VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20251114

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.447.447.44T:blake2b
9.649.659.66T:skein512256
9.649.659.65T:skein512512
9.739.749.75T:k12
10.5910.6010.60T:skein256256
11.2811.2911.31T:blake2s
11.6111.6211.63T:blake64
12.1112.1112.12T:blake32
12.7212.7212.72blake512
13.3813.3913.41blake256
14.4214.4214.43T:keccakc256treed2
6.51?15.48?15.56?T:bblake256
17.3317.3517.36T:skein10241024
18.0018.0118.02shake128
19.0119.0119.02T:keccakc512treed2
20.5020.5120.52T:keccakc448
20.5220.5220.53sha512
20.9620.9720.99sha3224
22.0222.0322.04T:keccakc512
22.4222.4422.48shake256
22.45?22.47?56.84?sha3256
23.6323.6323.64T:keccak
27.3727.3827.38T:jh256
27.3827.3827.38T:jh384
27.3827.3827.38T:jh512
27.3827.3827.38T:jh224
29.2429.2529.29T:keccakc768
29.8129.8229.83sha3384
30.2430.2530.26sha256
31.0231.0331.04T:round3jh256
31.0231.0331.06T:round3jh512
41.2441.2541.25T:keccakc1024
41.5641.5841.60sha3512
85.9086.0286.54T:groestl256
131.70131.91132.26T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
7.507.507.50T:blake2b
9.879.879.87T:skein512256
10.0310.0310.03T:skein512512
10.3710.3710.37T:k12
10.8610.8610.86T:skein256256
11.3111.3111.32T:blake2s
12.1112.1112.11T:blake64
12.4012.4012.40T:blake32
13.2413.2413.24blake512
13.7113.7113.72blake256
16.8316.8416.85T:bblake256
17.0617.0617.07T:keccakc256treed2
18.1018.1018.10T:skein10241024
18.8218.8218.82shake128
20.4620.4620.46T:keccakc512treed2
21.2521.2521.25sha512
21.5821.5821.58T:keccakc448
21.7521.7621.76sha3224
23.0923.0923.10T:keccakc512
23.2323.2323.25shake256
23.23?23.23?40.42?sha3256
24.6824.6824.69T:keccak
27.8627.8627.87T:jh224
27.8627.8627.87T:jh256
27.8627.8627.86T:jh384
27.8727.8727.87T:jh512
29.5829.5829.60T:keccakc768
29.8729.8729.87sha3384
30.7830.7930.79sha256
31.5931.5931.59T:round3jh256
31.5931.5931.61T:round3jh512
42.2742.2742.27T:keccakc1024
42.3942.3942.39sha3512
88.2588.2888.44T:groestl256
138.12138.20138.36T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
7.587.597.59T:blake2b
10.2410.2410.25T:skein512256
10.6610.6610.66T:skein512512
11.2911.2911.29T:skein256256
11.3411.3411.35T:blake2s
11.4111.4111.42T:k12
12.8812.8812.88T:blake32
12.9112.9212.93T:blake64
14.1014.1014.10blake512
14.2414.2514.26blake256
18.9718.9819.00T:bblake256
19.3519.3519.45T:skein10241024
19.8919.9019.90T:keccakc256treed2
20.1620.1620.17shake128
22.0622.0622.07sha3224
22.4122.4122.42T:keccakc448
22.4622.4622.49sha512
22.8722.8722.87T:keccakc512treed2
24.0224.0324.05sha3256
24.0724.0724.08shake256
24.3824.4024.44T:keccakc512
26.4426.4426.44T:keccak
28.6828.6828.68T:jh224
28.6828.6828.69T:jh256
28.6828.6828.68T:jh384
28.6928.6928.69T:jh512
29.9629.9629.97sha3384
30.1230.1330.13T:keccakc768
31.6831.6831.69sha256
32.5232.5232.53T:round3jh256
32.5332.5332.54T:round3jh512
43.9843.9843.98T:keccakc1024
43.72?65.40?88.24?sha3512
92.0192.0592.08T:groestl256
148.67148.71148.81T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
