VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: armeabi; Cortex-A9+NEON (411fc093); 2011 TI OMAP 4430; 2 x 1000MHz; h7panda, supercop-20250922

[Page version: 20260203 05:35:43]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
14.11?15.69?17.78?sha224
14.87?15.95?16.65?sha256
16.7216.8517.26T:blake2s
21.4221.5722.34T:blake32
23.8824.7726.39sha384
24.3024.8925.81T:blake2b
26.6427.1029.40sha512
27.4627.8628.33blake256
28.4828.9429.74T:bblake256
28.57?29.00?31.80?T:k12
32.5332.9034.56T:skein256256
42.14?42.93?47.49?blake512
43.0143.8646.53T:skein512256
43.1443.9746.20T:skein512512
42.34?44.27?47.64?shake128
47.0647.6749.84T:round3jh512
47.4447.9950.58T:round3jh256
46.87?50.50?53.17?sha3224
50.9751.5653.61T:blake64
51.0253.4655.72shake256
50.7353.5756.33sha3256
60.07?63.63?68.84?T:keccakc448
64.7365.6370.07T:keccakc512
66.0066.9870.25T:skein10241024
67.6969.7072.76T:keccak
67.37?70.74?78.70?sha3384
70.6273.2576.66T:groestl256
83.39?86.65?93.11?T:keccakc768
90.14?94.78?106.11?sha3512
101.19?107.14?117.52?T:groestl512
114.06117.66126.19T:keccakc1024
115.55119.03127.06T:jh256
111.80?120.02?126.82?T:jh224
112.54?120.10?127.15?T:jh384
115.03?120.44?128.67?T:jh512
Cycles/byte for 4096 bytes
25%50%75%hash
16.5916.9817.21sha256
17.6017.6217.78T:blake2s
18.0018.4719.31sha224
22.6022.6323.01T:blake32
26.2826.3326.72T:blake2b
27.8027.8928.61sha384
28.7828.8730.00sha512
29.0729.1229.32blake256
31.3431.4432.79T:k12
32.6432.6933.04T:bblake256
33.6933.8034.61T:skein256256
45.2745.4846.52T:skein512512
45.2745.5247.73blake512
45.3345.5346.72T:skein512256
47.8148.2749.86shake128
49.0449.0850.15T:round3jh512
49.0449.2450.52T:round3jh256
53.9053.9754.97T:blake64
53.7754.4155.59sha3224
57.1057.5858.74sha3256
57.1657.5858.60shake256
65.5966.4468.82T:keccakc448
68.2368.4270.60T:keccakc512
69.4669.7471.34T:skein10241024
71.5572.4176.24sha3384
72.2672.5574.00T:keccak
75.7275.9577.47T:groestl256
85.8386.6689.81T:keccakc768
98.4399.09104.27sha3512
110.01111.79116.52T:groestl512
118.99119.81123.90T:keccakc1024
119.57120.56124.49T:jh256
119.68121.16124.39T:jh224
119.63121.26124.57T:jh384
119.71121.42125.32T:jh512
Cycles/byte for 1536 bytes
25%50%75%hash
18.7718.8418.98T:blake2s
18.5518.9019.13sha256
22.2922.7323.15sha224
24.4524.4924.74T:blake32
28.5028.5928.73T:blake2b
31.1731.2231.34blake256
31.8131.8632.25sha512
32.8432.9133.49sha384
35.3835.5335.78T:skein256256
35.4435.5635.82T:k12
38.8438.9139.06T:bblake256
47.8348.0548.59T:skein512256
47.8748.0548.44T:skein512512
49.8549.9750.52blake512
51.4251.4451.58T:round3jh256
51.4351.4751.68T:round3jh512
55.0255.2155.90shake128
57.9758.0558.32T:blake64
58.5158.8259.78sha3224
62.9763.1364.09sha3256
63.0863.4664.85shake256
68.1068.3168.92T:keccakc448
71.6371.6771.91T:keccakc512
74.4674.5375.19T:skein10241024
75.4675.8478.03sha3384
77.2577.3277.84T:keccak
79.9580.2382.18T:groestl256
87.0187.1888.95T:keccakc768
105.20105.81108.77sha3512
119.56120.68123.96T:groestl512
123.49123.61125.39T:keccakc1024
123.60123.72124.33T:jh512
123.63123.78126.45T:jh256
123.61123.79129.93T:jh224
123.62123.80125.43T:jh384
