VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20260330

[Page version: 20261005 20:08:48]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.73?7.44?7.45?T:blake2b
9.559.669.90T:k12
10.1510.1710.24T:skein512256
10.3410.3910.41T:skein512512
11.2611.2811.33T:blake2s
12.0912.1112.24T:blake32
12.4412.4512.48T:blake64
12.4412.4712.55T:skein256256
13.3713.3913.52blake256
13.5213.5313.56blake512
14.4114.4414.57T:keccakc256treed2
15.5215.5515.89T:bblake256
17.9818.3918.95shake128
18.8818.8919.09T:keccakc512treed2
18.9919.3419.72sha512
19.1419.5119.86T:skein10241024
20.9220.9321.53T:keccakc448
21.3721.4121.87sha3224
22.2822.4323.04T:keccakc512
22.4622.9023.38shake256
22.8322.9023.79sha3256
22.9923.8925.09T:keccak
27.0427.0627.17T:jh256
27.0327.0627.25T:jh512
27.0327.0727.39T:jh224
27.0427.0828.34T:jh384
29.6129.7331.25T:keccakc768
30.2930.3530.93sha256
30.0230.4731.71sha3384
30.5230.5830.78T:round3jh256
30.5430.5930.80T:round3jh512
40.6341.7344.48T:keccakc1024
41.6142.5045.11sha3512
90.8593.0595.30T:groestl256
123.73130.37132.48T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
7.497.497.50T:blake2b
10.2810.2810.40T:k12
10.5010.5010.53T:skein512256
10.6810.6810.69T:skein512512
11.3111.3111.33T:blake2s
12.4012.4012.46T:blake32
12.6912.6912.73T:skein256256
12.9812.9812.99T:blake64
13.7113.7113.77blake256
14.0814.0814.10blake512
16.8316.8317.00T:bblake256
17.0817.0817.15T:keccakc256treed2
19.2119.2119.50shake128
20.0720.0720.26sha512
20.3320.3320.50T:skein10241024
20.4320.4320.53T:keccakc512treed2
21.8721.8722.17T:keccakc448
22.2022.2022.43sha3224
23.3623.3823.67T:keccakc512
23.6823.6924.12sha3256
23.7023.7023.94shake256
24.8524.8625.45T:keccak
27.5627.5627.61T:jh256
27.5627.5627.72T:jh224
27.5627.5627.66T:jh512
27.5627.5728.20T:jh384
29.9629.9730.73T:keccakc768
30.4930.5031.12sha3384
30.8830.8831.17sha256
31.1531.1531.25T:round3jh256
31.1531.1631.26T:round3jh512
42.6042.6444.00T:keccakc1024
43.2643.2844.58sha3512
94.5995.0096.07T:groestl256
137.40139.03139.82T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
7.577.577.58T:blake2b
11.0411.0411.06T:skein512256
11.1611.1711.22T:skein512512
11.3111.3111.35T:k12
11.3411.3511.36T:blake2s
12.8812.8912.89T:blake32
13.0613.0713.07T:skein256256
13.8513.8513.85T:blake64
14.2414.2414.28blake256
15.0015.0115.03blake512
18.9518.9719.00T:bblake256
20.1020.1020.12T:keccakc256treed2
20.5720.5720.60shake128
21.2821.2922.08sha512
21.6821.6921.70T:skein10241024
22.4622.4622.62T:keccakc448
22.5022.5022.58sha3224
23.0023.0023.02T:keccakc512treed2
24.4924.4924.52sha3256
24.4724.5024.59T:keccakc512
24.5524.5524.64shake256
26.4426.4626.56T:keccak
28.3828.3828.44T:jh384
28.3828.3928.41T:jh256
28.3928.3928.47T:jh224
28.3928.3928.47T:jh512
30.3530.3730.40T:keccakc768
30.5630.5630.59sha3384
31.7631.7631.80sha256
32.0932.0932.11T:round3jh256
32.1032.1032.15T:round3jh512
44.1644.1844.34T:keccakc1024
44.59?46.28?83.35?sha3512
98.3298.4999.94T:groestl256
153.83154.29158.60T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
