VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20231107

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 6.04? 6.10? 7.63? T:blake2b 5.80? 6.35? 7.84? T:k12 6.41? 6.41? 7.75? T:skein512256 6.41? 6.41? 7.78? T:skein512512 6.65? 6.77? 8.73? T:skein256256 8.85? 11.08? 12.33? sha384 8.42? 11.35? 11.84? T:blake2s 9.09? 11.84? 11.90? sha512 9.28? 11.96? 12.33? T:skein10241024 9.28? 12.39? 12.63? T:blake64 10.19? 12.82? 13.12? blake512 10.01? 12.94? 13.31? shake128 11.32? 13.98? 14.50? T:keccakc448 12.97? 14.71? 14.92? sha3224 13.52? 14.74? 16.17? shake256 12.63? 14.89? 15.50? T:keccakc512 14.89? 15.26? 17.55? sha224 13.79? 15.44? 15.72? sha3256 13.79? 15.62? 16.69? T:keccak 14.53? 16.05? 16.97? T:blake32 15.72? 16.30? 18.01? sha256 17.15? 17.52? 20.29? T:keccakc768 18.55? 18.80? 21.82? sha3384 18.62? 19.01? 21.61? blake256 18.86 19.56 20.94 T:bblake256 23.19? 25.15? 28.02? T:keccakc1024 26.52 27.59 28.44 sha3512 40.44 41.87 44.01 T:jh256 40.10 42.21 42.66 T:groestl256 40.16 42.48 43.52 T:jh224 40.10 42.54 44.22 T:jh384 40.47 42.54 43.06 T:jh512 48.22 49.32 51.39 T:round3jh512 48.46 49.77 51.57 T:round3jh256 72.69 75.23 78.22 T:groestl512

Cycles/byte for 4096 bytes 25% 50% 75% hash 6.07? 6.10? 6.87? T:blake2b 6.56 6.56 7.23 T:skein512256 6.56 6.56 7.25 T:skein512512 6.71? 6.74? 7.46? T:k12 6.87? 6.90? 7.86? T:skein256256 9.89 10.62 10.86 T:blake2s 10.86 11.57 11.60 sha512 11.11 11.78 11.93 T:skein10241024 11.32 12.08 12.21 T:blake64 11.99 12.54 12.66 blake512 12.15 12.54 13.03 sha384 12.21 12.60 12.76 shake128 13.26 13.70 13.93 T:keccakc448 14.33 14.37 14.45 sha3224 14.45 14.59 14.86 T:keccakc512 15.15 15.17 15.50 shake256 15.20 15.23 15.30 sha3256 15.35 15.38 15.87 T:keccak 15.62 15.66 16.11 T:blake32 16.74 16.78 17.15 sha256 17.76 17.82 18.20 sha224 18.40 18.46 18.97 T:keccakc768 19.50 19.56 20.25 sha3384 20.02 20.07 20.63 blake256 22.19 22.26 22.92 T:bblake256 25.54 26.06 26.61 T:keccakc1024 27.66 28.08 28.44 sha3512 42.19 42.54 43.43 T:jh256 42.21 42.69 43.18 T:jh224 42.27 42.69 42.88 T:groestl256 42.18 42.72 43.53 T:jh384 42.18 42.76 42.98 T:jh512 49.71 49.77 50.57 T:round3jh512 49.84 50.14 50.69 T:round3jh256 78.80 79.25 80.22 T:groestl512

Cycles/byte for 1536 bytes 25% 50% 75% hash 6.10 6.18 6.18 T:blake2b 6.84 6.84 6.84 T:skein512256 6.84 6.84 6.84 T:skein512512 7.08 7.08 7.08 T:skein256256 7.32 7.41 7.49 T:k12 9.93 9.93 10.66 T:blake2s 11.56? 11.56? 13.35? sha512 11.80? 11.88? 13.59? T:skein10241024 12.04? 12.13? 14.16? T:blake64 12.53? 12.53? 14.57? blake512 12.53? 12.53? 14.65? shake128 13.10? 13.18? 15.54? T:keccakc448 13.67? 13.75? 15.87? sha3224 14.24? 14.32? 16.76? T:keccakc512 14.81? 14.89? 16.93? shake256 14.89? 14.89? 17.09? sha3256 14.97? 15.18? 17.33? sha384 15.38? 15.38? 17.82? T:keccak 15.46? 15.54? 17.58? T:blake32 16.52? 16.52? 18.39? sha256 17.66? 17.82? 20.18? T:keccakc768 18.64? 18.72? 21.00? sha3384 19.86 20.02 21.97 blake256 20.10? 20.47? 22.71? sha224 24.82 26.77 27.02 T:bblake256 25.55 27.83 27.99 T:keccakc1024 27.18 29.38 29.95 sha3512 43.78 43.78 44.76 T:jh224 43.78 43.78 44.76 T:jh256 43.78 43.78 45.08 T:jh512 43.78 43.86 45.08 T:jh384 44.19 44.19 45.17 T:groestl256 50.78 50.78 52.08 T:round3jh512 50.78 50.78 52.16 T:round3jh256 85.04 85.61 87.08 T:groestl512

