VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: armeabi; Cortex-A7 (410fc075); 2016 Broadcom BCM2836; 4 x 900MHz; berry2, supercop-20251222

[Page version: 20260328 06:51:28]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
14.6215.0515.34T:blake2b
17.7818.2018.30T:k12
19.3120.6720.77T:blake2s
27.5128.1228.53T!!!sha224
27.5028.1828.33T!!!sha256
27.2828.3028.71T:blake32
30.6531.5431.72T!!!sha512
30.8631.5531.74T!!!sha384
33.3233.5233.60T!!!shake128
32.9034.0234.15blake256
34.4235.0935.20T:bblake256
38.5838.7838.92T!!!sha3224
40.4241.2041.53T:skein256256
40.1341.3841.75T:skein512256
41.0041.4441.60T!!!sha3256
41.1341.4741.60T!!!shake256
45.3746.5146.93T:skein512512
54.4254.6954.88T!!!sha3384
74.3974.9275.17T:blake64
75.6275.9276.10T!!!sha3512
77.0377.4677.71T:round3jh256
77.1877.4777.71T:round3jh512
77.4277.9578.38T:keccak
78.6278.9979.41T:keccakc512
81.9882.5482.96T:keccakc448
82.1785.7090.20blake512
102.48102.85103.45T:skein10241024
103.08103.45103.95T:keccakc768
108.65109.26109.86T:groestl256
142.12142.69143.28T:keccakc1024
174.89177.15179.06T:groestl512
223.96224.80225.44T:jh256
223.93224.87225.48T:jh512
224.01224.88225.43T:jh224
224.08224.94225.48T:jh384
Cycles/byte for 4096 bytes
25%50%75%hash
15.3515.3515.45T:blake2b
19.1319.1319.17T:k12
20.8320.8420.86T:blake2s
28.9428.9429.00T!!!sha256
28.9428.9529.10T!!!sha224
29.0529.0629.23T:blake32
32.8032.8032.89T!!!sha384
32.8032.8132.90T!!!sha512
34.7734.7734.82blake256
34.9834.9935.03T!!!shake128
38.8738.8838.93T:bblake256
40.2140.2140.29T!!!sha3224
41.7241.7341.89T:skein256256
42.3642.3642.48T:skein512256
42.8742.8942.96T!!!sha3256
42.9442.9443.00T!!!shake256
47.5347.5647.71T:skein512512
54.8054.8154.90T!!!sha3384
77.2777.2877.36T!!!sha3512
77.5977.6077.71T:blake64
78.8178.8478.94T:round3jh512
78.8178.8478.94T:round3jh256
80.6980.7180.91T:keccak
81.6181.6281.82T:keccakc512
86.0286.0686.26T:keccakc448
87.9288.7590.64blake512
103.56103.60103.85T:keccakc768
106.41106.46106.73T:skein10241024
111.94111.98112.27T:groestl256
145.27145.33145.60T:keccakc1024
185.54185.94186.71T:groestl512
228.24228.41228.64T:jh224
228.24228.42228.66T:jh256
228.27228.42228.68T:jh512
228.32228.47228.67T:jh384
Cycles/byte for 1536 bytes
25%50%75%hash
15.7115.9416.47T:blake2b
20.6920.9721.63T:k12
21.0221.0722.42T:blake2s
30.1630.2231.08T!!!sha256
30.1630.3231.06T!!!sha224
30.2330.3531.76T:blake32
34.8934.9335.75T!!!sha384
34.9234.9635.71T!!!sha512
35.9536.0037.23blake256
37.4337.4337.76T!!!shake128
40.8540.8841.34T!!!sha3224
42.6242.7343.83T:skein256256
43.7843.7945.52T:skein512256
44.4044.4744.88T!!!sha3256
44.5144.5345.05T!!!shake256
45.1945.1945.97T:bblake256
49.1449.2551.66T:skein512512
55.0155.0255.52T!!!sha3384
79.5979.6080.06T!!!sha3512
81.0881.0881.51T:round3jh256
81.0881.2081.73T:round3jh512
82.0482.1383.17T:blake64
84.3484.3685.05T:keccakc512
85.2885.2885.90T:keccak
87.9988.0689.13T:keccakc448
93.3094.0796.21blake512
103.87103.88104.59T:keccakc768
112.45112.52113.34T:skein10241024
116.52116.54117.20T:groestl256
149.69149.73150.59T:keccakc1024
200.41200.87202.50T:groestl512
234.29234.34235.02T:jh384
234.31234.37235.13T:jh512
234.28234.37235.16T:jh224
234.29234.46235.17T:jh256
Cycles/byte for 576 bytes