8.588.588.59T:blake2b
11.4111.4211.44T:blake2s
12.4112.4212.48T:skein512512
12.4912.4912.49T:skein512256
12.9712.9712.99T:k12
14.0614.0614.09T:skein256256
14.1714.1714.17T:blake32
14.9414.9414.94T:blake64
15.6615.6615.68blake256
16.0716.0816.10blake512
22.1922.1922.21shake128
22.4822.4822.58sha512
24.6624.6924.72T:bblake256
27.3127.3127.37sha3224
27.3527.3527.38sha3256
27.4527.4627.60T:skein10241024
27.5127.5127.51shake256
27.8627.8627.86T:keccakc448
28.1628.1628.24T:keccakc256treed2
28.1028.1628.16T:keccakc512
28.2028.2328.43T:keccak
30.5930.5930.59T:jh384
30.5930.5930.60T:jh256
30.5930.5930.65T:jh224
30.6130.6130.63T:jh512
32.7232.7232.79sha3384
33.3533.4033.70T:keccakc768
34.1334.1534.22sha256
34.6234.6234.65T:round3jh256
34.6534.6534.69T:round3jh512
35.4835.4835.52T:keccakc512treed2
48.7148.7148.74sha3512
48.9648.9949.09T:keccakc1024
108.38108.55109.98T:groestl256
183.57184.26187.67T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
12.2012.2312.58T:blake2s
17.48?17.48?20.58?T:blake2b
26.1726.1726.17T:skein256256
27.8627.8627.86T:skein512512
29.9829.9830.19T:blake32
30.1730.1730.17T:skein512256
33.2233.2233.22T:blake64
33.6133.6133.94blake256
34.9134.9134.96blake512
39.1939.1939.25T:k12
47.4747.4747.68sha512
50.0850.0850.36sha3224
50.1450.1450.56sha3384
50.2050.2050.49sha3512
50.2850.2850.65sha3256
51.78?51.78?84.26?shake256
52.2852.2852.86shake128
58.5858.5858.80T:jh384
58.5958.6359.24T:jh256
58.7358.7358.97T:jh224
58.9258.9259.16T:jh512
60.2360.2360.42T:keccakc768
60.4260.4260.47T:keccakc448
60.4860.5060.66T:keccak
60.5260.5260.52T:keccakc512
61.8961.8962.28T:keccakc1024
65.4265.4866.25sha256
66.8066.8067.28T:round3jh256
67.0567.0567.53T:round3jh512
90.0490.0790.18T:skein10241024
97.2597.4898.20T:bblake256
168.05?168.60?268.79?T:keccakc512treed2
170.61170.61171.05T:keccakc256treed2
237.32238.37239.77T:groestl256
638.48645.12653.14T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
99.56?100.61?127.88?T:blake2s
134.38134.38137.38T:blake2b
143.50143.50144.97T:blake32
155.12155.12158.97T:skein256256
163.19163.29165.47blake256
217.38217.38220.47T:skein512512
235.12235.12237.62T:skein512256
266.38266.38269.11T:blake64
275.25275.50279.00sha256
282.12282.12283.76blake512
309.62309.62311.21T:k12
377.62377.62379.62sha512
398.12398.12401.89sha3224
398.62398.62402.45sha3384
399.12399.12402.26sha3512
399.75399.83403.06sha3256
411.75411.75414.57shake256
417.88417.88421.06shake128
465.88465.88465.88T:jh384
465.88466.15467.62T:jh256
466.50466.50466.50T:jh224
467.88467.88468.88T:jh512
472.83472.88473.26T:keccakc1024
476.75476.75476.75T:keccakc448
477.62477.62477.62T:keccakc512
481.12481.12481.12T:keccakc768
481.62481.75482.91T:keccak
534.00534.00534.00T:round3jh256
536.00536.00536.00T:round3jh512
659.02660.85663.69T:bblake256
717.72718.20722.27T:skein10241024
1165.381170.061183.69T:groestl256
1330.36?1348.10?2120.01?T:keccakc512treed2
1350.751350.751356.33T:keccakc256treed2
5134.495184.435231.04T:groestl512