VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Crestmont (a06a4-20); 2023 Intel Core Ultra 5 125H, LPE cores; 2 x 700MHz; meteor,tiny, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.531.531.53sha256
1.531.541.57sha224
2.862.892.92T:k12
3.383.403.43T:blake2b
4.354.374.40sha512
4.724.774.82sha384
4.804.824.85T:keccakc256treed2
4.774.834.87T:blake64
4.854.864.87T:blake2s
4.924.944.97T:skein512256
4.944.964.99T:skein512512
5.045.085.12T:bblake256
5.295.345.44blake512
5.31?5.36?14.74?shake128
5.865.885.91T:blake32
5.18?5.96?6.28?T:skein10241024
6.116.156.17T:keccakc448
6.196.236.29sha3224
6.366.386.40T:skein256256
6.366.386.41T:keccakc512treed2
6.596.636.69T:keccakc512
6.636.666.72shake256
6.656.686.73sha3256
6.836.856.88blake256
7.027.057.09T:keccak
8.508.578.59T:groestl256
8.798.838.86T:keccakc768
8.798.898.98sha3384
11.2611.3511.75T:groestl512
12.1912.2512.41T:keccakc1024
12.2112.3012.42sha3512
12.8813.1513.26T:jh384
13.0013.1513.33T:jh224
13.1313.2313.44T:jh512
13.1413.2613.56T:jh256
15.2715.3515.44T:round3jh256
15.2315.3615.46T:round3jh512
Cycles/byte for 4096 bytes
25%50%75%hash
1.561.561.56sha256
1.801.811.82sha224
3.023.023.03T:k12
3.403.403.41T:blake2b
4.534.534.54sha512
4.854.864.86T:blake2s
5.035.035.04T:skein512256
5.025.035.04T:blake64
5.045.055.05T:skein512512
5.205.205.22sha384
5.505.525.56blake512
5.555.565.58T:bblake256
5.58?5.59?10.27?shake128
5.655.655.66T:keccakc256treed2
5.995.996.00T:blake32
5.886.246.28T:skein10241024
6.406.406.41T:keccakc448
6.446.456.46T:skein256256
6.456.466.48sha3224
6.816.826.83T:keccakc512treed2
6.866.876.89T:keccakc512
6.886.886.91shake256
6.906.916.92sha3256
6.976.986.99blake256
7.287.297.29T:keccak
8.838.848.85T:keccakc768
8.858.908.93sha3384
8.908.918.92T:groestl256
12.0212.0512.21T:groestl512
12.5112.5212.59T:keccakc1024
12.5512.5812.62sha3512
13.3513.3813.47T:jh224
13.2813.4013.43T:jh384
13.4313.4513.53T:jh512
13.4413.4713.54T:jh256
15.6215.6315.67T:round3jh512
15.6315.6415.67T:round3jh256
Cycles/byte for 1536 bytes
25%50%75%hash
1.601.601.60sha256
2.242.252.26sha224
3.243.253.26T:k12
3.393.403.41T:blake2b
4.794.804.81sha512
4.854.854.86T:blake2s
5.175.195.19T:skein512512
5.185.205.22T:skein512256
5.315.335.37T:blake64
5.795.815.82blake512
5.915.955.98sha384
5.945.955.98shake128
6.176.196.21T:blake32
6.296.356.54T:skein10241024
6.366.376.39T:bblake256
6.476.506.51T:keccakc256treed2
6.526.536.53T:keccakc448
6.546.566.58sha3224
6.566.566.58T:skein256256
7.097.127.12T:keccakc512
7.117.137.17shake256
7.107.147.15sha3256
7.167.177.18blake256
7.517.537.54T:keccakc512treed2
7.667.677.69T:keccak
8.868.878.89T:keccakc768
8.908.918.93sha3384
9.469.499.50T:groestl256
12.9212.9412.95T:keccakc1024
12.9512.9913.02sha3512
13.0813.1313.15T:groestl512
13.7213.7713.83T:jh224
13.7513.7913.87T:jh256
13.7613.8113.84T:jh512
13.7213.8213.86T:jh384
16.0716.1216.20T:round3jh256
16.0816.1216.16T:round3jh512
Cycles/byte for 576 bytes
