VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Kaby Lake (906e9); 2017 Intel Xeon E3-1220 v6; 4 x 3000MHz; kizomba, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.153.163.19T:blake2b
3.773.793.81T:k12
4.664.694.74T:keccakc256treed2
4.844.854.87T:blake2s
5.015.075.12sha384
5.085.135.16T:bblake256
5.175.215.24T:skein512512
5.175.225.25T:skein512256
5.225.245.26sha512
5.475.505.54blake512
5.585.625.67T:blake64
6.166.186.20T:blake32
6.206.236.27T:keccakc512treed2
6.756.766.78blake256
6.916.956.97shake128
7.167.187.21T:skein10241024
7.427.457.48sha3224
7.537.587.62T:skein256256
7.647.697.72sha224
7.667.707.73sha256
7.988.008.02T:keccakc448
8.218.248.27T:groestl256
8.448.478.49shake256
8.468.478.50sha3256
8.558.578.59T:keccakc512
9.099.129.14T:keccak
10.1910.2310.33T:groestl512
10.5010.5210.55sha3384
11.4011.4211.44T:keccakc768
13.0013.0313.10T:jh384
13.0013.0613.13T:jh224
13.0113.0613.13T:jh256
13.0313.0813.16T:jh512
14.5814.6314.66sha3512
14.6414.6714.72T:round3jh512
14.6614.7114.77T:round3jh256
15.8715.8815.91T:keccakc1024
Cycles/byte for 4096 bytes
25%50%75%hash
3.173.173.18T:blake2b
4.044.054.06T:k12
4.864.864.87T:blake2s
5.315.335.34T:skein512256
5.325.335.34T:skein512512
5.455.455.46sha512
5.535.545.56T:keccakc256treed2
5.645.655.66T:bblake256
5.735.745.75blake512
5.765.785.79sha384
5.845.865.87T:blake64
6.316.326.33T:blake32
6.676.686.70T:keccakc512treed2
6.936.936.93blake256
7.237.247.25shake128
7.507.517.52T:skein10241024
7.707.717.72T:skein256256
7.737.747.74sha3224
8.228.248.25sha224
8.238.248.25sha256
8.318.318.32T:keccakc448
8.558.568.57T:groestl256
8.778.778.78sha3256
8.778.788.78shake256
8.878.878.88T:keccakc512
9.439.439.44T:keccak
10.5510.5610.56sha3384
11.2111.2211.26T:groestl512
11.4811.4911.50T:keccakc768
13.2713.2813.29T:jh384
13.2713.2913.31T:jh224
13.2813.2913.31T:jh256
13.2913.3113.33T:jh512
14.9014.9114.92sha3512
14.9514.9614.98T:round3jh512
14.9714.9815.01T:round3jh256
16.2416.2416.25T:keccakc1024
Cycles/byte for 1536 bytes
25%50%75%hash
3.183.193.20T:blake2b
4.484.504.50T:k12
4.884.894.89T:blake2s
5.495.515.52T:skein512512
5.505.515.52T:skein512256
5.785.795.81sha512
6.136.136.16blake512
6.246.256.27T:blake64
6.436.436.45T:keccakc256treed2
6.516.526.55T:bblake256
6.526.536.54T:blake32
6.936.956.98sha384
7.197.207.21blake256
7.437.457.47T:keccakc512treed2
7.727.747.76shake128
7.867.877.88sha3224
7.927.957.97T:skein256256
8.048.068.08T:skein10241024
8.448.448.45T:keccakc448
9.089.099.09sha3256
9.109.119.12shake256
9.109.129.14T:groestl256
9.159.179.21sha256
9.159.179.19sha224
9.189.199.19T:keccakc512
9.949.959.97T:keccak
10.6010.6110.63sha3384
11.5811.6011.62T:keccakc768
12.8112.8512.88T:groestl512
13.6413.6613.69T:jh256
13.6413.6713.70T:jh384
13.6413.6713.70T:jh512
13.6413.6713.70T:jh224
15.3815.4015.41sha3512
15.4015.4215.45T:round3jh512
15.4215.4415.48T:round3jh256
16.8216.8316.84T:keccakc1024
Cycles/byte for 576 bytes
25%50%75%hash
3.583.593.60T:blake2b
