VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 3 (a50f00); 2021 AMD Ryzen 5 PRO 5650G; 6 x 3900MHz; cezanne, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
2.012.022.05sha224
3.043.083.09T:k12
3.413.433.45T:blake2b
3.843.853.86T:keccakc256treed2
4.204.244.28sha384
4.224.254.27sha512
4.354.364.36T:skein512512
4.374.374.37T:skein512256
4.524.564.64T:bblake256
4.544.574.61T:blake64
4.874.975.02blake512
5.185.195.21T:keccakc512treed2
5.255.265.27T:blake2s
5.505.515.53T:skein10241024
5.565.615.62shake128
5.645.655.65T:skein256256
6.346.376.37T:keccakc448
6.296.396.62T:blake32
6.526.566.68sha3224
6.666.686.70T:groestl256
6.956.977.00sha3256
6.727.037.04T:keccakc512
7.017.047.06shake256
7.277.397.57T:keccak
7.497.517.52blake256
9.209.279.43sha3384
9.239.319.33T:keccakc768
9.399.429.44T:groestl512
10.7110.7410.77T:jh512
10.7210.7510.77T:jh256
10.7210.7510.78T:jh224
10.6610.7510.93T:jh384
12.3112.3412.36T:round3jh512
12.3212.3412.36T:round3jh256
12.7112.8712.94sha3512
12.8912.9112.96T:keccakc1024
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
2.342.342.34sha224
3.253.253.25T:k12
3.423.433.43T:blake2b
4.464.464.46T:skein512256
4.484.484.48T:skein512512
4.524.524.52T:keccakc256treed2
4.724.734.75sha384
4.734.744.74sha512
4.764.784.79T:blake64
5.165.175.20T:bblake256
5.195.205.23blake512
5.255.265.26T:blake2s
5.555.555.56T:keccakc512treed2
5.715.725.72T:skein256256
5.735.735.74T:skein10241024
5.865.865.87shake128
6.526.546.63T:blake32
6.616.616.61T:keccakc448
6.826.836.88sha3224
6.966.966.97T:groestl256
7.247.257.26sha3256
7.257.267.27shake256
7.217.287.28T:keccakc512
7.637.637.64blake256
7.667.697.76T:keccak
9.309.309.38sha3384
9.299.329.32T:keccakc768
9.939.949.95T:groestl512
10.9210.9310.94T:jh512
10.9210.9310.94T:jh224
10.9310.9310.94T:jh256
10.9310.9411.02T:jh384
12.5312.5412.55T:round3jh512
12.5412.5512.55T:round3jh256
13.1713.1813.20T:keccakc1024
13.1713.1913.21sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
2.112.112.11sha256
2.882.892.89sha224
3.403.413.43T:blake2b
3.523.533.53T:k12
4.624.624.62T:skein512256
4.674.674.68T:skein512512
5.075.085.08T:blake64
5.225.225.23T:keccakc256treed2
5.255.255.26T:blake2s
5.555.555.57sha512
5.545.575.59sha384
5.635.665.70blake512
5.845.845.84T:skein256256
6.086.106.12T:skein10241024
6.146.156.16T:keccakc512treed2
6.166.176.19T:bblake256
6.276.286.29shake128
6.736.736.74T:keccakc448
6.786.816.85T:blake32
6.977.007.01sha3224
7.437.457.45T:groestl256
7.467.477.48shake256
7.557.557.56T:keccakc512
7.567.577.57sha3256
7.837.847.84blake256
8.108.178.18T:keccak
9.359.369.38T:keccakc768
9.389.399.39sha3384
10.8010.8210.84T:groestl512
11.2111.2311.25T:jh512
11.2311.2511.31T:jh384
11.2311.2511.26T:jh224
11.2311.2511.26T:jh256
12.8612.8812.89T:round3jh256
12.8812.8912.90T:round3jh512
13.6113.6213.66T:keccakc1024
13.6613.6713.68sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.272.272.27sha256
3.763.783.81T:blake2b