8.608.608.60T:blake2b
11.22?11.23?19.32?T:skein512256
11.4111.4211.43T:blake2s
12.3412.3412.34T:skein512512
12.4612.4612.46T:skein256256
13.0913.0913.11T:k12
13.8813.8913.90T:blake64
14.1714.1714.17T:blake32
15.0015.0015.00blake512
15.6515.6615.68blake256
21.7521.7521.75shake128
23.4323.4323.44sha512
24.6824.7024.70T:skein10241024
24.7024.7324.78T:bblake256
26.7726.7926.79sha3224
26.8226.8226.82sha3256
27.0127.0127.01shake256
27.4227.4227.42T:keccakc256treed2
28.3228.3228.32T:keccakc448
28.5028.5028.51T:keccakc512
28.6528.6528.65T:keccak
30.8530.8530.85T:jh224
30.8530.8530.85T:jh256
30.8630.8630.86T:jh384
30.8830.8830.88T:jh512
32.1532.1532.15sha3384
33.4933.4933.49T:keccakc768
34.0234.0234.03sha256
35.0135.0135.01T:round3jh256
35.0335.0335.03T:round3jh512
35.5135.5135.51T:keccakc512treed2
47.8147.8147.81sha3512
49.0949.0949.09T:keccakc1024
101.06101.39101.44T:groestl256
162.55162.70162.74T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
12.2512.2512.30T:blake2s
17.7217.7217.72T:blake2b
23.1923.1923.19T:skein512256
27.0327.0327.03T:skein256256
30.2830.2830.28T:blake32
30.4130.4430.50T:blake64
33.2233.2233.22blake512
33.3433.3433.34T:skein512512
33.6633.7533.84blake256
39.3439.4239.64T:k12
46.5046.5046.59sha512
49.3849.3849.38sha3256
49.3349.4449.44sha3224
50.3650.3650.36sha3384
50.4250.4250.42sha3512
51.3051.3051.30shake256
51.4251.4251.42shake128
58.3858.3858.38T:jh256
58.3958.3958.39T:jh224
58.4158.4158.41T:jh384
58.6658.6658.66T:jh512
63.5663.5663.56T:keccakc1024
64.7264.7264.72T:keccakc768
65.1665.1665.23sha256
65.8865.8865.88T:keccakc512
66.1266.1266.12T:keccak
66.4266.4266.42T:keccakc448
66.7566.7566.75T:round3jh256
67.0067.0067.28T:round3jh512
81.0981.0981.31T:skein10241024
97.2097.4298.00T:bblake256
167.38167.38167.59T:keccakc512treed2
169.11169.11169.11T:keccakc256treed2
221.75222.25222.48T:groestl256
404.78405.52406.72T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
99.3899.3899.50T:blake2s
136.25136.25138.62T:blake2b
149.12149.12149.12T:blake32
163.75164.75166.12blake256
169.38?171.12?265.00?T:skein256256
183.25183.25185.25T:skein512256
247.50250.62250.62T:blake64
264.50264.50267.00T:skein512512
265.75265.75267.75blake512
277.50277.62279.12sha256
315.50315.88318.00T:k12
373.12373.12375.38sha512
392.75392.75395.12sha3256
392.38393.25396.62sha3224
401.00401.00403.25sha3384
403.00?403.00?575.00?sha3512
408.88408.88411.12shake256
409.88409.88412.12shake128
470.00470.00471.88T:jh256
470.25470.25472.50T:jh384
469.62471.38471.88T:jh224
472.00472.00472.00T:jh512
505.00505.00507.00T:keccakc1024
514.25514.25516.50T:keccakc768
523.50523.50523.50T:keccakc512
525.50525.50527.50T:keccak
527.88527.88529.88T:keccakc448
544.50544.50544.50T:round3jh256
546.50546.50546.50T:round3jh512
647.62647.62649.50T:skein10241024
658.75661.00664.12T:bblake256
1097.621103.121106.12T:groestl256
1336.881336.881339.12T:keccakc512treed2
1350.621350.621352.88T:keccakc256treed2
3248.753260.753266.38T:groestl512