25%50%75%hash
1.721.721.72sha256
3.403.433.46sha224
3.573.583.59T:k12
3.763.783.81T:blake2b
4.844.854.85T:blake2s
5.175.185.20sha512
5.575.585.59T:skein512256
5.545.595.62T:blake64
5.575.595.61T:skein512512
6.056.066.10blake512
6.356.376.41shake128
6.706.716.72T:blake32
6.866.896.93T:skein256256
7.367.377.40sha384
7.657.677.68blake256
7.907.917.95sha3224
7.917.937.95shake256
7.907.937.97sha3256
7.977.998.01T:keccak
7.968.008.02T:keccakc512
7.998.018.06T:keccakc448
7.968.228.25T:skein10241024
8.748.768.78T:keccakc256treed2
8.798.818.83T:bblake256
9.509.539.56sha3384
9.569.579.59T:keccakc768
11.0411.0611.11T:groestl256
11.5111.5411.56T:keccakc512treed2
14.1214.1714.26sha3512
14.2014.2514.31T:keccakc1024
14.6114.6814.80T:jh256
14.6614.7414.79T:jh512
14.7214.7414.79T:groestl512
14.6614.7514.83T:jh384
14.7114.7714.81T:jh224
17.1917.2117.31T:round3jh256
17.1617.2317.40T:round3jh512
Cycles/byte for 64 bytes
25%50%75%hash
3.193.223.25sha256
4.754.774.83T:blake2s
6.846.947.05T:blake2b
9.389.429.50T:k12
10.5210.5910.67T:skein512256
10.6110.6610.69T:skein512512
10.9211.0211.39T:skein256256
11.0011.1611.80T:blake64
11.2011.2711.36sha512
12.1912.3012.50blake512
13.2713.3813.44T:blake32
14.0814.1614.27blake256
14.5014.5514.56sha3224
14.5214.5614.69sha3256
14.5314.6114.72sha3512
14.5614.6114.70sha3384
14.5914.6214.73shake128
14.5914.6414.69shake256
15.4715.5315.61T:keccak
15.4815.5315.59T:keccakc1024
15.4815.5515.62T:keccakc768
15.6215.6615.70T:keccakc448
15.6215.6715.80T:keccakc512
18.4118.5819.11sha224
23.1724.5224.95T:skein10241024
26.7226.8327.00T:jh224
26.5326.8827.20T:jh256
26.7027.0327.75T:jh512
26.9427.2227.47T:jh384
27.8427.9428.12sha384
31.2331.3131.47T:groestl256
31.4731.6431.92T:round3jh512
31.4231.7532.03T:round3jh256
38.9539.0239.12T:bblake256
40.1740.3640.45T:groestl512
52.6452.7053.00T:keccakc512treed2
52.9553.0353.36T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
19.0019.0019.12sha256
42.7543.0043.25T:blake2s
57.5058.1258.75T:blake2b
59.7560.0060.75T:blake32
60.7561.7564.75T:skein256256
63.3863.6263.62blake256
74.3874.6275.25T:k12
79.3880.1280.88sha512
84.3884.7585.75T:skein512256
84.6285.0086.00T:skein512512
89.3890.8896.38T:blake64
97.0097.6298.75blake512
115.75116.00117.38sha3256
115.75116.25118.88sha3384
115.50116.38117.00sha3224
116.12116.62117.38sha3512
116.25117.00118.00shake128
116.38117.38119.88shake256
124.12124.62125.12T:keccak
123.88124.75125.75T:keccakc1024
124.38124.88126.00T:keccakc768
125.62126.00126.62T:keccakc448
125.50126.25127.50T:keccakc512
138.25139.50145.12sha224
184.38186.12192.62T:groestl256
183.62191.00199.62T:skein10241024
217.25218.00219.50T:jh512
215.75218.75221.25T:jh384
217.00218.75219.38T:jh256
216.00219.12221.62T:jh224
225.75227.25230.12sha384
253.12255.12257.75T:round3jh256
253.75256.00257.88T:round3jh512
255.25256.75257.25T:bblake256
307.12308.12309.00T:groestl512
421.50422.62423.88T:keccakc512treed2
423.62424.75427.12T:keccakc256treed2