VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Bonnell (106ca); 2011 Intel Atom N435; 1 x 1330MHz; h4atom, supercop-20250922

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.427.467.48T:blake2b
9.699.729.75T:k12
10.3810.3910.40T:skein512256
10.4010.4210.44T:skein512512
10.6210.6510.67T:skein256256
11.2811.3011.32T:blake2s
12.1112.1312.15T:blake32
12.4712.4912.52T:blake64
13.3913.4013.42blake256
13.5113.5413.57blake512
14.2914.3614.45sha384
14.4414.4614.50T:keccakc256treed2
15.5315.5615.73T:bblake256
18.3518.4318.53sha224
18.2718.4618.61sha256
18.4418.4818.51shake128
18.8518.8818.90T:keccakc512treed2
19.2019.2319.26sha512
19.5919.6219.69T:skein10241024
20.9721.0021.04T:keccakc448
21.4721.5021.56sha3224
22.4722.5022.53T:keccakc512
22.9823.0123.04shake256
22.9923.0323.06sha3256
23.9423.9924.03T:keccak
27.4827.5127.53T:jh256
27.4827.5127.52T:jh384
27.4827.5127.53T:jh224
27.4827.5127.54T:jh512
29.7929.8329.98T:keccakc768
30.5430.5930.63sha3384
31.7531.7731.80T:round3jh256
31.7531.7831.80T:round3jh512
41.7241.7641.81T:keccakc1024
42.6242.6742.71sha3512
93.4793.5593.65T:groestl256
138.87139.07139.31T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
7.527.537.53T:blake2b
10.3210.3210.33T:k12
10.7110.7110.72T:skein512512
10.7310.7310.74T:skein512256
10.8910.9010.91T:skein256256
11.3211.3311.33T:blake2s
12.4412.4512.45T:blake32
13.0013.0113.02T:blake64
13.7213.7313.73blake256
14.0914.1014.11blake512
16.8316.8416.92T:bblake256
17.1017.1117.12T:keccakc256treed2
17.2517.2717.29sha384
19.3019.3019.32shake128
19.9519.9619.97sha512
20.4220.4320.44T:keccakc512treed2
20.4320.4420.47T:skein10241024
21.0321.0521.08sha224
21.0421.0721.11sha256
21.9621.9721.98T:keccakc448
22.3022.3122.32sha3224
23.4623.4723.47T:keccakc512
23.7923.8023.81sha3256
23.8123.8223.83shake256
24.9424.9524.96T:keccak
28.0028.0128.02T:jh512
28.0028.0128.01T:jh224
28.0128.0128.02T:jh256
28.0128.0128.02T:jh384
30.0730.0830.15T:keccakc768
30.6330.6430.65sha3384
32.3632.3632.37T:round3jh256
32.3632.3732.38T:round3jh512
42.7342.7442.75T:keccakc1024
43.4543.4643.47sha3512
95.8095.8295.86T:groestl256
145.72145.78145.88T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
7.617.627.63T:blake2b
11.2011.2111.22T:skein512512
11.2911.3011.30T:skein512256
11.3211.3211.33T:skein256256
11.3411.3611.40T:k12
11.3611.3711.37T:blake2s
12.9612.9712.99T:blake32
13.8713.8813.89T:blake64
14.2614.2614.27blake256
15.0215.0315.04blake512
18.9618.9718.99T:bblake256
20.1220.1320.14T:keccakc256treed2
20.6720.6920.71shake128
21.1621.1721.19sha512
21.7921.8121.82T:skein10241024
22.0322.0822.13sha384
22.5622.5722.59T:keccakc448
22.6122.6222.65sha3224
23.0023.0123.03T:keccakc512treed2
24.5824.6024.62T:keccakc512
24.6024.6124.63sha3256
24.6524.6724.69shake256
25.3125.3625.42sha224
25.3725.4625.57sha256
26.5326.5526.57T:keccak
28.8328.8428.85T:jh512
28.8328.8428.86T:jh224
28.8428.8528.87T:jh256
28.8528.8628.88T:jh384
30.4430.4630.50T:keccakc768
30.6830.7030.73sha3384
33.3333.3433.35T:round3jh256
33.3433.3533.36T:round3jh512
44.3344.3544.37T:keccakc1024
44.7744.7844.81sha3512
99.6599.6899.72T:groestl256
156.97157.03157.10T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