4.904.924.94T:k12
4.924.924.92T:blake2s
5.976.006.03T:skein512256
5.966.006.02T:skein512512
6.126.136.15sha512
6.316.336.34blake512
6.686.716.75T:blake64
7.137.147.17T:blake32
7.917.927.94blake256
8.258.288.31T:skein256256
8.288.288.32shake128
8.568.598.63T:keccakc256treed2
9.089.099.11T:bblake256
9.349.379.41sha384
9.549.579.61sha3224
9.9610.0010.06T:skein10241024
10.0710.0910.11sha3256
10.1510.2010.22shake256
10.2510.2610.28T:keccak
10.2810.3010.35T:keccakc448
10.2910.3210.36T:keccakc512
10.4010.4210.44T:groestl256
11.3011.3211.37T:keccakc512treed2
11.4011.4211.47sha3384
11.7911.8111.84sha256
11.7811.8211.85sha224
12.3612.4012.42T:keccakc768
14.5814.6414.70T:jh256
14.6314.6814.73T:jh384
14.6514.6914.73T:jh512
14.6714.7014.74T:jh224
15.9316.0416.15T:groestl512
16.5416.5716.66T:round3jh512
16.5816.6216.67T:round3jh256
16.8916.9116.94sha3512
18.6118.6218.65T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
5.565.595.61T:blake2s
7.117.237.25T:blake2b
11.9212.0012.28T:skein512256
11.9812.0812.22T:skein512512
12.5912.6612.75sha512
12.9813.0313.12blake512
13.3313.4413.67T:k12
13.4513.5813.70T:skein256256
14.7514.8114.88T:blake32
14.9115.1915.44T:blake64
16.9416.9717.06blake256
18.0918.1618.31sha3384
18.0618.1718.50sha3224
18.1218.2518.58sha3256
18.2018.2818.50sha3512
18.5518.7218.83shake256
18.6118.7319.03shake128
19.4219.4219.47T:keccakc512
19.4419.4419.50T:keccakc1024
19.4219.4519.53T:keccakc448
19.4819.5019.50T:keccakc768
19.4819.5219.55T:keccak
27.2827.3027.75T:jh256
27.1927.3827.56T:jh384
27.3327.5927.77T:jh512
27.5827.7827.98T:jh224
28.1628.2228.27T:groestl256
31.3931.6932.03T:round3jh512
31.4731.8832.02T:round3jh256
31.9132.0532.33T:skein10241024
40.4240.5240.66T:bblake256
41.4241.7541.98sha384
44.6144.8045.09sha224
44.8145.0245.25sha256
51.8452.0552.23T:keccakc512treed2
52.0252.1752.30T:keccakc256treed2
62.4463.5364.12T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
47.2547.2548.12T:blake2s
59.5059.8860.12T:blake2b
73.3873.7574.50T:blake32
77.0077.8878.75T:skein256256
86.7586.8887.25blake256
94.8895.6296.50T:skein512256
95.0096.0096.75T:skein512512
100.38101.50102.25sha512
103.75104.00105.00blake512
106.50107.12108.75T:k12
121.00122.12124.00T:blake64
143.00143.88144.75sha3224
143.75144.38145.25sha3256
143.62145.12146.50sha3384
144.38145.50146.88sha3512
145.38146.88147.75shake256
147.25148.25149.62shake128
155.38155.50155.88T:keccakc512
155.62155.75155.88T:keccakc1024
155.75155.88156.88T:keccakc448
156.00156.12156.38T:keccakc768
156.25156.38156.75T:keccak
162.75163.62164.12T:groestl256
220.38222.12223.75T:jh384
221.12222.25224.12T:jh512
220.75222.62223.38T:jh256
222.25224.25225.62T:jh224
256.00257.12260.12T:skein10241024
259.50259.75264.12T:round3jh256
259.62260.88265.38T:round3jh512
267.75268.62269.62T:bblake256
287.50288.62290.38sha224
288.38289.75290.88sha256
335.00337.25339.12sha384
414.75415.50417.62T:keccakc512treed2
415.50416.75418.62T:keccakc256treed2
488.62491.62495.50T:groestl512