VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20241022

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
6.036.056.11T:blake2b
6.32?6.36?7.84?T:k12
6.756.756.77T:skein256256
5.07?6.97?10.08?T:skein512256
5.92?7.97?10.33?T:skein512512
9.849.859.89T:blake2s
7.43?10.23?28.20?sha512
5.56?10.66?14.80?sha384
10.6410.6610.69T:skein10241024
10.8510.8710.91T:blake64
6.65?11.33?17.46?blake512
10.41?12.28?14.14?T:keccakc448
7.24?12.37?14.15?shake128
8.30?12.98?16.33?shake256
10.95?13.09?15.19?T:keccakc512
11.63?13.97?16.14?T:keccak
6.70?14.13?18.39?sha3224
14.5114.5514.66T:blake32
2.20?14.92?16.54?sha3256
9.14?15.28?18.77?sha224
6.46?15.65?18.89?sha256
15.72?17.55?20.06?T:keccakc768
14.40?18.53?21.73?blake256
14.08?19.39?20.71?sha3384
9.58?20.30?21.90?T:bblake256
21.51?24.16?27.38?T:keccakc1024
21.79?25.76?30.17?sha3512
38.38?39.82?43.67?T:groestl256
20.58?41.55?44.72?T:jh224
21.43?41.55?44.69?T:jh512
30.17?41.93?44.79?T:jh256
34.65?42.05?43.97?T:jh384
46.9949.5451.44T:round3jh256
47.1249.7052.35T:round3jh512
70.01?77.73?84.97?T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
6.076.076.10T:blake2b
6.756.767.49T:k12
6.55?6.84?8.39?T:skein512256
6.876.876.88T:skein256256
6.56?7.34?8.52?T:skein512512
9.869.879.89T:blake2s
11.1011.1111.12T:skein10241024
11.3111.3211.34T:blake64
10.94?11.60?19.77?sha512
11.39?12.15?13.01?shake128
12.49?12.70?14.86?blake512
11.84?12.70?14.29?sha384
12.7912.8313.74T:keccakc448
13.6013.6414.67T:keccakc512
12.99?13.83?15.91?sha3224
14.4514.5015.56T:keccak
13.83?14.64?15.40?sha3256
13.8214.6615.30shake256
14.8614.8614.91T:blake32
16.1416.8517.66sha256
17.4917.5918.83T:keccakc768
17.0817.9518.88sha224
17.8818.6819.31sha3384
20.0120.1820.88blake256
22.1922.8123.40T:bblake256
24.6424.7126.27T:keccakc1024
25.2526.5827.92sha3512
40.8040.8342.74T:groestl256
42.1542.7643.74T:jh512
42.1342.7943.79T:jh256
42.1642.8043.77T:jh224
42.2042.8343.39T:jh384
50.0750.5751.24T:round3jh256
50.1650.6551.48T:round3jh512
78.1381.1581.95T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
6.116.116.11T:blake2b
6.806.806.84T:skein512256
6.816.826.87T:skein512512
7.067.067.07T:skein256256
7.437.447.46T:k12
9.909.909.90T:blake2s
11.62?11.64?13.67?sha512
11.8511.8511.86T:skein10241024
12.0712.0712.08T:blake64
12.15?12.21?15.77?shake128
12.52?12.64?17.22?blake512
13.1113.1313.36T:keccakc448
13.16?13.21?19.36?sha3224
14.2114.2315.56T:keccakc512
14.29?14.32?18.82?shake256
14.28?14.32?19.10?sha3256
15.3315.3515.68T:keccak
15.3815.3915.40T:blake32
16.65?16.68?18.80?sha256
15.39?17.20?24.66?sha384
17.67?17.73?22.18?T:keccakc768
17.93?18.23?24.85?sha3384
20.36?22.36?32.05?sha224
20.05?22.86?55.59?blake256
25.5225.5728.15T:keccakc1024
24.95?27.03?32.95?T:bblake256
25.97?28.03?30.31?sha3512
42.4842.5044.34T:groestl256
43.68?44.58?60.95?T:jh256
43.68?45.04?56.87?T:jh512
43.70?45.22?56.47?T:jh224
43.70?45.31?56.38?T:jh384
51.30?51.59?58.97?T:round3jh512
51.2752.3356.31T:round3jh256
