VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: armeabi; Cortex-A8 (413fc082); 2012 TI Sitara XAM3359AZCZ100; 1 x 1000MHz; bblack, supercop-20240716

[Page version: 20241120 00:41:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
13.6713.7013.75sha224
13.6813.7113.71sha256
16.5216.6416.68T:blake2s
22.5622.5922.62sha384
22.5622.5922.62sha512
22.8222.8522.99T:blake32
24.8225.1126.51T:blake2b
28.4828.5028.60T:skein256256
29.2529.2829.34blake256
29.3629.4029.52T:k12
29.5029.5229.58T:bblake256
39.7339.9240.31blake512
40.4740.5940.73T:skein512256
40.5540.6140.73T:skein512512
46.7046.8246.94shake128
54.3254.3854.48sha3224
56.5056.5856.68T:blake64
57.8457.8857.92sha3256
57.8657.9858.10shake256
59.3059.3859.40T:keccakc448
60.3360.4060.45T:skein10241024
62.3962.4362.66T:keccakc512
66.0666.1266.18T:keccak
73.6573.9774.38sha3384
81.0581.1781.32T:keccakc768
100.72101.11102.49sha3512
110.41110.74111.42T:keccakc1024
51.84?112.24?229.62?T:groestl256
113.09113.23114.15T:round3jh256
112.93113.32113.90T:round3jh512
146.26146.38146.79T:jh512
146.29146.38146.74T:jh256
146.13146.50146.77T:jh224
146.38146.60146.90T:jh384
153.76154.49163.26T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
14.4214.4314.44sha256
14.4214.4414.46sha224
16.9817.0117.02T:blake2s
23.6623.6723.73T:blake32
23.8223.8223.83sha384
23.8323.8323.84sha512
25.8425.9026.58T:blake2b
29.1929.1929.24T:skein256256
30.1630.1730.19blake256
31.1731.1831.24T:k12
32.9032.9032.93T:bblake256
41.7041.7141.77T:skein512256
41.7141.7341.79T:skein512512
42.2742.3242.44blake512
49.1949.1949.24shake128
56.6256.6456.69sha3224
58.9458.9558.99T:blake64
60.1560.1660.18sha3256
60.3260.3360.38shake256
62.2162.2262.23T:keccakc448
62.9262.9362.95T:skein10241024
64.9764.9865.08T:keccakc512
68.7368.7468.77T:keccak
75.2075.2775.39sha3384
81.6681.6881.74T:keccakc768
104.09104.21104.83sha3512
113.23113.24113.56T:keccakc1024
115.12115.30115.59T:round3jh512
115.37115.39115.78T:round3jh256
115.10?115.53?174.15?T:groestl256
149.07149.08149.26T:jh256
149.07149.09149.29T:jh512
149.07149.17149.28T:jh224
149.13149.20149.35T:jh384
162.88163.02167.36T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
15.6515.6515.66sha256
15.6515.6515.68sha224
17.6017.6417.71T:blake2s
25.0125.0425.06T:blake32
25.8825.8825.90sha384
25.9125.9125.93sha512
27.1527.2927.67T:blake2b
30.3530.3530.43T:skein256256
31.6331.6631.66blake256
34.1234.1834.21T:k12
38.5238.5438.55T:bblake256
43.5443.5643.67T:skein512256
43.5943.5943.67T:skein512512
46.1446.2646.46blake512
53.1453.1453.17shake128
57.9457.9457.99sha3224
62.7462.7762.80sha3256
62.8862.8862.91T:blake64
62.9963.0263.15shake256
64.1564.1864.21T:keccakc448
67.1467.1667.27T:skein10241024
67.8167.8467.84T:keccakc512
73.1473.3273.32T:keccak
77.2077.4477.55sha3384
82.4982.5282.57T:keccakc768
109.36109.46109.61sha3512
117.34117.35117.37T:keccakc1024
118.75118.92118.95T:round3jh512
118.86119.00119.16T:round3jh256
121.09?121.28?183.83?T:groestl256
153.59153.61153.67T:jh256
153.61153.62153.67T:jh384
153.61153.64153.71T:jh512
153.61153.64153.88T:jh224
