VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 5 (b00f21); 2024 AMD EPYC 9555; 64 x 3200MHz; tripwire, supercop-20261004

[Page version: 20261005 20:08:48]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.032.032.03sha256
2.012.032.05sha224
2.262.292.31T:keccakc256treed2
2.582.602.63T:k12
2.792.812.86T:blake2b
3.013.043.07T:keccakc512treed2
3.503.533.55sha512
3.503.533.56sha384
3.633.663.68T:skein512256
3.633.663.69T:skein512512
3.733.904.06T:blake64
4.124.304.56blake512
4.674.714.74T:blake2s
4.945.025.08shake128
5.205.215.22T:skein256256
5.375.405.43T:blake32
5.445.485.51T:skein10241024
5.685.715.75T:keccakc448
5.955.986.01T:groestl256
6.086.136.17T:keccakc512
6.216.276.34shake256
6.416.456.50sha3256
6.486.516.56T:keccak
7.027.087.14T:bblake256
7.117.167.22blake256
8.118.158.19T:keccakc768
8.138.178.20T:groestl512
7.968.278.43sha3224
11.3211.3611.41T:keccakc1024
11.7211.7511.85sha3384
12.8212.9613.17T:jh256
12.8113.0113.15T:jh512
12.8613.0113.11T:jh384
12.8313.0213.16T:jh224
16.0116.0816.17T:round3jh256
16.0916.1516.24T:round3jh512
16.3916.4816.59sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
2.072.072.07sha256
2.262.272.28sha224
2.692.702.70T:keccakc256treed2
2.762.762.77T:k12
2.892.892.91T:blake2b
3.263.263.27T:keccakc512treed2
3.733.743.75T:skein512256
3.753.763.77T:skein512512
3.853.863.87sha384
3.873.873.88sha512
4.074.104.15T:blake64
4.544.614.62blake512
4.744.754.76T:blake2s
5.275.275.28T:skein256256
5.255.275.29shake128
5.505.515.52T:blake32
5.685.695.70T:skein10241024
5.955.955.96T:keccakc448
6.196.206.21T:groestl256
6.356.366.37T:keccakc512
6.516.536.55shake256
6.686.696.71sha3256
6.746.756.76T:keccak
7.357.367.37blake256
8.038.058.06T:bblake256
8.168.188.19T:keccakc768
8.478.608.64sha3224
8.618.628.63T:groestl512
11.5911.6111.62T:keccakc1024
11.7711.7911.82sha3384
13.1413.1613.25T:jh256
13.1613.2113.24T:jh384
13.1413.2213.25T:jh512
13.1613.2313.26T:jh224
16.3116.3316.36T:round3jh256
16.3916.4116.44T:round3jh512
16.7816.8116.86sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
2.662.672.68sha224
2.972.993.01T:k12
3.023.033.04T:blake2b
3.113.123.13T:keccakc256treed2
3.613.633.64T:keccakc512treed2
3.873.883.90T:skein512256
3.913.923.95T:skein512512
4.324.374.48T:blake64
4.404.424.44sha384
4.444.464.48sha512
4.804.824.85T:blake2s
4.885.105.13blake512
5.375.385.38T:skein256256
5.695.715.73T:blake32
5.685.715.76shake128
6.026.036.07T:skein10241024
6.076.096.11T:keccakc448
6.556.576.59T:groestl256
6.596.626.63T:keccakc512
6.786.816.87shake256
6.936.966.99sha3256
7.137.157.17T:keccak
7.567.687.75blake256
8.228.248.26T:keccakc768
8.478.728.79sha3224
9.339.359.38T:groestl512
9.629.669.69T:bblake256
11.8111.8311.84sha3384
12.0012.0312.06T:keccakc1024
13.4613.4813.58T:jh256
13.5113.5713.61T:jh384
13.5013.5813.62T:jh224
13.4913.5813.62T:jh512
16.7116.7416.78T:round3jh256
16.8016.8416.88T:round3jh512
17.3317.3317.35sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.292.292.30sha256
