VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20250415

[Page version: 20250615 19:27:07]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
8.558.558.57T:blake2b
9.409.449.46T:k12
10.1610.1610.16T:blake2s
11.6011.6111.63T:skein512256
11.6111.6111.63T:skein512512
11.6911.6911.69T:blake32
11.7211.7211.73T:skein256256
12.4912.5012.51T:blake64
12.8112.8112.81T:keccakc256treed2
13.6013.6013.61blake512
13.6213.6313.64blake256
15.1515.1715.23T:bblake256
17.2217.2217.24T:keccakc512treed2
17.2217.2317.24sha512
17.2217.2417.25sha384
17.8517.8717.90T:skein10241024
18.4718.5318.56shake128
20.4520.4520.46sha256
20.4520.4620.46sha224
20.7821.0321.22T:keccakc448
21.4921.5321.56sha3224
22.6922.7623.50T:keccakc512
23.0423.0523.05sha3256
22.9723.0623.79shake256
23.5623.7824.62T:keccak
25.6425.7125.88T:jh224
25.7225.7225.72T:jh384
25.7125.7225.83T:jh512
25.7125.7225.73T:jh256
29.5229.5429.54T:round3jh512
29.5329.5429.55T:round3jh256
30.1530.2230.26T:keccakc768
30.6830.6930.70sha3384
32.7132.7432.78T:groestl256
41.4542.2942.36T:keccakc1024
42.8042.8042.80sha3512
49.3049.3649.45T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
8.608.608.61T:blake2b
9.959.959.96T:k12
10.1610.1610.16T:blake2s
11.8511.8511.86T:skein512256
11.8511.8511.86T:skein512512
11.8811.8811.89T:skein256256
11.9511.9511.95T:blake32
12.9812.9812.99T:blake64
13.9213.9213.92blake256
14.1514.1514.15blake512
15.1015.1015.10T:keccakc256treed2
16.4416.4416.46T:bblake256
17.8917.9017.90sha384
17.9017.9017.90sha512
18.4718.4718.47T:keccakc512treed2
18.5518.5518.56T:skein10241024
19.3119.3319.33shake128
20.8820.8820.89sha224
20.8920.8920.89sha256
22.1422.1622.17T:keccakc448
22.3222.3222.34sha3224
23.6823.7124.06T:keccakc512
23.8323.8323.83sha3256
23.8423.8724.22shake256
25.1225.1525.49T:keccak
26.1426.1426.15T:jh256
26.1426.1426.14T:jh384
26.1426.1426.20T:jh512
26.1426.1426.22T:jh224
30.0230.0230.03T:round3jh256
30.0230.0230.03T:round3jh512
30.3830.3930.40T:keccakc768
30.7130.7130.72sha3384
33.6533.6633.67T:groestl256
43.1743.2143.23T:keccakc1024
43.6043.6043.60sha3512
52.1152.1452.17T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
8.658.658.65T:blake2b
10.1710.1710.17T:blake2s
10.8010.8210.86T:k12
12.1512.1512.16T:skein256256
12.2612.2612.26T:skein512256
12.2612.2612.26T:skein512512
12.3812.3812.39T:blake32
13.7813.7813.78T:blake64
14.4114.4314.43blake256
15.0515.0615.06blake512
17.5217.5217.52T:keccakc256treed2
18.4718.4818.50T:bblake256
18.9818.9919.00sha384
19.0119.0119.03sha512
19.6819.6819.69T:skein10241024
20.5320.5320.53T:keccakc512treed2
20.6520.6520.74shake128
21.6021.6021.60sha224
21.6021.6121.61sha256
22.6222.6222.62sha3224
22.6222.6322.73T:keccakc448
24.6324.6624.67sha3256
24.6624.7125.02T:keccakc512
24.6824.8024.82shake256
26.6126.6326.78T:keccak
26.8426.8426.85T:jh256
26.8526.8526.85T:jh384
26.8526.8526.85T:jh512
26.8526.8526.93T:jh224
30.5830.5930.63T:keccakc768
30.7730.7730.78sha3384
30.8330.8330.83T:round3jh256
30.8330.8330.85T:round3jh512
35.1935.2135.22T:groestl256
44.7644.8345.43T:keccakc1024
44.9144.9144.91sha3512
56.7656.7756.78T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