Cycles/byte for 576 bytes 25% 50% 75% hash 6.94 6.94 6.94 T:blake2b 7.38 7.60 7.60 T:skein512256 7.38 7.60 7.60 T:skein512512 7.60 7.60 7.60 T:skein256256 8.46 8.68 8.68 T:k12 9.98 9.98 10.20 T:blake2s 12.15 12.15 12.37 sha512 12.80 13.02 13.02 T:blake64 13.24 13.24 13.24 blake512 13.45 13.45 13.67 shake128 14.97 14.97 15.19 T:skein10241024 16.28 16.28 16.49 T:keccak 16.28 16.28 16.71 T:keccakc448 16.28 16.28 16.71 T:keccakc512 16.49 16.49 16.71 shake256 16.49 16.71 16.71 sha3224 16.49 16.71 17.14 sha3256 16.93 16.93 17.14 T:blake32 17.80 17.80 17.80 sha256 19.31 19.31 19.75 T:keccakc768 19.97 19.97 20.18 sha3384 21.48 21.48 21.92 blake256 22.14? 22.57? 25.82? sha384 27.78? 28.21? 31.68? sha224 28.21 28.21 31.03 T:keccakc1024 29.51? 29.73? 35.37? sha3512 33.85? 33.85? 39.28? T:bblake256 44.70? 44.70? 49.91? T:jh256 44.70? 44.70? 49.91? T:jh512 44.70? 44.70? 50.13? T:jh224 44.70? 44.70? 50.13? T:jh384 46.66? 46.88? 51.87? T:groestl256 52.30 52.30 57.29 T:round3jh256 52.30 54.04 57.51 T:round3jh512 88.98 94.40 95.49 T:groestl512

Cycles/byte for 64 bytes 25% 50% 75% hash 9.77? 11.72? 11.72? T:blake2s 13.67 13.67 13.67 T:blake2b 13.67? 13.67? 15.62? T:skein256256 15.62 15.62 15.62 T:skein512256 15.62 15.62 15.62 T:skein512512 23.44 25.39 25.39 sha512 25.39 25.39 27.34 T:k12 27.34 27.34 27.34 T:blake64 27.34 29.30 29.30 blake512 29.30 31.25 31.25 sha3512 31.25 31.25 31.25 sha3224 31.25 31.25 31.25 sha3256 31.25 31.25 31.25 sha3384 31.25 31.25 31.25 shake128 31.25 31.25 31.25 shake256 33.20 33.20 35.16 T:keccakc1024 33.20 33.20 35.16 sha256 33.20 35.16 35.16 T:keccak 33.20 35.16 35.16 T:keccakc448 33.20 35.16 35.16 T:keccakc512 33.20 35.16 35.16 T:keccakc768 35.16 35.16 37.11 T:blake32 42.97 42.97 42.97 blake256 48.83 48.83 48.83 T:skein10241024 82.03 82.03 82.03 T:jh224 82.03 82.03 82.03 T:jh256 82.03 82.03 82.03 T:jh384 82.03 82.03 82.03 T:jh512 95.70 95.70 95.70 T:round3jh256 95.70 95.70 95.70 T:round3jh512 103.52 103.52 103.52 T:groestl256 121.09 123.05 128.91 sha384 128.91 130.86 134.77 sha224 148.44 148.44 148.44 T:bblake256 218.75? 220.70? 271.48? T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 78.12? 93.75? 93.75? T:blake2s 78.12? 93.75? 93.75? T:skein256256 109.38 109.38 109.38 T:blake2b 125.00 125.00 125.00 T:skein512256 125.00 125.00 125.00 T:skein512512 140.62? 156.25? 156.25? sha256 156.25 171.88 171.88 T:blake32 187.50 187.50 203.12 blake256 187.50 203.12 203.12 T:k12 203.12 203.12 203.12 sha512 218.75 218.75 234.38 T:blake64 218.75 234.38 234.38 blake512 234.38 234.38 250.00 sha3256 234.38 250.00 250.00 sha3224 234.38 250.00 250.00 sha3384 234.38 250.00 250.00 sha3512 234.38 250.00 250.00 shake128 234.38 250.00 250.00 shake256 265.62 265.62 281.25 T:keccakc1024 265.62 281.25 281.25 T:keccakc448 265.62 281.25 281.25 T:keccakc768 281.25 281.25 281.25 T:keccak 281.25 281.25 296.88 T:keccakc512 390.62 390.62 390.62 T:skein10241024 500.00 515.62 515.62 T:groestl256 656.25 656.25 656.25 T:jh224 656.25 656.25 656.25 T:jh256 656.25 656.25 656.25 T:jh384 656.25 656.25 656.25 T:jh512 765.62 765.62 765.62 T:round3jh256 765.62 765.62 765.62 T:round3jh512 906.25 921.88 968.75 sha224 968.75? 968.75? 1078.12? sha384 1031.25 1046.88 1046.88 T:bblake256 1750.00 1750.00 1843.75 T:groestl512