VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3210M; 2 x 2500MHz; h9ivy, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.383.403.42T:blake2b
4.294.304.32T:k12
5.185.225.25T:bblake256
5.285.295.31T:keccakc256treed2
5.345.345.35T:blake2s
5.925.996.04T:blake64
6.086.136.18blake512
6.266.286.30T:skein512256
6.356.406.44T:skein512512
6.416.426.44T:blake32
7.037.057.07T:keccakc512treed2
7.087.157.24sha384
6.897.357.64sha512
7.577.587.59blake256
8.328.508.60T:skein256256
8.638.668.70shake128
8.658.678.70T:skein10241024
9.449.469.47T:keccakc448
9.439.509.53T:groestl256
10.0610.0710.09sha3224
10.0710.1210.15sha256
10.0910.1210.15T:keccakc512
10.0810.1410.20sha224
10.7510.7710.79sha3256
10.7510.7810.82shake256
10.7710.7810.80T:keccak
12.8512.8812.91T:groestl512
12.8612.9012.94T:jh384
12.8512.9012.95T:jh224
12.8812.9012.96T:jh256
12.8012.9113.05T:jh512
13.4813.5013.52T:keccakc768
14.3014.3214.35sha3384
15.2615.2915.33T:round3jh256
15.2715.2915.34T:round3jh512
18.8418.8618.89T:keccakc1024
19.9119.9620.00sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
3.433.433.44T:blake2b
4.534.544.54T:k12
5.365.365.36T:blake2s
5.815.825.83T:bblake256
6.196.216.22T:blake64
6.266.266.26T:keccakc256treed2
6.376.386.39blake512
6.446.446.45T:skein512256
6.526.536.55T:skein512512
6.586.586.59T:blake32
7.577.577.58T:keccakc512treed2
7.727.737.73blake256
7.887.907.92sha384
7.868.058.12sha512
8.518.598.61T:skein256256
9.049.049.05T:skein10241024
9.049.059.06shake128
9.849.869.86T:groestl256
9.859.869.86T:keccakc448
10.4510.4510.46sha3224
10.5310.5410.55T:keccakc512
10.6810.6910.70sha256
10.6910.7010.73sha224
11.1511.1611.16sha3256
11.1511.1611.17shake256
11.1811.1911.19T:keccak
13.1213.1313.15T:jh384
13.1113.1313.15T:jh224
13.1313.1413.21T:jh512
13.1413.1513.17T:jh256
13.5513.5513.56T:keccakc768
13.6013.6113.61T:groestl512
14.3414.3514.35sha3384
15.5515.5615.57T:round3jh256
15.5615.5615.58T:round3jh512
19.2519.2619.26T:keccakc1024
20.3220.3420.35sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
3.483.483.49T:blake2b
4.934.934.94T:k12
5.375.385.38T:blake2s
6.596.616.63T:blake64
6.696.706.71T:skein512256
6.756.766.77T:skein512512
6.796.816.84T:bblake256
6.796.826.85blake512
6.826.836.84T:blake32
7.297.307.31T:keccakc256treed2
7.998.008.00blake256
8.448.458.46T:keccakc512treed2
8.708.768.79T:skein256256
9.059.099.14sha384
9.099.249.34sha512
9.669.679.68T:skein10241024
9.669.679.68shake128
10.0610.0610.07T:keccakc448
10.4410.4510.47T:groestl256
10.6110.6110.63sha3224
10.9610.9610.97T:keccakc512
11.5311.5411.55sha3256
11.5411.5511.56shake256
11.5711.5911.61sha256
11.6211.6311.68sha224
11.8411.8511.85T:keccak
13.4913.5213.54T:jh224
13.5013.5213.54T:jh384
13.5213.5313.61T:jh512
13.5413.5413.54T:jh256
13.6213.6313.64T:keccakc768
14.3714.3914.39sha3384
14.7914.8014.81T:groestl512
15.9816.0216.02T:round3jh256
15.9916.0216.04T:round3jh512
19.9119.9319.95T:keccakc1024
20.9520.9921.29sha3512
Cycles/byte for 576 bytes
25%50%75%hash
3.994.004.10T:blake2b
