00?238.00?T:keccakc512
175.50176.00176.50T:keccak
208.50209.50215.00T:groestl256
217.50218.00219.50T:jh256
217.50219.00221.00T:jh512
218.50220.00222.00T:jh224
217.00?220.50?306.62?T:jh384
262.00262.50263.50T:skein10241024
261.50263.00265.50T:round3jh512
259.50?267.00?365.50?T:round3jh256
287.00290.00292.50T:bblake256
293.50295.00297.50sha224
294.00296.00306.00sha256
343.50347.50348.50sha384
379.00?451.00?524.88?T:groestl512
457.00?458.50?648.12?T:keccakc512treed2
458.50459.00460.50T:keccakc256treed2