VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
14.11?15.69?17.78?sha224
14.87?15.95?16.65?sha256
16.7216.8517.26T:blake2s
21.4221.5722.34T:blake32
23.8824.7726.39sha384
24.3024.8925.81T:blake2b
26.6427.1029.40sha512
27.4627.8628.33blake256
28.4828.9429.74T:bblake256
28.57?29.00?31.80?T:k12
32.5332.9034.56T:skein256256
42.14?42.93?47.49?blake512
43.0143.8646.53T:skein512256
43.1443.9746.20T:skein512512
42.34?44.27?47.64?shake128
47.0647.6749.84T:round3jh512
47.4447.9950.58T:round3jh256
46.87?50.50?53.17?sha3224
50.9751.5653.61T:blake64
51.0253.4655.72shake256
50.7353.5756.33sha3256
60.07?63.63?68.84?T:keccakc448
64.7365.6370.07T:keccakc512
66.0066.9870.25T:skein10241024
67.6969.7072.76T:keccak
67.37?70.74?78.70?sha3384
70.6273.2576.66T:groestl256
83.39?86.65?93.11?T:keccakc768
90.14?94.78?106.11?sha3512
101.19?107.14?117.52?T:groestl512
114.06117.66126.19T:keccakc1024
115.55119.03127.06T:jh256
111.80?120.02?126.82?T:jh224
112.54?120.10?127.15?T:jh384
115.03?120.44?128.67?T:jh512
Cycles/byte for 4096 bytes
25%50%75%hash
16.5916.9817.21sha256
17.6017.6217.78T:blake2s
18.0018.4719.31sha224
22.6022.6323.01T:blake32
26.2826.3326.72T:blake2b
27.8027.8928.61sha384
28.7828.8730.00sha512
29.0729.1229.32blake256
31.3431.4432.79T:k12
32.6432.6933.04T:bblake256
33.6933.8034.61T:skein256256
45.2745.4846.52T:skein512512
45.2745.5247.73blake512
45.3345.5346.72T:skein512256
47.8148.2749.86shake128
49.0449.0850.15T:round3jh512
49.0449.2450.52T:round3jh256
53.9053.9754.97T:blake64
53.7754.4155.59sha3224
57.1057.5858.74sha3256
57.1657.5858.60shake256
65.5966.4468.82T:keccakc448
68.2368.4270.60T:keccakc512
69.4669.7471.34T:skein10241024
71.5572.4176.24sha3384
72.2672.5574.00T:keccak
75.7275.9577.47T:groestl256
85.8386.6689.81T:keccakc768
98.4399.09104.27sha3512
110.01111.79116.52T:groestl512
118.99119.81123.90T:keccakc1024
119.57120.56124.49T:jh256
119.68121.16124.39T:jh224
119.63121.26124.57T:jh384
119.71121.42125.32T:jh512
Cycles/byte for 1536 bytes
25%50%75%hash
18.7718.8418.98T:blake2s
18.5518.9019.13sha256
22.2922.7323.15sha224
24.4524.4924.74T:blake32
28.5028.5928.73T:blake2b
31.1731.2231.34blake256
31.8131.8632.25sha512
32.8432.9133.49sha384
35.3835.5335.78T:skein256256
35.4435.5635.82T:k12
38.8438.9139.06T:bblake256
47.8348.0548.59T:skein512256
47.8748.0548.44T:skein512512
49.8549.9750.52blake512
51.4251.4451.58T:round3jh256
51.4351.4751.68T:round3jh512
55.0255.2155.90shake128
57.9758.0558.32T:blake64
58.5158.8259.78sha3224
62.9763.1364.09sha3256
63.0863.4664.85shake256
68.1068.3168.92T:keccakc448
71.6371.6771.91T:keccakc512
74.4674.5375.19T:skein10241024
75.4675.8478.03sha3384
77.2577.3277.84T:keccak
79.9580.2382.18T:groestl256
87.0187.1888.95T:keccakc768
105.20105.81108.77sha3512
119.56120.68123.96T:groestl512
123.49123.61125.39T:keccakc1024
123.60123.72124.33T:jh512
123.63123.78126.45T:jh256
123.61123.79129.93T:jh224
123.62123.80125.43T:jh384
Cycles/byte for 576 bytes
25%50%75%hash
21.7821.8421.96T:blake2s
23.8224.1924.43sha256