8.628.668.68T:blake2b
11.4211.4411.46T:blake2s
12.4412.4612.48T:skein256256
12.4912.5112.52T:skein512512
12.7712.8012.82T:skein512256
12.9412.9713.02T:k12
14.3514.3814.39T:blake32
14.9214.9414.97T:blake64
15.6915.7015.71blake256
16.1016.1216.15blake512
22.3122.3322.35shake128
22.3522.3722.42sha512
24.6724.6924.74T:bblake256
27.4527.4727.52sha3256
27.4527.4927.56sha3224
27.6427.6727.70shake256
27.7027.7327.76T:skein10241024
27.9928.0228.05T:keccakc448
28.1528.1728.19T:keccakc256treed2
28.1628.1928.26T:keccakc512
28.2728.3128.34T:keccak
31.0331.0531.07T:jh512
31.0631.0731.09T:jh224
31.0631.0831.11T:jh384
31.0731.0831.11T:jh256
32.8832.9032.95sha3384
33.3733.4133.43T:keccakc768
33.6033.7533.81sha384
35.5035.5235.54T:keccakc512treed2
35.9235.9635.98T:round3jh256
35.9635.9735.99T:round3jh512
36.6036.8136.98sha224
36.8837.1037.34sha256
48.9649.0349.07sha3512
49.0949.1249.17T:keccakc1024
109.74109.79109.85T:groestl256
171.64171.77171.92T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
12.3112.3112.72T:blake2s
17.7817.8817.91T:blake2b
26.5326.6426.86T:skein256256
28.1628.2528.38T:skein512512
30.9830.9831.09T:skein512256
31.5831.5831.83T:blake32
33.0333.1433.27T:blake64
33.9134.0234.11blake256
35.0635.1635.41blake512
38.5538.7238.86T:k12
47.1647.3847.47sha512
50.4250.6450.86sha3224
50.6250.7350.95sha3384
50.45?50.77?56.80?sha3256
50.5850.7851.02sha3512
52.0352.2552.47shake256
52.6152.7353.06shake128
59.1659.2759.45T:jh512
59.3659.4559.61T:jh224
59.3859.4859.58T:jh384
59.4459.5359.64T:jh256
60.0562.7062.94T:keccakc1024
60.6765.1965.41T:keccakc768
61.0965.5065.78T:keccakc448
61.2766.0866.30T:keccakc512
65.9266.1466.36T:keccak
69.1669.2769.41T:round3jh256
69.4169.5269.62T:round3jh512
90.1490.4590.77T:skein10241024
97.2897.6498.00T:bblake256
168.33168.53168.77T:keccakc512treed2
170.59170.72171.05T:keccakc256treed2
180.72181.84183.05sha224
183.75185.44186.75sha256
186.00?187.16?277.39?sha384
238.81239.05239.48T:groestl256
431.39431.83432.23T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
99.6299.75100.62T:blake2s
136.50137.25139.00T:blake2b
157.25157.25159.00T:blake32
164.12164.12165.12T:skein256256
166.12166.75168.88blake256
211.25211.25212.38T:skein512512
242.25244.00244.12T:skein512256
263.88263.88265.62T:blake64
283.00283.50285.00blake512
305.88306.88308.88T:k12
375.12376.75377.75sha512
401.75402.62405.25sha3224
402.00402.88404.50sha3256
401.62403.38406.00sha3384
402.88403.88405.50sha3512
414.62415.50418.12shake256
418.50420.12421.88shake128
466.50466.62467.88T:jh512
468.38469.00470.00T:jh224
468.88469.12470.00T:jh384
468.88469.62470.38T:jh256
501.12502.88503.75T:keccakc1024
519.62521.00522.75T:keccakc448
520.38521.75524.25T:keccakc768
523.12524.25525.88T:keccakc512
526.12527.00528.75T:keccak
554.62555.00556.25T:round3jh256
556.62557.50558.38T:round3jh512
660.75663.88666.50T:bblake256
720.50722.12725.25T:skein10241024
1160.121161.881165.25T:groestl256
1315.501326.881341.88sha224
1335.881336.751339.00T:keccakc512treed2
1342.881352.881370.12sha256
1351.751353.501355.88T:keccakc256treed2
1485.88?1515.88?2652.62?sha384
3446.753449.253454.00T:groestl512