Cycles/byte for 576 bytes
25%50%75%hash
21.7821.8421.96T:blake2s
23.8224.1924.43sha256
29.4729.5729.69T:blake32
33.6333.9134.41sha224
36.8936.9937.37blake256
37.0737.2037.30sha512
37.1837.3337.78T:blake2b
40.0640.1340.39T:skein256256
43.3343.6144.25T:k12
43.7143.9244.33sha384
54.9955.1455.52T:skein512512
54.9755.1755.50T:skein512256
55.3455.4155.71T:bblake256
57.1257.4558.01blake512
57.8357.9058.57T:round3jh256
57.8957.9458.41T:round3jh512
63.3463.4063.54T:blake64
70.1470.5171.81shake128
80.1580.4882.01sha3256
80.2180.5981.62sha3224
81.0681.5583.85shake256
82.6882.7482.80T:keccakc512
83.1383.1783.43T:keccak
86.7586.9687.37T:keccakc448
91.6091.7892.19T:groestl256
91.5091.8694.61sha3384
95.2995.4596.01T:skein10241024
96.1196.2296.43T:keccakc768
124.78125.11126.96sha3512
134.79134.86135.45T:jh256
134.82134.93135.70T:jh384
134.82134.97135.58T:jh224
134.88134.97135.74T:jh512
135.48136.59139.16T:groestl512
137.99138.09138.45T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
59.5659.8360.70T:blake2s
89.4190.6291.72sha256
92.9293.5594.52T:blake32
95.5396.8698.36T:blake2b
100.16100.73101.33T:skein256256
108.69109.41110.22blake256
116.58117.05118.27sha512
139.86140.22140.86T:round3jh512
139.86140.33141.98T:round3jh256
142.67143.58145.34T:skein512256
143.61145.19146.22T:skein512512
148.88151.83162.67T:k12
156.50156.89159.17T:blake64
158.23159.73172.31blake512
176.36177.95180.72sha224
183.41183.95185.34T:keccakc1024
184.91185.92187.38T:keccakc768
187.69188.23189.09T:keccakc512
192.27194.48195.38sha384
194.48195.28195.97T:keccak
212.39213.72215.25T:keccakc448
237.66238.56239.98T:groestl256
266.53266.98268.44T:bblake256
269.48270.91277.16sha3512
270.09272.47282.70sha3224
270.80272.69280.75sha3256
271.05274.25282.50sha3384
278.61279.22280.16T:jh224
278.53279.25279.89T:jh256
278.58279.30279.97T:jh384
279.20279.92280.88T:jh512
281.64283.53286.97shake256
286.86288.33294.08shake128
322.86323.44324.31T:skein10241024
375.11381.73387.30T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
474.25478.88485.00T:blake2s
577.50580.50585.62T:blake32
587.00590.62599.88sha256
663.00668.00696.38blake256
672.38675.62682.50T:skein256256
770.75775.00782.50T:blake2b
933.75939.62945.50sha512
1127.751131.881135.75T:round3jh256
1132.751135.501141.62T:round3jh512
1153.501162.001170.75T:skein512256
1164.121170.621178.25T:skein512512
1175.881181.501191.75T:k12
1259.751264.381271.38T:blake64
1262.001272.751314.50blake512
1280.251298.121319.88sha224
1328.381334.121350.75T:groestl256
1469.251474.121479.75T:keccakc1024
1490.251493.001504.75T:keccakc768
1502.001506.881511.25T:keccakc512
1542.881556.121565.75sha384
1558.381562.121571.00T:keccak
1692.121707.001741.25T:keccakc448
1900.751907.751912.25T:bblake256
2147.122160.622194.00sha3512
2172.622180.882218.50sha3256
2162.752181.122219.50sha3384
2179.382199.252287.88sha3224
2241.622245.002253.88T:jh256
2243.622249.502257.62T:jh384
2246.252250.122257.62T:jh224
2249.882253.882260.88T:jh512
2248.622278.252471.62shake256
2290.882304.882341.62shake128
2591.882597.002602.12T:skein10241024
3020.383074.623176.75T:groestl512