VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20250307

[Page version: 20250328 20:58:04]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha224
2.022.022.02sha256
3.043.083.09T:k12
3.413.433.45T:blake2b
3.843.853.86T:keccakc256treed2
4.224.234.24sha384
4.234.234.24sha512
4.354.364.37T:skein512512
4.374.384.39T:skein512256
4.384.414.43T:bblake256
4.544.574.61T:blake64
4.924.975.09blake512
5.185.195.21T:keccakc512treed2
5.255.265.27T:blake2s
5.505.515.53T:skein10241024
5.565.615.62shake128
5.645.655.65T:skein256256
6.346.376.37T:keccakc448
6.296.396.62T:blake32
6.526.566.68sha3224
6.656.686.70T:groestl256
6.956.977.00sha3256
6.727.037.04T:keccakc512
7.017.047.06shake256
7.277.397.57T:keccak
7.507.517.52blake256
9.209.279.43sha3384
9.239.319.33T:keccakc768
9.399.419.44T:groestl512
10.7110.7410.77T:jh512
10.7210.7510.77T:jh256
10.7210.7510.78T:jh224
10.6610.7510.93T:jh384
12.3112.3412.36T:round3jh512
12.3212.3412.36T:round3jh256
12.7112.8712.94sha3512
12.8912.9112.96T:keccakc1024
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
2.082.082.08sha224
3.253.253.25T:k12
3.423.433.43T:blake2b
4.414.414.41sha384
4.414.414.42sha512
4.464.464.47T:skein512256
4.484.484.48T:skein512512
4.524.524.52T:keccakc256treed2
4.764.784.79T:blake64
4.974.984.99T:bblake256
5.215.235.26blake512
5.255.265.26T:blake2s
5.555.555.56T:keccakc512treed2
5.715.725.72T:skein256256
5.735.735.74T:skein10241024
5.865.865.87shake128
6.526.546.63T:blake32
6.616.616.61T:keccakc448
6.826.836.88sha3224
6.966.966.97T:groestl256
7.247.257.26sha3256
7.257.267.27shake256
7.217.287.28T:keccakc512
7.637.637.64blake256
7.667.697.76T:keccak
9.309.309.38sha3384
9.299.329.32T:keccakc768
9.939.949.95T:groestl512
10.9210.9310.94T:jh512
10.9210.9310.94T:jh224
10.9310.9310.94T:jh256
10.9310.9411.02T:jh384
12.5312.5412.55T:round3jh512
12.5412.5512.55T:round3jh256
13.1713.1813.20T:keccakc1024
13.1713.1913.21sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
2.112.112.11sha256
2.192.192.19sha224
3.403.413.43T:blake2b
3.523.533.53T:k12
4.624.624.62T:skein512256
4.674.674.69T:skein512512
4.714.714.72sha384
4.724.724.72sha512
5.075.085.08T:blake64
5.225.225.23T:keccakc256treed2
5.255.255.26T:blake2s
5.655.675.69blake512
5.845.845.84T:skein256256
5.915.925.93T:bblake256
6.086.106.12T:skein10241024
6.146.156.16T:keccakc512treed2
6.276.286.29shake128
6.736.736.74T:keccakc448
6.786.816.85T:blake32
6.977.007.01sha3224
7.437.447.45T:groestl256
7.467.477.48shake256
7.557.557.56T:keccakc512
7.567.577.57sha3256
7.837.847.85blake256
8.108.178.18T:keccak
9.359.369.38T:keccakc768
9.389.399.39sha3384
10.8010.8110.84T:groestl512
11.2111.2311.25T:jh512
11.2311.2511.31T:jh384
11.2311.2511.26T:jh224
11.2311.2511.26T:jh256
12.8612.8812.89T:round3jh256
12.8812.8912.90T:round3jh512
13.6113.6213.66T:keccakc1024
13.6613.6713.68sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.272.272.27sha256
2.472.472.47sha224