3.313.333.37T:k12
3.663.703.75sha224
3.713.723.75T:blake2b
4.234.264.27T:keccakc256treed2
4.234.264.30T:skein512256
4.354.374.42T:skein512512
4.654.854.95T:blake64
4.995.025.31blake512
4.985.075.12T:blake2s
5.565.585.61T:keccakc512treed2
5.515.585.63sha384
5.645.655.67T:skein256256
5.675.725.74sha512
6.186.216.24T:blake32
6.146.226.29shake128
7.467.517.55T:keccak
7.487.517.56T:keccakc512
7.497.557.64T:keccakc448
7.557.587.61T:groestl256
7.577.617.68T:skein10241024
7.607.677.75shake256
7.817.847.93sha3256
8.238.538.93blake256
8.908.949.00T:keccakc768
10.0410.1310.33sha3224
10.5210.5710.61T:groestl512
12.7012.7112.72sha3384
13.1713.2213.28T:keccakc1024
13.9213.9914.21T:bblake256
14.3714.4214.53T:jh256
14.4514.5214.56T:jh384
14.4314.5214.58T:jh224
14.4214.5414.60T:jh512
17.8017.8617.91T:round3jh256
17.9017.9618.00T:round3jh512
18.3118.4519.00sha3512
Cycles/byte for 64 bytes
25%50%75%hash
4.334.384.42sha256
5.285.345.38T:blake2s
6.006.066.51T:blake2b
8.588.658.74T:skein512256
8.688.788.90T:k12
9.109.169.23T:skein256256
9.589.679.81T:skein512512
9.67?9.76?11.96?blake512
9.73?10.86?12.56?T:blake64
12.5512.6212.69T:blake32
14.5014.6214.87T:keccakc1024
14.4814.6415.89T:keccak
14.6114.7615.72T:keccakc512
14.6314.8015.17T:keccakc768
14.6214.8215.33T:keccakc448
14.8314.9415.02sha3256
15.2815.3915.52shake256
15.2715.4215.70shake128
16.6916.9917.23sha224
15.32?17.20?19.16?sha3384
16.01?17.28?20.91?blake256
19.5119.5919.63sha3512
18.7719.6420.12sha3224
20.1720.3720.68T:groestl256
22.6022.7822.94sha384
23.5123.7624.11sha512
23.9224.2924.48T:skein10241024
25.7225.8526.16T:keccakc256treed2
25.7025.8526.05T:keccakc512treed2
25.9026.1426.76T:jh256
26.1826.6827.04T:jh512
26.1926.7027.02T:jh224
26.1426.7326.99T:jh384
29.4329.5229.81T:groestl512
31.6231.8832.07T:round3jh256
31.7832.1632.59T:round3jh512
67.9368.5270.47T:bblake256
Cycles/byte for 8 bytes
25%50%75%hash
23.91?26.55?27.89?sha256
42.2742.8843.85T:blake2s
47.5947.9248.71T:blake2b
54.0754.4154.94T:blake32
54.4754.8655.42T:skein256256
68.0568.7069.89T:k12
68.7569.4370.08T:skein512256
72.9173.7274.42blake256
76.7477.2577.82T:skein512512
77.3377.7378.74blake512
79.25?87.61?95.14?T:blake64
108.68109.43110.43sha3512
114.93115.93117.33T:groestl256
114.98116.17119.44T:keccak
115.91116.78118.72T:keccakc768
116.72117.33117.95sha3256
116.38117.35120.41T:keccakc1024
116.50117.41120.26T:keccakc512
116.97118.23123.28T:keccakc448
116.52118.70120.90sha224
121.90122.89125.94shake256
122.39124.00127.68shake128
114.79?125.38?153.41?sha3224
152.00154.90155.47sha3384
182.41185.16188.12sha384
190.99193.12195.02T:skein10241024
188.71193.21194.96sha512
204.44205.83206.92T:keccakc256treed2
205.03206.08207.60T:keccakc512treed2
214.55215.57216.58T:jh512
214.40215.91217.54T:jh256
215.42216.36217.55T:jh384
215.39216.57217.77T:jh224
226.25227.10230.60T:groestl512
260.11261.69263.26T:round3jh256
259.53262.00263.92T:round3jh512
485.67489.76497.32T:bblake256