9.749.779.81T:blake2b
10.1810.1810.18T:blake2s
12.0912.1012.12T:k12
12.8812.8812.88T:skein256256
13.3113.3113.31T:skein512256
13.3213.3213.32T:skein512512
13.5313.5413.55T:blake32
14.6514.6614.66T:blake64
15.7415.7715.77blake256
16.0116.0116.02blake512
20.0820.1020.11sha384
20.1220.1520.16sha512
22.1722.1922.59shake128
23.5123.5223.52sha224
23.5223.5323.53sha256
23.9323.9523.98T:bblake256
23.9623.9623.96T:keccakc256treed2
24.7724.7724.79T:skein10241024
27.4327.4427.47sha3224
27.4727.5727.91sha3256
27.5827.7427.99shake256
27.8627.9427.99T:keccakc448
27.8727.9428.30T:keccak
28.0128.1528.27T:keccakc512
28.7228.7228.73T:jh256
28.7228.7228.72T:jh384
28.7328.7328.73T:jh512
28.7328.7328.81T:jh224
31.6931.6931.69T:keccakc512treed2
32.9832.9833.00T:round3jh256
32.9832.9932.99T:round3jh512
33.1033.1833.23T:keccakc768
33.0133.5133.60sha3384
39.3739.3839.41T:groestl256
49.0549.0849.97sha3512
49.1249.3049.53T:keccakc1024
63.5063.6763.69T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
10.2510.2510.25T:blake2s
18.8618.8618.91T:blake2b
21.9121.9121.91T:skein256256
26.4826.4826.48T:skein512256
26.6126.6126.62T:skein512512
28.1628.1628.25T:blake32
30.4830.6430.64T:blake64
31.7732.0632.41T:k12
32.5332.6432.88blake256
35.1135.1135.14blake512
42.0942.3042.39sha384
42.5242.5342.77sha512
47.6747.7247.73sha224
47.8147.8847.89sha256
50.0850.0950.19sha3224
50.1750.1950.66sha3512
50.1450.6651.36sha3256
51.2051.3351.78shake128
51.0951.4151.97shake256
50.8952.0352.86sha3384
52.3852.3852.44T:jh256
52.4252.4252.42T:jh384
52.4452.4452.47T:jh512
52.4852.5052.61T:jh224
56.0256.3957.64T:keccakc1024
56.2857.0558.86T:keccakc768
56.7357.1158.55T:keccakc512
56.8957.4858.88T:keccakc448
56.8057.6959.98T:keccak
60.2360.3060.38T:round3jh256
60.3060.3460.34T:round3jh512
78.9178.9178.91T:skein10241024
92.0692.1192.17T:groestl256
93.6293.6293.69T:bblake256
146.64146.64146.64T:keccakc256treed2
147.22147.22147.22T:keccakc512treed2
175.69175.84175.94T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
83.6283.6283.62T:blake2s
127.38127.38127.38T:skein256256
138.12138.12138.88T:blake32
149.38149.75150.38T:blake2b
157.00157.38157.38blake256
210.12210.12211.25T:skein512256
211.12211.12211.50T:skein512512
213.00213.50213.62sha224
216.00216.38216.75sha256
247.12248.50248.50T:blake64
258.38260.50261.88T:k12
277.75277.75277.75blake512
337.00337.25338.00sha384
340.12340.62343.00sha512
398.50398.50399.38sha3224
399.38399.38403.62sha3512
399.00399.50399.75sha3256
405.75405.75406.25sha3384
406.75406.75411.25shake256
407.38408.12409.25shake128
420.88420.88421.50T:jh384
421.38421.38421.62T:jh256
421.38421.38422.00T:jh512
421.50421.75422.38T:jh224
444.25444.62456.62T:keccakc1024
441.88445.88449.25T:keccak
445.38447.25448.38T:keccakc768
449.12449.12454.38T:keccakc512
450.38454.12458.50T:keccakc448
471.38473.25475.62T:groestl256
485.62485.62491.00T:round3jh512
485.12490.00490.25T:round3jh256
630.75630.75630.75T:skein10241024
635.62636.12637.62T:bblake256
1171.751171.751171.75T:keccakc256treed2
1176.621176.621178.00T:keccakc512treed2
1402.001404.121404.12T:groestl512