VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Haswell+AES (306c3); 2013 Intel Xeon E3-1275 V3; 4 x 3500MHz; titan0, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.043.073.08T:blake2b
3.903.943.98T:k12
4.974.995.01T:keccakc256treed2
5.225.255.29T:skein512512
5.215.255.28T:skein512256
5.255.285.38sha512
5.215.285.33sha384
5.315.345.37T:bblake256
5.345.355.35T:blake2s
5.515.575.64T:blake64
5.835.855.87T:blake32
6.256.336.37blake512
6.646.676.70T:keccakc512treed2
6.956.987.00shake128
7.277.317.34T:skein10241024
7.587.607.60blake256
7.707.747.78sha224
7.697.757.81sha256
7.717.757.81T:skein256256
8.00?8.34?8.94?sha3224
8.078.368.84T:keccakc448
8.678.708.73shake256
8.688.708.73sha3256
8.808.889.03T:groestl256
8.898.918.94T:keccakc512
9.479.489.50T:keccak
11.7711.7911.82T:keccakc768
11.7811.8311.88sha3384
12.9613.0613.18T:groestl512
13.0913.1513.30T:jh384
13.1413.1713.22T:jh224
13.1413.1913.24T:jh256
13.1713.2013.25T:jh512
14.9815.0215.06T:round3jh512
14.9715.0215.06T:round3jh256
16.4416.4916.53sha3512
16.5016.5316.56T:keccakc1024
Cycles/byte for 4096 bytes
25%50%75%hash
3.093.103.10T:blake2b
4.154.164.18T:k12
5.345.355.36T:skein512256
5.365.365.36T:blake2s
5.355.365.37T:skein512512
5.555.555.56sha512
5.775.795.81T:blake64
5.905.915.91T:keccakc256treed2
5.915.925.93T:bblake256
5.965.975.97T:blake32
6.026.046.05sha384
6.536.566.57blake512
7.157.167.17T:keccakc512treed2
7.297.307.31shake128
7.617.627.63T:skein10241024
7.737.737.73blake256
7.837.857.87T:skein256256
8.348.358.36sha224
8.358.378.39sha256
8.648.668.96sha3224
8.668.688.92T:keccakc448
9.039.049.04sha3256
9.039.049.04shake256
9.249.259.26T:keccakc512
9.329.339.39T:groestl256
9.829.829.82T:keccak
11.8211.8411.86sha3384
11.8411.8411.85T:keccakc768
13.3913.4113.42T:jh224
13.4013.4113.46T:jh384
13.4013.4113.43T:jh256
13.4213.4313.45T:jh512
13.7813.8013.85T:groestl512
15.2715.2815.29T:round3jh256
15.2715.2815.30T:round3jh512
16.7616.7816.79sha3512
16.8616.8716.88T:keccakc1024
Cycles/byte for 1536 bytes
25%50%75%hash
3.143.153.15T:blake2b
4.544.554.58T:k12
5.385.385.38T:blake2s
5.505.525.56T:skein512256
5.535.545.55T:skein512512
5.895.905.99sha512
6.136.166.19T:blake64
6.166.166.17T:blake32
6.856.876.90T:bblake256
6.866.876.88T:keccakc256treed2
6.926.946.96blake512
7.237.247.26sha384
7.847.867.87shake128
7.977.998.00T:keccakc512treed2
7.987.997.99blake256
7.988.008.04T:skein256256
8.108.128.14T:skein10241024
8.818.829.09sha3224
8.838.839.07T:keccakc448
9.349.359.38sha224
9.369.399.42sha256
9.389.399.41sha3256
9.389.419.42shake256
9.609.619.62T:keccakc512
10.0410.0510.10T:groestl256
10.3710.3810.38T:keccak
11.8611.8711.89sha3384
11.9111.9211.93T:keccakc768
13.7613.7813.86T:jh384
13.7713.7913.82T:jh256
13.7913.8113.82T:jh224
13.7913.8213.84T:jh512
15.0215.0515.09T:groestl512
15.7115.7315.75T:round3jh256
15.7115.7415.76T:round3jh512
17.2617.2817.30sha3512
17.4317.4517.47T:keccakc1024
Cycles/byte for 576 bytes
25%50%75%hash
3.583.583.60T:blake2b
