VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.393.403.42T:blake2b
4.264.284.30T:k12
5.195.215.24T:keccakc256treed2
5.255.325.38T:bblake256
5.345.345.35T:blake2s
5.675.685.69T:blake32
6.086.146.17blake512
6.126.156.19T:skein512256
6.156.186.21T:skein512512
6.236.266.29T:blake64
6.956.997.00T:keccakc512treed2
7.407.417.44sha512
7.397.567.96blake256
7.137.657.71sha384
7.988.088.17T:skein10241024
8.338.348.35shake128
8.718.769.15T:skein256256
9.319.349.36T:groestl256
9.479.509.53T:keccakc448
9.679.689.69sha3224
10.0510.1410.19sha256
10.1210.1410.16T:keccakc512
10.1210.1710.20sha224
10.3310.3510.37sha3256
10.3410.3610.38shake256
10.7810.8010.82T:keccak
13.0413.0813.12T:jh512
13.0713.0913.13T:jh224
13.0713.1013.17T:jh384
12.9813.1213.27T:jh256
13.1613.2213.26T:groestl512
13.4613.4813.51T:keccakc768
13.7513.7713.78sha3384
15.0415.0715.11T:round3jh512
15.0715.1015.13T:round3jh256
18.9018.9118.94T:keccakc1024
19.1519.1719.19sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
3.443.453.45T:blake2b
4.524.524.52T:k12
5.365.365.36T:blake2s
5.815.815.82T:blake32
5.915.935.95T:bblake256
6.176.186.18T:keccakc256treed2
6.276.286.29T:skein512256
6.346.346.35T:skein512512
6.376.396.39blake512
6.506.506.51T:blake64
7.487.497.49T:keccakc512treed2
7.727.737.91blake256
7.938.178.19sha384
8.178.178.18sha512
8.428.448.48T:skein10241024
8.708.718.71shake128
8.828.848.85T:skein256256
9.739.739.74T:groestl256
9.909.909.91T:keccakc448
10.0410.0510.05sha3224
10.5510.5510.56T:keccakc512
10.7210.7210.73sha3256
10.7210.7310.73shake256
10.8210.8410.86sha256
10.8310.8410.85sha224
11.1911.1911.20T:keccak
13.3213.3313.35T:jh512
13.3313.3413.35T:jh224
13.3313.3413.36T:jh384
13.3313.3513.42T:jh256
13.5413.5413.55T:keccakc768
13.7813.7913.79sha3384
13.9313.9513.96T:groestl512
15.3315.3415.35T:round3jh512
15.3615.3715.38T:round3jh256
19.3019.3119.32T:keccakc1024
19.5319.5419.54sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
3.503.513.52T:blake2b
4.904.914.91T:k12
5.385.385.39T:blake2s
6.026.026.04T:blake32
6.476.496.51T:skein512256
6.616.636.66T:skein512512
6.786.806.83blake512
6.896.906.92T:blake64
6.926.936.96T:bblake256
7.197.217.21T:keccakc256treed2
7.998.008.18blake256
8.338.348.35T:keccakc512treed2
8.638.969.01T:skein256256
8.959.019.04T:skein10241024
9.189.199.22sha384
9.309.319.31shake128
9.439.459.48sha512
10.1210.1210.13T:keccakc448
10.2010.2010.21sha3224
10.3610.3710.39T:groestl256
11.0011.0111.02T:keccakc512
11.0911.1011.11sha3256
11.1011.1111.12shake256
11.8411.8411.85T:keccak
11.9211.9411.96sha224
11.9511.9712.00sha256
13.6413.6513.66T:keccakc768
13.7313.7413.75T:jh224
13.7213.7513.77T:jh384
13.7313.7513.77T:jh512
13.7313.7713.81T:jh256
13.8213.8213.83sha3384
15.1715.1915.21T:groestl512
15.7715.7915.81T:round3jh512
15.7915.8215.83T:round3jh256
19.9619.9719.98T:keccakc1024
20.1420.1520.15sha3512
Cycles/byte for 576 bytes
25%50%75%hash
4.074.094.09T:blake2b
5.435.455.45T:blake2s
5.495.505.51T:k12
