VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251222

[Page version: 20260503 04:13:03]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.447.447.44T:blake2b
9.649.649.66T:skein512256
9.649.659.65T:skein512512
9.739.749.75T:k12
10.5910.6010.61T:skein256256
11.2811.2911.32T:blake2s
11.6111.6211.63T:blake64
12.1112.1112.14T:blake32
12.7012.7212.73blake512
13.3613.3913.47blake256
14.4214.4214.51T:keccakc256treed2
7.38?14.68?15.69?T:bblake256
17.3117.3517.36T:skein10241024
17.9918.0118.03shake128
19.0019.0119.02T:keccakc512treed2
20.5020.5120.52T:keccakc448
20.5220.5220.54sha512
20.9620.9821.00sha3224
22.0222.0322.05T:keccakc512
22.4222.4422.48shake256
22.44?22.94?52.13?sha3256
23.6323.6323.64T:keccak
27.3627.3827.40T:jh224
27.3727.3827.39T:jh256
27.3727.3827.38T:jh512
27.3727.3827.39T:jh384
29.2329.2529.99T:keccakc768
29.8129.8229.84sha3384
30.2330.2530.27sha256
31.0231.0331.05T:round3jh256
31.0231.0331.09T:round3jh512
41.2441.2541.25T:keccakc1024
41.5541.5841.61sha3512
85.8686.0086.90T:groestl256
131.50131.88133.33T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
7.507.507.50T:blake2b
9.879.879.88T:skein512256
10.0310.0310.03T:skein512512
10.3710.3710.37T:k12
10.8610.8610.86T:skein256256
11.3111.3111.32T:blake2s
12.1012.1112.11T:blake64
12.4012.4012.41T:blake32
13.2413.2413.24blake512
13.7113.7113.75blake256
16.8316.8416.91T:bblake256
17.0617.0617.10T:keccakc256treed2
18.1018.1018.11T:skein10241024
18.8218.8218.82shake128
20.4620.4620.46T:keccakc512treed2
21.2521.2521.26sha512
21.5821.5821.58T:keccakc448
21.7521.7621.77sha3224
23.0923.0923.10T:keccakc512
23.2323.2323.25shake256
23.23?23.47?38.06?sha3256
24.6824.6924.69T:keccak
27.8627.8627.87T:jh224
27.8627.8627.87T:jh256
27.8627.8627.87T:jh384
27.8727.8727.87T:jh512
29.5829.5829.95T:keccakc768
29.8729.8729.88sha3384
30.7830.7930.80sha256
31.5931.5931.60T:round3jh256
31.5931.5931.62T:round3jh512
42.2742.2742.27T:keccakc1024
42.3942.3942.40sha3512
88.2588.2888.65T:groestl256
138.12138.19138.89T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
7.587.597.59T:blake2b
10.2410.2410.25T:skein512256
10.6610.6610.66T:skein512512
11.2911.2911.29T:skein256256
11.3411.3411.35T:blake2s
11.4111.4211.44T:k12
12.8812.8812.88T:blake32
12.9212.9212.93T:blake64
14.1014.1014.10blake512
14.2414.2514.30blake256
18.9618.9819.03T:bblake256
19.3519.3519.92T:skein10241024
19.8919.8919.90T:keccakc256treed2
20.1620.1620.17shake128
22.0622.0622.08sha3224
22.4122.4122.42T:keccakc448
22.4622.4622.76sha512
22.8722.8722.87T:keccakc512treed2
24.0224.0324.06sha3256
24.0724.0724.09shake256
24.3924.4024.66T:keccakc512
26.4426.4426.44T:keccak
28.6828.6828.69T:jh224
28.6828.6828.70T:jh256
28.6828.6828.70T:jh384
28.6928.6928.69T:jh512
29.9629.9629.97sha3384
30.1230.1330.14T:keccakc768
31.6831.6831.69sha256
32.5232.5232.55T:round3jh256
32.5332.5332.54T:round3jh512
43.9843.9843.99T:keccakc1024
43.72?61.92?86.59?sha3512
92.0192.0492.07T:groestl256
148.65148.72148.96T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