5.435.435.43T:blake2s
5.545.545.55T:k12
7.097.117.14T:blake64
7.297.337.42blake512
7.317.347.37T:skein512512
7.357.367.37T:skein512256
7.487.507.51T:blake32
8.638.648.69blake256
9.139.189.20T:skein256256
9.599.609.61T:bblake256
10.0410.0510.08T:keccakc256treed2
10.3610.3810.40shake128
11.6011.6711.74sha384
11.4911.7311.95sha512
12.0712.1012.15T:groestl256
12.2912.3012.31T:skein10241024
12.3712.3812.41T:keccak
12.3712.3912.44T:keccakc448
12.3912.4012.41T:keccakc512
12.8612.8712.90sha3256
12.8912.9112.92shake256
12.8912.9112.94sha3224
13.0713.0913.10T:keccakc512treed2
14.0214.0514.10sha256
14.0514.1014.14sha224
14.4514.4514.48T:jh256
14.4414.4614.50T:jh224
14.4514.4814.51T:jh384
14.4714.5414.61T:jh512
14.7514.7714.78T:keccakc768
15.3915.4115.43sha3384
16.8016.8116.83T:groestl512
17.1017.1317.19T:round3jh256
17.1317.1417.19T:round3jh512
21.9721.9822.00T:keccakc1024
22.9322.9523.00sha3512
Cycles/byte for 64 bytes
25%50%75%hash
6.066.066.09T:blake2s
8.568.839.20T:blake2b
14.4514.4714.62T:skein512512
14.7714.8814.98T:skein256256
15.2015.2315.23T:k12
15.6915.7515.84T:skein512256
15.9516.0316.09T:blake32
16.1416.2216.30T:blake64
16.6616.7716.89blake512
17.2317.7817.89blake256
23.8123.8623.95sha3512
23.7323.9424.02sha3256
23.9824.0324.08shake256
24.0624.0824.08sha3384
24.1424.1924.30shake128
24.4524.5224.58sha3224
24.5624.6424.95T:keccak
24.5824.6624.70T:keccakc768
24.8324.8924.94T:keccakc512
24.8624.9125.00T:keccakc448
25.0225.0625.25T:keccakc1024
26.9727.0027.11T:jh384
26.9827.0227.23T:jh256
27.1427.2827.38T:jh512
27.0527.3027.31T:jh224
31.7731.7731.77T:round3jh256
31.8631.8832.16T:round3jh512
32.8633.0233.16T:groestl256
40.8640.9741.08T:skein10241024
43.8343.8944.02T:bblake256
45.2545.3645.69sha256
43.5545.5645.80sha512
45.4145.6445.86sha224
45.8147.1947.94sha384
48.2348.3148.38T:groestl512
61.6261.7362.00T:keccakc512treed2
61.9862.1262.28T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
51.8851.8852.12T:blake2s
69.2570.3873.75T:blake2b
81.2581.5081.88T:blake32
80.6281.6282.25blake256
84.2585.0086.38T:skein256256
115.25116.00117.25T:skein512512
120.75120.88122.25T:k12
125.12125.62126.75T:skein512256
129.50129.75131.00T:blake64
133.50134.50135.62blake512
189.75190.00191.00sha3384
189.75190.38191.12T:groestl256
189.88190.38192.00sha3512
190.25191.25192.38sha3256
191.62191.75192.62shake256
191.88192.38192.88shake128
193.88193.88194.75sha3224
197.25197.75198.88T:keccak
197.75198.25199.12T:keccakc768
198.88199.38200.38T:keccakc512
199.00199.75201.38T:keccakc448
201.25201.88202.75T:keccakc1024
217.75219.00220.50T:jh256
218.12219.50220.88T:jh384
218.38219.62220.38T:jh512
219.12219.88221.12T:jh224
256.88256.88257.00T:round3jh256
256.25257.00257.50T:round3jh512
278.88280.88284.25sha256
281.00282.88285.50sha224
293.88295.38301.75T:bblake256
306.00306.62307.12T:skein10241024
360.12361.88381.12sha384
355.12363.75365.12sha512
367.50367.88368.75T:groestl512
493.25493.88495.00T:keccakc512treed2
495.25496.38497.62T:keccakc256treed2