6.606.616.66T:blake32
7.047.067.14T:skein512256
7.277.317.36blake512
7.307.327.36T:blake64
7.387.397.40T:skein512512
8.648.678.84blake256
9.079.129.43T:skein256256
9.849.859.87T:bblake256
9.929.949.95T:keccakc256treed2
10.0010.0110.04shake128
11.2511.3811.54T:skein10241024
11.8711.8912.07sha384
12.0712.0912.12T:groestl256
12.1012.1112.23sha512
12.3912.4112.42sha3224
12.4112.4212.44T:keccak
12.4212.4312.45shake256
12.4112.4312.46sha3256
12.4712.4812.49T:keccakc448
12.4812.4912.52T:keccakc512
12.9112.9312.95T:keccakc512treed2
14.6814.7114.78T:jh384
14.7014.7414.80T:jh256
14.7314.7414.77T:jh224
14.7314.7714.82T:jh512
14.8214.8314.84sha3384
14.8514.8614.87T:keccakc768
14.8814.9014.95sha224
15.0015.0515.12sha256
16.9016.9416.97T:round3jh512
16.9316.9616.97T:round3jh256
17.3117.3217.34T:groestl512
21.9621.9822.01T:keccakc1024
22.0322.0422.06sha3512
Cycles/byte for 64 bytes
25%50%75%hash
6.146.286.33T:blake2s
9.339.399.42T:blake2b
13.8113.8813.98T:blake32
14.2214.4414.62T:skein512256
15.0615.0915.19T:k12
15.0615.1415.23T:skein256256
15.2315.3415.52T:blake64
16.5216.6616.81blake512
16.8816.9717.08T:skein512512
17.1917.3417.94blake256
23.0223.1223.30sha3256
23.0623.1423.27sha3512
23.0823.1723.39sha3224
23.1123.1923.27sha3384
23.2523.3323.50shake256
23.3323.4123.53shake128
24.6224.6624.75T:keccak
24.6724.7825.09T:keccakc768
24.8124.9425.19T:keccakc1024
25.1125.1725.56T:keccakc448
25.2825.4425.58T:keccakc512
27.5527.7327.84T:jh384
27.6627.8027.97T:jh224
27.7227.8027.92T:jh512
27.6227.8828.06T:jh256
31.5531.6231.88T:round3jh512
31.6131.8632.02T:round3jh256
34.0534.1434.28T:groestl256
36.3836.4836.88T:skein10241024
45.4845.6645.84T:bblake256
49.0349.4450.23sha384
49.3649.5049.84sha512
50.2850.3650.44T:groestl512
53.4753.7354.25sha224
53.9854.2055.03sha256
60.8460.9761.20T:keccakc512treed2
61.1161.2061.34T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
53.2553.2553.50T:blake2s
70.6272.8876.50T:blake32
74.38?75.62?129.62?T:blake2b
80.5081.7584.00blake256
86.6288.3889.12T:skein256256
111.62112.88115.00T:skein512256
119.50120.00120.88T:k12
122.38122.75123.62T:blake64
131.75133.50135.12blake512
134.38135.00135.75T:skein512512
183.50183.75184.38sha3256
183.62184.00184.88sha3384
183.75184.38185.12sha3224
184.12184.75186.12sha3512
185.38185.75186.75shake256
186.12186.62187.38shake128
197.12197.75199.12T:keccak
197.88198.25199.00T:keccakc768
198.25198.75199.75T:groestl256
198.75199.62201.25T:keccakc1024
200.38202.38203.88T:keccakc448
201.88203.12204.25T:keccakc512
223.75226.00228.00T:jh384
224.62226.38228.25T:jh224
225.12226.50229.00T:jh256
225.00226.88228.75T:jh512
251.25252.00253.75T:round3jh256
254.25255.38256.25T:round3jh512
290.88291.75292.38T:skein10241024
302.00304.00305.00T:bblake256
344.88346.75349.75sha224
349.50351.75357.75sha256
383.50384.00384.50T:groestl512
394.75395.75397.25sha512
396.00398.12400.12sha384
486.75487.25489.25T:keccakc512treed2
488.00488.62490.12T:keccakc256treed2