25%50%75%hash
18.2818.4718.98T:blake2b
21.53?21.67?24.07?T:blake2s
22.9723.2124.91T:k12
33.5033.7535.91T!!!sha224
33.4333.8235.90T!!!sha256
33.40?33.89?37.22?T:blake32
37.2437.5940.46T!!!sha384
37.3737.7740.27T!!!sha512
39.11?39.46?43.69?blake256
40.5640.9742.08T!!!shake128
45.0245.6548.76T:skein256256
47.79?48.96?55.24?T:skein512256
49.9050.4651.83T!!!shake256
49.8050.6251.34T!!!sha3256
49.7650.8351.67T!!!sha3224
53.64?54.90?62.53?T:skein512512
59.1459.7261.06T!!!sha3384
62.09?62.88?70.23?T:bblake256
85.7486.2789.82T:blake64
87.1287.5989.50T:round3jh256
87.2987.6889.09T!!!sha3512
87.1888.0189.82T:round3jh512
89.0689.6593.38T:keccak
94.0297.00103.55T:keccakc512
99.30?101.68?123.45?blake512
108.64108.78111.87T:keccakc448
111.22111.60114.85T:keccakc768
128.80129.17132.71T:groestl256
139.98140.37143.33T:skein10241024
163.68163.70166.75T:keccakc1024
220.81221.71230.30T:groestl512
250.45250.47252.22T:jh224
250.49250.51253.75T:jh256
250.51250.52254.43T:jh384
250.54250.67254.23T:jh512
Cycles/byte for 64 bytes
25%50%75%hash
27.8027.8128.04T:blake2s
41.6241.7043.99T:blake2b
60.7260.7262.83T:k12
72.58?72.70?82.69?T:blake32
74.7575.0478.80T!!!sha256
75.23?75.98?91.56?T:skein256256
76.0176.8980.04T!!!sha224
79.2879.5484.68blake256
80.9881.0283.88T!!!sha384
82.67?83.01?92.07?T!!!sha512
93.7993.8795.67T!!!sha3224
93.9093.9996.45T!!!sha3256
94.0494.0797.08T!!!sha3384
94.4394.5699.06T!!!sha3512
95.0495.28104.73T:skein512256
95.8495.9997.82T!!!shake256
96.2996.61103.48T!!!shake128
107.65?110.65?125.69?T:skein512512
164.26165.81174.79T:round3jh256
164.49166.05175.75T:round3jh512
169.07?170.11?188.82?T:blake64
172.41172.68180.22T:keccakc512
175.05175.75189.18T:keccakc1024
173.62?175.81?200.30?T:keccakc768
177.06177.43194.19T:keccak
223.02?226.78?252.00?T:keccakc448
277.54?281.16?332.05?T:bblake256
223.04?286.63?379.22?blake512
284.81?288.84?323.20?T:groestl256
437.38?453.17?490.63?T:skein10241024
458.62468.85499.30T:jh224
460.16471.62509.66T:jh256
459.35472.27503.25T:jh384
461.55473.25509.00T:jh512
567.21?580.20?638.17?T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
217.61218.07224.83T:blake2s
328.75328.88342.23T:blake2b
352.50352.71363.96T:blake32
360.79?364.83?419.25?blake256
380.53381.88408.10T!!!sha256
380.61384.09399.64T!!!sha224
434.91437.57459.81T:skein256256
473.20473.98486.73T:k12
650.68651.11677.99T!!!sha384
659.26?661.04?733.85?T!!!sha512
738.34738.43746.48T!!!sha3224
739.20739.71761.29T!!!sha3256
740.71741.38757.94T!!!sha3384
742.70743.83771.24T!!!sha3512
755.35755.87779.10T!!!shake256
758.83758.92766.94T!!!shake128
758.14?772.35?889.45?T:skein512256
864.79893.22931.75T:skein512512
1326.121329.401430.71T:round3jh512
1325.151332.721400.59T:round3jh256
1340.771342.661379.69T:keccakc512
1350.141352.651394.40T:keccakc768
1344.14?1354.65?1494.30?T:blake64
1358.54?1373.47?1518.60?T:keccakc1024
1405.981406.161476.55T:groestl256
1419.56?1437.43?1615.22?T:keccak
1778.031789.281878.25T:keccakc448
1948.411953.332068.14T:bblake256
1886.62?2307.98?3027.37?blake512
3505.60?3648.06?3911.64?T:skein10241024
3677.303745.454046.53T:jh384
3681.92?3768.15?4092.99?T:jh224
3702.663848.084059.41T:jh512
3698.10?3918.87?4151.09?T:jh256
4573.34?4859.50?5502.44?T:groestl512