177.18177.29177.73T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
18.8818.9418.96sha256
18.8918.9418.96sha224
19.2519.3219.53T:blake2s
28.6428.6528.79T:blake32
28.8528.8628.88sha384
28.9329.0029.07sha512
33.3533.4033.42T:skein256256
33.4233.5634.15T:blake2b
35.5835.5835.67blake256
39.0739.1439.19T:k12
48.4648.4748.69T:skein512256
48.5348.5448.61T:skein512512
51.8852.2252.43blake512
53.5353.5453.61T:bblake256
58.7458.7458.88shake128
67.1167.1267.19T:blake64
71.3271.3271.40sha3256
71.3971.4071.46sha3224
71.7571.7671.83shake256
77.2577.2577.26T:keccakc512
77.4777.5477.56T:keccak
80.4380.4480.51T:keccakc448
85.0685.0885.28T:skein10241024
87.5388.2588.46sha3384
90.0690.1490.28T:keccakc768
123.83124.71125.07sha3512
128.40128.53128.61T:round3jh512
128.61128.68128.75T:round3jh256
130.07130.14130.49T:keccakc1024
137.10?137.57?203.97?T:groestl256
165.64165.65165.65T:jh256
165.65165.65165.72T:jh384
165.71165.72165.79T:jh512
165.65165.79166.38T:jh224
198.12198.49198.71T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
39.7540.3841.00T:blake2s
60.5060.5060.62sha256
60.5060.5061.12sha224
72.2572.8873.00T:skein256256
74.2574.8874.88T:blake32
77.5078.1278.12sha384
78.1278.7580.12T:blake2b
78.6278.8879.38sha512
85.2585.3886.00blake256
110.00110.00110.62T:skein512256
110.00110.62110.75T:skein512512
115.25115.25116.00T:k12
128.12129.00134.12blake512
146.38146.50146.62T:blake64
148.38148.38148.50sha3224
149.12149.75149.75sha3256
151.75152.38152.88shake256
153.50153.62153.75shake128
158.12158.25158.88T:keccakc1024
160.88161.38162.12T:keccakc768
162.75162.75162.75T:keccakc512
168.50168.62168.75T:keccak
179.75180.38181.00T:keccakc448
190.12197.88201.75sha3512
192.12200.50201.88sha3384
245.38245.50246.12T:bblake256
251.38251.88252.00T:round3jh512
251.88252.00252.50T:round3jh256
278.62279.25280.00T:skein10241024
319.62319.62319.75T:jh256
319.62319.75320.38T:jh384
319.62320.25320.88T:jh224
320.25320.38321.00T:jh512
341.88?342.50?470.75?T:groestl256
548.75550.75553.38T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
313.00318.00323.00T:blake2s
369.00370.00370.00sha224
370.00370.00375.00sha256
411.00412.00412.00T:blake32
458.00458.00459.00blake256
463.00464.00468.00T:skein256256
615.00619.00620.00sha384
620.00625.00640.00T:blake2b
625.00630.00631.00sha512
875.00876.00896.00T:skein512256
880.00881.00901.00T:skein512512
906.00907.00912.00T:k12
1021.001031.001125.00blake512
1171.001172.001177.00sha3224
1177.001178.001183.00T:blake64
1181.001182.001188.00sha3256
1203.001203.001209.00shake256
1213.001214.001219.00shake128
1265.001265.001266.00T:keccakc1024
1282.001287.001292.00T:keccakc768
1297.001297.001302.00T:keccakc512
1344.001348.001350.00T:keccak
1442.001443.001448.00T:keccakc448
1516.001573.001583.00sha3512
1558.001594.001621.00sha3384
1734.001735.001740.00T:bblake256
1839.00?1906.00?2516.00?T:groestl256
2021.002025.002026.00T:round3jh512
2021.002026.002031.00T:round3jh256
2228.002229.002235.00T:skein10241024
2562.002563.002567.00T:jh256
2562.002563.002568.00T:jh384
2562.002568.002573.00T:jh224
2563.002568.002572.00T:jh512
4390.004406.004432.00T:groestl512