VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20250415

[Page version: 20250609 20:22:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
6.046.046.05T:blake2b
6.296.326.35T:k12
6.386.396.40T:skein512512
6.396.396.40T:skein512256
6.746.756.76T:skein256256
9.459.719.99sha384
9.849.849.85T:blake2s
10.4410.4510.46sha512
10.6410.6610.67T:skein10241024
10.8510.8610.89T:blake64
10.9010.9310.95shake128
11.3211.3411.38blake512
12.2212.2512.32T:keccakc448
12.5212.5312.54sha3224
13.0013.0613.15T:keccakc512
13.3513.3513.38shake256
13.3513.3613.38sha3256
13.9013.9313.99T:keccak
14.5314.5514.55T:blake32
14.8215.0015.43sha224
15.8115.8415.87sha256
17.3417.3917.46T:keccakc768
17.8317.8517.87sha3384
18.9118.9318.97blake256
19.4419.4519.49T:bblake256
24.0624.1224.25T:keccakc1024
24.7124.7324.79sha3512
39.6639.8142.11T:groestl256
40.1040.1340.61T:jh256
40.1140.1340.76T:jh512
40.1140.1342.74T:jh224
40.1140.1442.69T:jh384
46.8446.9950.17T:round3jh512
46.8347.0649.60T:round3jh256
68.5472.0775.04T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
6.076.076.07T:blake2b
6.556.556.55T:skein512256
6.556.556.55T:skein512512
6.736.746.75T:k12
6.876.876.87T:skein256256
9.869.869.87T:blake2s
10.8810.8910.89sha512
11.1011.1011.11T:skein10241024
11.3111.3211.33T:blake64
11.3811.3911.40shake128
11.5611.5911.71sha384
11.7711.7811.79blake512
12.7912.7912.82T:keccakc448
12.9812.9812.98sha3224
13.6013.6013.64T:keccakc512
13.8113.8113.82sha3256
13.8213.8213.82shake256
14.4514.4514.48T:keccak
14.8614.8614.87T:blake32
16.1216.1316.14sha256
16.8216.8417.04sha224
17.4917.4917.53T:keccakc768
17.8617.8717.88sha3384
19.2919.3019.32blake256
21.4821.4821.49T:bblake256
24.6424.6424.71T:keccakc1024
25.2025.2025.22sha3512
40.6240.6641.81T:groestl256
40.7740.7741.01T:jh256
40.7740.7842.08T:jh224
40.7740.7841.09T:jh512
40.7740.7842.05T:jh384
47.6647.7449.01T:round3jh256
47.6747.7449.29T:round3jh512
74.7775.7076.45T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
6.116.116.12T:blake2b
6.806.806.81T:skein512256
6.816.816.81T:skein512512
7.067.067.07T:skein256256
7.427.447.46T:k12
9.909.909.91T:blake2s
11.6011.6111.61sha512
11.8411.8511.85T:skein10241024
12.0612.0712.07T:blake64
12.1512.1512.17shake128
12.5012.5112.53blake512
13.1113.1113.16T:keccakc448
13.1613.1613.17sha3224
14.2114.2114.23T:keccakc512
14.2714.2714.28sha3256
14.2914.2914.30shake256
14.6914.7214.77sha384
15.3315.3315.36T:keccak
15.3815.3915.39T:blake32
16.6016.6216.62sha256
17.6717.6817.69T:keccakc768
17.8917.9017.90sha3384
19.9119.9219.93blake256
19.8919.9320.14sha224
24.8524.8524.87T:bblake256
25.5125.5225.55T:keccakc1024
25.9425.9425.97sha3512
41.8541.8541.86T:jh256
41.8541.8541.86T:jh224
41.8541.8541.87T:jh512
41.8541.8641.86T:jh384
42.1742.1842.23T:groestl256
48.9148.9148.93T:round3jh256
48.9248.9248.95T:round3jh512
80.1280.4184.26T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
