VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Broadwell+AES (306d4); 2015 Intel Core i3-5005U; 2 x 1900MHz; shoe, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.073.083.09T:blake2b
3.893.923.96T:k12
4.884.894.92T:keccakc256treed2
5.155.215.25sha384
5.175.215.25T:skein512512
5.185.225.25T:skein512256
5.295.325.34sha512
5.345.355.35T:blake2s
5.375.405.43T:bblake256
5.505.525.54T:blake64
5.875.895.91T:blake32
5.845.936.02blake512
6.396.546.80T:keccakc512treed2
6.676.736.78T:skein10241024
6.926.936.95shake128
7.597.607.61blake256
7.717.767.80sha224
7.727.767.78sha256
7.747.787.82T:skein256256
8.138.158.18T:keccakc448
8.358.388.41sha3224
8.628.668.70sha3256
8.638.668.68shake256
8.688.738.77T:keccakc512
8.909.009.05T:groestl256
9.269.289.33T:keccak
11.5111.5411.60T:keccakc768
11.7611.9012.10sha3384
13.1813.2513.31T:groestl512
13.2113.2713.37T:jh224
12.74?13.27?14.31?T:jh512
13.2313.2913.32T:jh384
13.3313.3813.42T:jh256
15.1415.1815.23T:round3jh512
15.2015.2415.27T:round3jh256
16.0516.0816.14T:keccakc1024
16.5016.5716.61sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
3.103.103.11T:blake2b
4.144.144.15T:k12
5.315.315.32T:skein512256
5.355.355.36T:skein512512
5.365.365.36T:blake2s
5.465.475.49sha384
5.535.545.55sha512
5.735.745.74T:blake64
5.805.805.80T:keccakc256treed2
5.965.975.98T:bblake256
6.026.026.03T:blake32
6.116.146.17blake512
7.017.027.04T:skein10241024
7.027.047.16T:keccakc512treed2
7.267.277.27shake128
7.747.747.74blake256
7.867.877.88T:skein256256
7.967.977.98sha224
7.967.977.98sha256
8.488.498.50T:keccakc448
8.698.708.71sha3224
8.988.999.00shake256
8.988.999.00sha3256
9.059.069.08T:keccakc512
9.339.359.37T:groestl256
9.639.649.66T:keccak
11.6011.6011.62T:keccakc768
11.9011.9212.01sha3384
13.4913.5013.54T:jh224
13.4913.5113.52T:jh384
13.4913.5114.02T:jh512
13.5913.6113.62T:jh256
13.9613.9814.01T:groestl512
15.4415.4515.47T:round3jh512
15.5015.5115.52T:round3jh256
16.4316.4316.44T:keccakc1024
16.8316.8516.86sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
3.143.153.15T:blake2b
4.504.504.52T:k12
5.385.385.39T:blake2s
5.465.485.54T:skein512256
5.565.585.59T:skein512512
5.875.885.90sha512
5.895.915.94sha384
6.076.086.11T:blake64
6.236.236.25T:blake32
6.466.486.50blake512
6.736.756.77T:keccakc256treed2
6.896.916.93T:bblake256
7.487.517.55T:skein10241024
7.817.827.83shake128
7.837.857.98T:keccakc512treed2
7.997.998.00blake256
8.018.038.04T:skein256256
8.288.308.32sha224
8.308.328.34sha256
8.678.688.68T:keccakc448
8.858.868.88sha3224
9.349.359.37shake256
9.339.359.36sha3256
9.429.439.43T:keccakc512
9.919.949.97T:groestl256
10.2210.2310.24T:keccak
11.6811.6911.73T:keccakc768
11.9611.9912.07sha3384
13.8613.8814.42T:jh512
13.8813.8913.91T:jh384
13.8713.9013.95T:jh224
13.9713.9914.01T:jh256
15.2415.2515.26T:groestl512
15.8515.9015.91T:round3jh512
15.9415.9615.99T:round3jh256
16.9716.9917.02T:keccakc1024
17.3417.3517.37sha3512
Cycles/byte for 576 bytes
25%50%75%hash
3.613.633.65T:blake2b