3.763.783.81T:blake2b
3.973.973.98T:k12
5.045.055.05T:skein512256
5.105.115.11sha384
5.125.135.15sha512
5.205.205.23T:skein512512
5.225.235.25T:blake2s
5.415.435.43T:blake64
5.986.106.36blake512
6.206.206.21T:skein256256
6.746.776.79shake128
7.107.117.12T:keccakc256treed2
7.367.447.46T:blake32
7.717.747.75T:skein10241024
8.268.288.30T:keccakc448
8.368.388.39shake256
8.398.408.41blake256
8.418.418.44T:keccakc512
8.398.428.43T:keccak
8.568.578.58sha3256
8.688.728.74sha3224
8.718.738.75T:groestl256
8.788.828.84T:bblake256
9.469.499.51T:keccakc512treed2
9.9610.0110.06sha3384
10.0110.1010.13T:keccakc768
12.0312.0512.07T:jh512
12.0512.0612.09T:jh224
12.0512.0712.09T:jh256
12.0612.0812.13T:jh384
12.5212.5512.57T:groestl512
13.7713.8013.82T:round3jh256
13.7713.8013.82T:round3jh512
14.9614.9915.17T:keccakc1024
15.0815.1115.11sha3512
Cycles/byte for 64 bytes
25%50%75%hash
4.274.284.50sha256
4.985.035.06T:blake2s
6.126.146.16sha224
7.097.167.23T:blake2b
10.2010.2310.23T:skein512256
10.8310.8310.84T:skein256256
11.45?11.47?13.62?T:k12
11.6111.6211.94T:skein512512
11.7011.7311.77sha384
10.7211.8111.86T:blake64
11.8411.8811.97sha512
12.12?13.66?13.77?blake512
14.9514.9815.02T:blake32
15.5615.5815.61blake256
15.7315.7815.88sha3384
15.8915.9216.08shake128
15.8615.9415.98shake256
15.9215.9415.97T:keccak
15.9215.9516.48T:keccakc512
15.9215.9516.48T:keccakc768
15.6216.0016.12T:keccakc1024
16.5216.5216.53T:keccakc448
17.6617.6717.73sha3512
17.6617.6917.70sha3256
17.9217.9718.05sha3224
22.3622.4422.55T:jh512
22.3922.4522.62T:jh384
22.4822.5622.70T:jh256
22.4822.5922.67T:jh224
25.1225.1725.22T:skein10241024
25.3325.4125.50T:round3jh512
25.3825.4125.44T:groestl256
25.3625.4425.52T:round3jh256
37.4137.4837.56T:groestl512
42.6442.7843.03T:bblake256
43.1943.3143.42T:keccakc256treed2
43.5643.7045.16T:keccakc512treed2
Cycles/byte for 8 bytes
25%50%75%hash
24.3824.5024.62sha256
31.5031.6231.62sha224
46.1246.5046.62T:blake2s
57.6258.1258.75T:blake2b
65.6265.6266.75T:skein256256
65.7565.8866.12T:blake32
68.6268.8869.12blake256
81.5081.5083.00T:skein512256
90.62?92.50?107.88?T:k12
92.7592.7594.25T:skein512512
88.1293.1295.75T:blake64
92.7593.8894.38sha384
94.7595.1295.62sha512
98.62?110.00?110.38?blake512
124.88125.62126.00sha3384
126.38126.50127.00T:keccakc1024
126.00126.62127.00shake128
126.38127.25127.38shake256
127.50127.50128.12T:keccakc512
127.50128.25133.00T:keccak
125.50130.50136.38T:keccakc768
131.88132.00134.25T:keccakc448
140.38140.38141.12sha3256
140.62140.75141.00sha3512
141.88142.38143.75sha3224
148.12148.62148.88T:groestl256
180.75181.62182.62T:jh384
181.12181.88182.50T:jh512
183.25183.88184.50T:jh256
183.38184.25185.25T:jh224
202.12202.38203.25T:skein10241024
206.12207.00207.50T:round3jh512
206.25207.00208.12T:round3jh256
271.25271.88273.25T:groestl512
282.12283.12285.25T:bblake256
345.75346.38346.88T:keccakc256treed2
349.75?351.12?452.50?T:keccakc512treed2