8.608.608.60T:blake2b
11.22?11.36?18.98?T:skein512256
11.4111.4211.44T:blake2s
12.3412.3412.34T:skein512512
12.4612.4612.46T:skein256256
13.0913.0913.11T:k12
13.8813.8913.90T:blake64
14.1714.1714.18T:blake32
15.0015.0015.01blake512
15.6515.6715.69blake256
21.7521.7521.76shake128
23.4323.4323.44sha512
24.6824.7024.73T:skein10241024
24.7024.7324.80T:bblake256
26.7726.7826.82sha3224
26.8226.8226.82sha3256
27.0127.0127.02shake256
27.4227.4227.42T:keccakc256treed2
28.3228.3228.36T:keccakc448
28.4928.5028.52T:keccakc512
28.6528.6528.65T:keccak
30.8530.8530.85T:jh224
30.8530.8530.86T:jh256
30.8630.8630.86T:jh384
30.8830.8830.90T:jh512
32.1532.1532.16sha3384
33.4933.4933.49T:keccakc768
34.0234.0234.07sha256
35.0135.0135.01T:round3jh256
35.0335.0335.04T:round3jh512
35.5135.5135.51T:keccakc512treed2
47.8147.8147.82sha3512
49.0949.0949.11T:keccakc1024
101.14101.40101.46T:groestl256
162.58162.70162.74T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
12.2512.2512.33T:blake2s
17.7217.7217.79T:blake2b
23.1923.1923.19T:skein512256
27.0327.0327.08T:skein256256
30.2830.2830.60T:blake32
30.4130.4430.50T:blake64
33.2233.2233.37blake512
33.3433.3433.34T:skein512512
33.6633.7534.23blake256
39.3539.4239.62T:k12
46.5046.5346.61sha512
49.3849.3849.62sha3256
49.3349.4349.58sha3224
50.3650.3650.69sha3384
50.4250.4250.68sha3512
51.3051.3051.68shake256
51.4251.4251.80shake128
58.3858.3858.62T:jh256
58.3958.3958.63T:jh224
58.4158.4158.53T:jh384
58.6658.6658.88T:jh512
63.5663.5663.64T:keccakc1024
64.7264.7264.80T:keccakc768
65.1565.1665.56sha256
65.8865.8865.88T:keccakc512
66.1266.1266.20T:keccak
66.4266.4266.43T:keccakc448
66.7566.7567.04T:round3jh256
67.0067.0067.94T:round3jh512
81.0981.1781.34T:skein10241024
97.2097.4798.11T:bblake256
167.38167.38167.73T:keccakc512treed2
169.11169.11169.24T:keccakc256treed2
221.48222.33222.70T:groestl256
404.88405.72406.79T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
99.3899.41101.85T:blake2s
136.25136.25139.20T:blake2b
149.12149.12151.65T:blake32
163.78164.77166.95blake256
169.38?172.06?266.19?T:skein256256
183.25183.31184.88T:skein512256
248.74250.62250.82T:blake64
264.50264.50266.01T:skein512512
265.75265.75268.09blake512
277.46277.62279.00sha256
315.66316.10318.24T:k12
373.12373.12374.87sha512
392.75392.75395.08sha3256
392.38393.08397.46sha3224
401.00401.00403.02sha3384
403.00?403.27?595.64?sha3512
408.88408.88411.74shake256
409.88409.88413.06shake128
470.00470.00471.23T:jh256
470.25470.25472.35T:jh384
469.62470.58472.06T:jh224
472.00472.00472.61T:jh512
505.00505.00506.25T:keccakc1024
514.25514.25516.27T:keccakc768
523.50523.50524.26T:keccakc512
525.50525.50526.74T:keccak
527.88527.88529.13T:keccakc448
544.50544.50544.84T:round3jh256
546.50546.50546.84T:round3jh512
647.62647.62651.17T:skein10241024
658.75661.16664.61T:bblake256
1097.321102.361106.98T:groestl256
1336.881336.881339.91T:keccakc512treed2
1350.621350.621354.17T:keccakc256treed2
3249.303259.503265.87T:groestl512