5.045.075.11T:k12
5.435.455.46T:blake2s
5.935.976.10T:skein512256
6.196.216.25T:skein512512
6.426.446.47T:blake64
6.446.476.48sha512
6.526.536.60sha384
6.756.776.80blake512
6.816.826.84T:blake32
8.408.438.46T:skein256256
8.508.528.53shake128
8.618.638.64blake256
9.189.229.27sha256
9.189.239.27sha224
9.279.299.31T:keccakc256treed2
9.429.439.45T:skein10241024
9.689.719.80T:bblake256
10.4610.5210.60sha3256
10.5310.5510.56shake256
10.6310.6410.74T:keccakc512
10.7410.7510.85T:keccakc448
10.7810.8110.84sha3224
10.8110.8710.88T:keccak
11.4311.4711.53T:groestl256
12.1212.1612.39T:keccakc512treed2
12.6412.7312.75T:keccakc768
12.8512.8812.95sha3384
14.8814.9315.48T:jh512
14.9014.9415.00T:jh384
14.8914.9515.02T:jh224
14.9014.9715.02T:jh256
17.0217.0717.11T:round3jh512
17.1217.1517.18T:round3jh256
17.2117.2517.28T:groestl512
18.7318.8118.82T:keccakc1024
18.9919.0119.06sha3512
Cycles/byte for 64 bytes
25%50%75%hash
6.056.286.34T:blake2s
7.507.597.69T:blake2b
12.1112.2212.33T:skein512256
13.3813.5613.67T:blake64
13.6613.7713.86T:skein256256
13.9413.9814.47T:k12
13.8814.0014.08blake512
14.2214.2814.42T:blake32
14.2814.4414.69sha512
14.5214.6114.75T:skein512512
16.4216.5316.88sha384
17.2017.3017.48blake256
20.1920.3920.64sha3256
20.2320.4120.78sha3384
20.2820.4120.53sha3224
20.3020.4220.50sha3512
20.5820.7220.77shake256
20.7220.8621.06sha224
20.7720.9121.00sha256
20.8321.0021.11shake128
21.3421.4521.81T:keccakc1024
21.4721.5621.66T:keccakc768
21.8421.9422.39T:keccak
22.9723.0523.08T:keccakc512
21.7223.3423.38T:keccakc448
27.9528.0228.23T:jh256
27.8628.0528.14T:jh384
28.0528.1428.83T:jh512
28.0928.2028.45T:jh224
30.7330.7830.83T:skein10241024
31.0531.3031.50T:groestl256
32.0332.1432.36T:round3jh512
32.1432.2732.45T:round3jh256
44.5244.6445.50T:bblake256
49.1149.4149.50T:groestl512
57.3057.3657.47T:keccakc256treed2
57.1657.3958.17T:keccakc512treed2
Cycles/byte for 8 bytes
25%50%75%hash
52.2553.7553.88T:blake2s
59.8860.3862.25T:blake2b
69.7570.0071.00T:blake32
76.2578.0079.50blake256
77.7578.5079.62T:skein256256
94.5095.2596.38sha256
94.5095.6296.62sha224
97.6298.25100.00T:skein512256
103.00103.88104.62sha512
107.50108.62109.88T:blake64
109.38110.12113.75T:k12
113.50116.12118.88blake512
119.00120.12121.50T:skein512512
131.25132.75134.62sha384
159.50160.38165.88sha3256
159.75161.75163.12sha3384
161.25162.00162.88sha3512
161.25162.50163.38sha3224
163.00164.25165.38shake256
164.62165.75167.38shake128
170.75171.62173.25T:keccakc1024
171.88172.62173.12T:keccakc768
174.88176.25182.62T:keccak
179.62180.38181.62T:groestl256
180.25180.75182.00T:keccakc512
174.62182.38182.88T:keccakc448
225.12226.00227.75T:jh384
226.50227.50228.12T:jh224
226.38227.75231.62T:jh512
227.00228.12228.88T:jh256
245.62246.00246.50T:skein10241024
258.12258.62260.38T:round3jh256
257.62260.12260.50T:round3jh512
295.00296.00298.25T:bblake256
377.12378.38380.38T:groestl512
457.62459.25464.25T:keccakc512treed2
458.75459.25459.75T:keccakc256treed2