VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Sandy Bridge+AES (206a7); 2011 Intel Xeon E3-1225; 4 x 3100MHz; hydra7, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.363.373.39T:blake2b
4.564.594.62T:k12
5.275.305.32T:keccakc256treed2
5.345.355.35T:blake2s
5.365.395.43T:bblake256
5.47?5.68?6.09?T:blake32
6.166.226.27blake512
6.166.226.28T:skein512256
6.266.296.33T:skein512512
6.276.326.39T:blake64
6.59?7.09?7.94?T:keccakc512treed2
7.557.567.58blake256
7.947.978.02sha512
7.957.998.03sha384
9.419.519.62shake128
9.19?9.69?10.67?T:groestl256
9.699.759.80T:skein256256
9.9710.0710.17T:skein10241024
10.0510.1010.14T:keccakc448
10.7810.8110.84T:keccakc512
11.0111.0411.07sha3224
11.3211.4511.58sha224
11.4211.4611.49sha256
11.4411.4911.52T:keccak
11.7411.7811.81sha3256
11.7811.8111.84shake256
12.8712.9012.93T:groestl512
12.9213.0513.07T:jh256
13.0313.0913.24T:jh512
13.0613.1013.15T:jh384
13.0813.1113.15T:jh224
13.85?14.38?15.51?T:keccakc768
15.2915.3415.40T:round3jh256
15.2515.3615.57T:round3jh512
15.6615.7215.79sha3384
18.75?20.14?22.81?T:keccakc1024
21.7821.8221.87sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
3.423.433.43T:blake2b
4.824.834.84T:k12
5.365.365.36T:blake2s
5.815.826.02T:blake32
6.036.046.05T:bblake256
6.266.276.28T:keccakc256treed2
6.346.366.37T:skein512256
6.416.416.42T:skein512512
6.456.476.48blake512
6.596.606.62T:blake64
7.617.638.05T:keccakc512treed2
7.737.737.74blake256
8.688.708.71sha384
8.708.708.72sha512
9.859.869.88T:skein256256
9.919.929.97shake128
10.0910.1110.58T:groestl256
10.4410.4710.50T:skein10241024
10.5310.5410.55T:keccakc448
11.2311.2411.25T:keccakc512
11.4511.4611.46sha3224
11.9011.9111.92T:keccak
12.1112.1212.13sha256
12.1112.1312.16sha224
12.2012.2112.22sha3256
12.2212.2212.23shake256
13.2713.2813.29T:jh256
13.3313.3413.36T:jh384
13.3313.3513.41T:jh512
13.3413.3513.36T:jh224
13.6913.7013.70T:groestl512
14.4714.4815.02T:keccakc768
15.6015.6115.63T:round3jh256
15.6315.6315.73T:round3jh512
15.7315.7415.77sha3384
20.5320.5521.88T:keccakc1024
22.2522.2622.28sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
3.513.523.53T:blake2b
5.245.245.25T:k12
5.385.385.39T:blake2s
6.036.066.23T:blake32
6.546.556.58T:skein512256
6.606.616.64T:skein512512
6.866.906.92blake512
7.017.047.07T:blake64
7.077.087.13T:bblake256
7.317.327.33T:keccakc256treed2
7.997.998.01blake256
8.528.568.99T:keccakc512treed2
9.879.909.97sha384
9.919.929.93sha512
10.0510.0710.11T:skein256256
10.5910.6010.66shake128
10.7310.7510.77T:keccakc448
10.7710.7811.26T:groestl256
11.1111.1511.21T:skein10241024
11.6111.6311.64sha3224
11.6911.7011.71T:keccakc512
12.6012.6212.63T:keccak
12.6412.6512.67sha3256
12.6412.6612.67shake256
13.1613.1813.22sha256
13.1413.2213.33sha224
13.6213.6513.68T:jh256
13.7213.7413.76T:jh224
13.7213.7513.78T:jh384
13.7213.7513.79T:jh512
14.5414.5715.10T:keccakc768
15.0015.0215.03T:groestl512
15.7615.7815.82sha3384
16.0416.0716.09T:round3jh256
16.0616.0716.17T:round3jh512
21.2421.2722.60T:keccakc1024
22.9622.9723.00sha3512
Cycles/byte for 576 bytes