6.866.866.87T:blake2b
7.497.497.51T:skein512256
7.507.507.50T:skein512512
7.597.597.59T:skein256256
8.638.678.72T:k12
9.979.979.97T:blake2s
12.3812.4112.41sha512
12.8812.8812.90T:blake64
13.0313.0313.05shake128
13.1713.1813.19blake512
15.0115.0215.03T:skein10241024
15.8715.8815.88sha3224
15.9015.9015.90sha3256
15.9315.9315.93shake256
16.2016.2016.25T:keccakc512
16.2016.2116.26T:keccakc448
16.2116.2116.21T:keccak
16.7616.8116.82T:blake32
17.8917.8917.91sha256
19.1319.1319.13sha3384
19.2719.2719.27T:keccakc768
21.5721.5721.59blake256
22.0122.1122.25sha384
28.1028.1828.27sha224
28.2028.2028.28T:keccakc1024
28.3028.3028.34sha3512
33.8433.8633.89T:bblake256
44.7344.7344.77T:jh256
44.7344.7444.77T:jh224
44.7344.7444.76T:jh384
44.7344.7444.77T:jh512
46.5946.6246.65T:groestl256
52.2552.2552.28T:round3jh256
52.2752.2752.30T:round3jh512
87.4787.5890.84T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
10.7510.7810.78T:blake2s
13.2713.2813.33T:blake2b
14.1714.1914.19T:skein256256
15.4815.5215.52T:skein512256
15.6115.6115.61T:skein512512
25.4725.4825.67sha512
26.7227.0827.38T:k12
27.4827.4827.52T:blake64
27.8427.8427.88blake512
29.0929.1429.67sha3256
29.1229.1429.17sha3224
29.1229.2029.20sha3384
29.2529.2830.03sha3512
29.4429.4529.47shake256
29.5829.5829.58shake128
33.4533.4533.94T:keccakc1024
33.9533.9733.98T:keccakc768
34.1134.1234.17T:keccakc512
34.1634.1634.16T:keccak
34.2734.3034.38T:keccakc448
34.3034.3034.33sha256
34.3334.3334.33T:blake32
42.4842.5942.69blake256
48.8848.8948.91T:skein10241024
81.3481.3481.70T:jh256
81.4181.4181.42T:jh384
81.4181.6481.83T:jh224
81.4581.6981.69T:jh512
94.9194.9195.19T:round3jh256
95.0395.0395.03T:round3jh512
102.61103.09103.28T:groestl256
119.38120.27121.34sha384
133.30133.91134.64sha224
148.92149.02149.33T:bblake256
219.06220.95233.70T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
85.0085.2585.50T:blake2s
85.5085.6285.62T:skein256256
105.12105.25105.25T:blake2b
123.12123.38123.38T:skein512256
124.00124.00124.00T:skein512512
150.25151.12151.12sha256
153.50154.12157.25T:blake32
190.88191.25193.25blake256
205.12205.25207.38sha512
209.38211.50213.00T:k12
221.12221.38222.12T:blake64
224.00224.25225.62blake512
228.25228.25228.62sha3256
228.50228.62228.75sha3384
228.50228.88229.00sha3224
229.50229.50229.75sha3512
231.00231.12231.25shake256
231.75231.75232.12shake128
269.38269.75271.38T:keccakc1024
272.88272.88273.88T:keccakc768
273.25273.25277.62T:keccakc512
273.62273.62275.75T:keccak
274.12274.38279.75T:keccakc448
391.12391.25392.00T:skein10241024
501.25503.12507.12T:groestl256
652.25652.25652.25T:jh256
652.88652.88653.00T:jh384
652.75653.12654.62T:jh224
653.12653.12654.12T:jh512
760.50760.50762.50T:round3jh256
761.50761.75761.75T:round3jh512
935.00942.38950.38sha224
957.12966.75991.88sha384
1039.381041.121042.12T:bblake256
1750.881757.621816.00T:groestl512