81.5788.0189.05T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
6.866.866.86T:blake2b
7.497.497.52T:skein512256
7.507.507.55T:skein512512
7.597.597.61T:skein256256
8.648.698.78T:k12
9.979.979.98T:blake2s
12.4112.4313.48sha512
12.8812.8812.90T:blake64
13.0313.0413.15shake128
13.18?13.20?16.80?blake512
15.0115.0315.04T:skein10241024
15.8815.9216.08sha3224
15.9015.9416.62sha3256
15.93?15.96?19.61?shake256
16.2016.2016.52T:keccakc512
16.2016.2116.53T:keccakc448
16.2216.2216.45T:keccak
16.7616.7916.83T:blake32
17.9117.9819.26sha256
19.13?19.18?21.39?sha3384
19.2719.3420.05T:keccakc768
21.58?21.70?31.40?blake256
23.24?23.85?31.90?sha384
28.2028.2529.44T:keccakc1024
28.32?28.37?36.47?sha3512
28.27?29.51?41.68?sha224
33.92?37.07?51.34?T:bblake256
46.9746.9848.59T:groestl256
44.80?50.41?57.39?T:jh512
44.79?50.67?76.35?T:jh256
44.79?53.05?72.99?T:jh384
45.00?54.33?106.05?T:jh224
53.25?62.29?100.70?T:round3jh256
53.35?63.47?136.52?T:round3jh512
88.91?97.43?100.14?T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
10.7510.7810.78T:blake2s
13.2813.2813.28T:blake2b
14.1714.1714.17T:skein256256
15.4515.4815.56T:skein512256
15.6115.6115.66T:skein512512
25.4725.4725.58sha512
26.8127.2027.98T:k12
27.4827.5227.52T:blake64
27.8127.8928.28blake512
29.0929.0929.38sha3256
29.1229.1231.55sha3384
29.1229.1730.30sha3224
29.2329.2330.84sha3512
29.4529.4529.94shake256
29.5829.5829.95shake128
33.4233.4737.06T:keccakc1024
33.9533.9735.45T:keccakc768
34.1634.1935.94T:keccakc512
34.1634.2734.45T:keccak
34.3034.3135.27T:keccakc448
34.3034.3334.58sha256
34.3334.3334.33T:blake32
42.7342.8343.28blake256
48.9148.9148.91T:skein10241024
81.3481.3682.16T:jh256
81.4181.4282.34T:jh384
81.4181.6681.95T:jh224
81.4481.7084.28T:jh512
100.70100.80103.28T:round3jh256
100.80100.80101.53T:round3jh512
103.77103.81104.14T:groestl256
129.08?130.72?147.67?sha384
131.25133.08143.36sha224
149.09?149.50?219.17?T:bblake256
222.86?243.27?259.09?T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
85.0085.2585.38T:blake2s
85.5085.5085.50T:skein256256
105.12105.12105.12T:blake2b
123.12123.38125.62T:skein512256
124.00124.12124.50T:skein512512
150.25150.25152.00sha256
153.50153.50153.50T:blake32
190.88191.00191.62blake256
205.12205.12207.38sha512
209.62211.00213.38T:k12
221.12221.38221.38T:blake64
224.00224.50225.62blake512
228.12228.12231.88sha3384
228.25228.25237.50sha3256
228.88229.00229.12sha3224
229.00229.00229.62sha3512
231.12231.25236.62shake256
231.75231.75237.25shake128
269.75269.75276.62T:keccakc1024
272.88273.00281.88T:keccakc768
273.00273.38277.50T:keccakc512
274.12274.25274.38T:keccakc448
274.25275.00279.62T:keccak
390.88390.88391.00T:skein10241024
508.62509.50534.12T:groestl256
652.75653.12662.00T:jh224
653.12653.50665.88T:jh512
652.25654.38664.75T:jh256
652.88654.38663.25T:jh384
802.75804.00822.88T:round3jh256
804.00805.62854.12T:round3jh512
935.88?944.00?1071.00?sha224
1041.38?1043.75?1316.25?T:bblake256
1033.381045.001112.38sha384
1801.38?2028.12?2130.00?T:groestl512