5.145.155.20T:k12
5.435.455.45T:blake2s
6.006.056.15T:skein512256
6.086.106.14T:skein512512
6.436.456.48sha512
6.496.526.57T:blake64
6.776.786.80T:blake32
7.207.237.27blake512
8.398.488.49T:skein256256
8.538.558.56shake128
8.608.628.64blake256
9.449.459.47T:keccakc256treed2
9.639.659.70sha384
9.669.679.70T:bblake256
10.2410.2610.30T:skein10241024
10.5310.5410.56sha3256
10.5710.6010.62shake256
10.7610.7810.80T:keccak
10.7510.7911.04sha3224
10.7910.8110.84T:keccakc512
10.8010.8811.16T:keccakc448
11.8911.9311.97sha224
11.9211.9612.00T:groestl256
11.9511.9712.01sha256
12.3512.3712.38T:keccakc512treed2
12.7712.7912.82sha3384
12.8212.8312.84T:keccakc768
14.7414.7514.85T:jh256
14.7314.8014.83T:jh384
14.7314.8014.85T:jh512
14.7614.8414.90T:jh224
16.8816.8916.94T:round3jh512
16.8816.9416.95T:round3jh256
17.0717.1217.15T:groestl512
18.9318.9618.99sha3512
19.1819.2319.28T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
6.116.276.31T:blake2s
7.447.507.64T:blake2b
12.2512.3912.58T:skein512256
12.8913.0013.09T:skein512512
13.4213.5313.88sha512
13.5313.6613.88T:blake64
13.8013.8914.02T:skein256256
14.2314.3914.59T:blake32
14.7514.8615.34T:k12
14.7814.9115.11blake512
16.9817.0217.09blake256
20.0920.1620.27sha3256
20.1720.3020.38sha3384
20.2020.3320.42sha3512
20.2020.4720.78sha3224
20.5920.7021.05T:keccakc1024
20.5320.7321.47shake256
20.7020.8121.06shake128
20.9220.9721.11T:keccakc768
21.0521.0821.16T:keccakc512
21.0221.1421.66T:keccakc448
21.2821.3321.44T:keccak
27.3127.4527.59T:jh512
27.5327.7528.00T:jh384
27.4827.7828.05T:jh256
28.0928.1228.12T:jh224
32.0232.1232.27T:round3jh256
32.2532.5332.67T:round3jh512
33.3633.5033.59T:skein10241024
35.9236.1236.33T:groestl256
41.1641.4541.67sha384
43.9444.0044.17T:bblake256
44.1444.2544.55sha224
44.5544.6744.80sha256
49.2049.4449.59T:groestl512
58.1258.1658.45T:keccakc512treed2
58.3458.4458.55T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
51.8853.0053.25T:blake2s
59.2559.5061.12T:blake2b
68.5070.3874.12T:blake32
76.1278.3880.50blake256
79.3879.8881.00T:skein256256
98.88100.62102.12T:skein512256
103.25104.00105.88T:skein512512
107.00108.00109.62sha512
108.88110.00112.12T:blake64
117.00117.62120.12T:k12
118.38121.00123.75blake512
159.25160.12161.88sha3384
159.88160.88161.50sha3256
160.62161.38162.12sha3512
160.62161.38165.75sha3224
163.62164.12165.38shake128
163.25164.75166.00shake256
167.00167.50169.25T:keccakc768
167.88168.25169.62T:keccakc512
167.88168.62169.50T:keccakc1024
167.88168.75173.75T:keccakc448
170.50171.00171.50T:keccak
220.62221.88224.38T:groestl256
221.75222.88224.75T:jh384
221.25223.62224.62T:jh256
222.75223.88225.38T:jh512
222.50224.50225.75T:jh224
261.12261.62263.88T:round3jh256
264.38266.12267.38T:round3jh512
267.00268.00268.62T:skein10241024
278.62280.00281.00sha224
282.38283.50285.38sha256
291.88292.88295.62T:bblake256
329.50331.88333.88sha384
376.00378.62381.88T:groestl512
464.50465.00471.50T:keccakc512treed2
466.50467.38468.00T:keccakc256treed2