3.973.973.98T:k12
4.274.334.34sha224
5.045.045.05T:skein512256
5.205.205.21T:skein512512
5.225.235.25T:blake2s
5.415.435.43T:blake64
6.206.206.21T:skein256256
6.096.326.72blake512
6.746.776.79shake128
7.107.117.12T:keccakc256treed2
7.347.367.38sha512
7.327.407.44sha384
7.367.447.46T:blake32
7.717.747.75T:skein10241024
8.268.288.30T:keccakc448
8.368.388.39shake256
8.398.398.41blake256
8.418.418.44T:keccakc512
8.398.428.43T:keccak
8.568.578.58sha3256
8.688.728.74sha3224
8.718.728.73T:groestl256
9.159.199.23T:bblake256
9.469.499.51T:keccakc512treed2
9.9610.0110.06sha3384
10.0110.1010.13T:keccakc768
12.0312.0512.07T:jh512
12.0512.0612.09T:jh224
12.0512.0712.09T:jh256
12.0612.0812.13T:jh384
12.5112.5312.57T:groestl512
13.7713.8013.82T:round3jh256
13.7713.8013.82T:round3jh512
14.9614.9915.17T:keccakc1024
15.0815.1115.11sha3512
Cycles/byte for 64 bytes
25%50%75%hash
4.274.284.50sha256
4.985.035.06T:blake2s
7.097.167.23T:blake2b
10.2010.2010.20T:skein512256
10.8310.8310.84T:skein256256
11.45?11.47?13.62?T:k12
11.6111.6111.66T:skein512512
10.7211.8111.86T:blake64
11.73?13.64?13.84?blake512
14.9514.9815.02T:blake32
15.4815.5215.58blake256
15.7315.7815.88sha3384
15.8915.9216.08shake128
15.8615.9415.98shake256
15.9215.9415.97T:keccak
15.9215.9516.48T:keccakc512
15.9215.9516.48T:keccakc768
15.6216.0016.12T:keccakc1024
16.5216.5216.53T:keccakc448
17.6617.6717.73sha3512
17.6617.6917.70sha3256
17.9217.9718.05sha3224
22.3622.4422.55T:jh512
22.3922.4522.62T:jh384
22.4822.5622.70T:jh256
22.4822.5922.67T:jh224
22.0522.8023.02sha224
25.1225.1725.22T:skein10241024
25.3325.4125.50T:round3jh512
25.3625.4425.52T:round3jh256
25.3825.4725.53T:groestl256
31.1631.3331.62sha512
31.6132.1632.47sha384
37.3937.4537.61T:groestl512
43.1943.3143.42T:keccakc256treed2
43.1143.3443.89T:bblake256
43.5643.7045.16T:keccakc512treed2
Cycles/byte for 8 bytes
25%50%75%hash
24.3824.5024.62sha256
46.1246.5046.62T:blake2s
57.6258.1258.75T:blake2b
65.6265.6266.75T:skein256256
65.7565.8866.12T:blake32
68.3868.6268.75blake256
81.5081.7583.25T:skein512256
90.62?92.50?107.88?T:k12
92.7592.7594.25T:skein512512
88.1293.1295.75T:blake64
94.12?109.00?109.50?blake512
124.88125.62126.00sha3384
126.38126.50127.00T:keccakc1024
126.00126.62127.00shake128
126.38127.25127.38shake256
127.50127.50128.12T:keccakc512
127.50128.25133.00T:keccak
125.50130.50136.38T:keccakc768
131.88132.00134.25T:keccakc448
140.38140.38141.12sha3256
140.62140.75141.00sha3512
141.88142.38143.75sha3224
148.38148.50148.75T:groestl256
161.38166.88169.50sha224
180.75181.62182.62T:jh384
181.12181.88182.50T:jh512
183.25183.88184.50T:jh256
183.38184.25185.25T:jh224
202.12202.38203.25T:skein10241024
206.12207.00207.50T:round3jh512
206.25207.00208.12T:round3jh256
227.00?257.12?258.88?sha512
253.62258.00260.88sha384
270.50271.25272.00T:groestl512
285.00286.75291.50T:bblake256
345.75346.38346.88T:keccakc256treed2
349.75?351.12?452.50?T:keccakc512treed2