29.4729.5729.69T:blake32
33.6333.9134.41sha224
36.8936.9937.37blake256
37.0737.2037.30sha512
37.1837.3337.78T:blake2b
40.0640.1340.39T:skein256256
43.3343.6144.25T:k12
43.7143.9244.33sha384
54.9955.1455.52T:skein512512
54.9755.1755.50T:skein512256
55.3455.4155.71T:bblake256
57.1257.4558.01blake512
57.8357.9058.57T:round3jh256
57.8957.9458.41T:round3jh512
63.3463.4063.54T:blake64
70.1470.5171.81shake128
80.1580.4882.01sha3256
80.2180.5981.62sha3224
81.0681.5583.85shake256
82.6882.7482.80T:keccakc512
83.1383.1783.43T:keccak
86.7586.9687.37T:keccakc448
91.6091.7892.19T:groestl256
91.5091.8694.61sha3384
95.2995.4596.01T:skein10241024
96.1196.2296.43T:keccakc768
124.78125.11126.96sha3512
134.79134.86135.45T:jh256
134.82134.93135.70T:jh384
134.82134.97135.58T:jh224
134.88134.97135.74T:jh512
135.48136.59139.16T:groestl512
137.99138.09138.45T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
59.5659.8360.70T:blake2s
89.4190.6291.72sha256
92.9293.5594.52T:blake32
95.5396.8698.36T:blake2b
100.16100.73101.33T:skein256256
108.69109.41110.22blake256
116.58117.05118.27sha512
139.86140.22140.86T:round3jh512
139.86140.33141.98T:round3jh256
142.67143.58145.34T:skein512256
143.61145.19146.22T:skein512512
148.88151.83162.67T:k12
156.50156.89159.17T:blake64
158.23159.73172.31blake512
176.36177.95180.72sha224
183.41183.95185.34T:keccakc1024
184.91185.92187.38T:keccakc768
187.69188.23189.09T:keccakc512
192.27194.48195.38sha384
194.48195.28195.97T:keccak
212.39213.72215.25T:keccakc448
237.66238.56239.98T:groestl256
266.53266.98268.44T:bblake256
269.48270.91277.16sha3512
270.09272.47282.70sha3224
270.80272.69280.75sha3256
271.05274.25282.50sha3384
278.61279.22280.16T:jh224
278.53279.25279.89T:jh256
278.58279.30279.97T:jh384
279.20279.92280.88T:jh512
281.64283.53286.97shake256
286.86288.33294.08shake128
322.86323.44324.31T:skein10241024
375.11381.73387.30T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
474.25478.88485.00T:blake2s
577.50580.50585.62T:blake32
587.00590.62599.88sha256
663.00668.00696.38blake256
672.38675.62682.50T:skein256256
770.75775.00782.50T:blake2b
933.75939.62945.50sha512
1127.751131.881135.75T:round3jh256
1132.751135.501141.62T:round3jh512
1153.501162.001170.75T:skein512256
1164.121170.621178.25T:skein512512
1175.881181.501191.75T:k12
1259.751264.381271.38T:blake64
1262.001272.751314.50blake512
1280.251298.121319.88sha224
1328.381334.121350.75T:groestl256
1469.251474.121479.75T:keccakc1024
1490.251493.001504.75T:keccakc768
1502.001506.881511.25T:keccakc512
1542.881556.121565.75sha384
1558.381562.121571.00T:keccak
1692.121707.001741.25T:keccakc448
1900.751907.751912.25T:bblake256
2147.122160.622194.00sha3512
2172.622180.882218.50sha3256
2162.752181.122219.50sha3384
2179.382199.252287.88sha3224
2241.622245.002253.88T:jh256
2243.622249.502257.62T:jh384
2246.252250.122257.62T:jh224
2249.882253.882260.88T:jh512
2248.622278.252471.62shake256
2290.882304.882341.62shake128
2591.882597.002602.12T:skein10241024
3020.383074.623176.75T:groestl512