25%50%75%hash
4.084.114.19T:blake2b
5.435.455.45T:blake2s
5.895.905.92T:k12
6.646.696.87T:blake32
7.107.127.14T:skein512256
7.187.217.25T:skein512512
7.387.407.41blake512
7.547.557.59T:blake64
8.678.688.74blake256
9.909.929.94T:bblake256
10.1010.1210.15T:keccakc256treed2
10.5210.5610.59T:skein256256
11.3611.4111.59shake128
12.2912.3212.43sha384
12.3312.3712.43sha512
12.5112.5913.10T:groestl256
13.1513.1713.20T:keccak
13.2313.2513.26T:keccakc512
13.2913.3314.01T:keccakc512treed2
13.3413.4513.48T:keccakc448
13.9714.0814.21T:skein10241024
14.0814.1014.13sha3224
14.0914.1114.13shake256
14.1114.1414.17sha3256
14.6314.6714.71T:jh256
14.7014.7114.74T:jh512
14.6914.7614.85T:jh224
14.7314.7914.81T:jh384
15.7915.8416.34T:keccakc768
15.9415.9716.00sha256
15.9116.0616.27sha224
16.8716.9016.94sha3384
17.2017.2617.32T:round3jh512
17.2317.2717.31T:round3jh256
17.3017.3217.34T:groestl512
23.3623.3924.85T:keccakc1024
25.1125.1425.17sha3512
Cycles/byte for 64 bytes
25%50%75%hash
6.086.306.36T:blake2s
8.869.369.48T:blake2b
14.2514.3614.66T:blake32
14.2814.4114.53T:skein512256
14.3814.5214.59T:skein512512
16.5016.5516.64T:k12
16.7516.8116.95blake512
17.0517.1917.38T:skein256256
17.2217.2817.38T:blake64
17.4817.5917.88blake256
26.0826.2026.33T:keccak
26.1126.2227.48T:keccakc1024
26.1226.2526.42sha3224
26.2026.2826.41sha3384
26.2026.3126.45shake256
26.3326.4527.80shake128
26.3926.5326.62T:keccakc512
26.7326.8626.94sha3256
26.7826.8926.98sha3512
26.4226.9727.19T:keccakc768
27.3027.3427.53T:jh256
27.4727.6927.92T:jh512
27.5027.6927.73T:jh224
27.6427.8428.05T:jh384
27.8128.0628.80T:keccakc448
31.9432.1232.33T:round3jh512
32.2032.4532.64T:round3jh256
35.2236.0237.30T:groestl256
44.8345.0245.25T:bblake256
44.8845.2345.58T:skein10241024
47.6447.8648.09sha512
47.5847.9548.84sha384
52.0852.1452.23T:groestl512
52.3652.6653.06sha256
51.8953.2056.02sha224
62.5962.6962.91T:keccakc256treed2
63.7064.6466.47T:keccakc512treed2
Cycles/byte for 8 bytes
25%50%75%hash
52.1253.5053.88T:blake2s
71.8874.8877.75T:blake32
73.0074.8879.12T:blake2b
82.5082.8883.38blake256
97.7598.8899.38T:skein256256
114.00114.88117.12T:skein512256
114.75115.50116.50T:skein512512
130.88131.75135.00T:k12
134.12135.00135.75blake512
137.12138.88141.50T:blake64
208.12208.88210.25sha3384
208.50209.12210.38sha3224
208.88209.38210.62shake256
208.38210.25216.12T:groestl256
210.00211.12213.38T:keccak
209.75211.50220.38shake128
212.00212.75214.62T:keccakc512
212.75213.25214.12sha3512
210.88213.38222.50T:keccakc1024
212.62213.75214.88sha3256
214.75217.88220.62T:keccakc768
221.38222.25224.25T:jh256
221.12222.62224.00T:jh512
221.25222.88224.38T:jh224
222.88224.62226.25T:jh384
224.50232.25236.50T:keccakc448
257.50258.00259.50T:round3jh512
257.50259.00260.38T:round3jh256
302.75305.25306.00T:bblake256
326.00327.88332.62sha256
322.00334.38349.25sha224
360.75363.88367.88T:skein10241024
379.00381.00386.75sha384
380.88385.75388.88sha512
397.12397.75398.50T:groestl512
500.00501.25502.25T:keccakc256treed2
510.25519.25533.25T:keccakc512treed2