VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A76 (414fd0b1); 2023 Broadcom BCM2712; 4 x 1500MHz; pi5, supercop-20250415

[Page version: 20250609 20:22:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.50?1.62?1.68?sha224
2.032.032.04sha256
3.343.373.41T:k12
3.753.763.77T:blake2b
4.404.424.44T:skein512256
4.414.434.44T:skein512512
5.175.195.21T:skein10241024
5.936.046.13sha384
6.156.186.19T:blake2s
6.206.236.28T:skein256256
6.266.276.29shake128
6.266.286.31T:blake64
6.276.306.33sha512
6.776.806.83blake512
7.157.167.17T:keccakc448
7.257.277.29sha3224
7.657.697.70T:keccakc512
7.787.807.82shake256
7.797.807.82sha3256
8.158.178.18T:keccak
8.368.448.51T:blake32
10.2310.2510.28T:keccakc768
10.5010.5210.53sha3384
10.9210.9311.00blake256
11.0411.0811.13T:bblake256
14.2714.3014.32T:keccakc1024
14.5714.5914.61sha3512
17.4317.5017.58T:groestl256
24.6924.7124.90T:jh224
24.6924.7324.87T:jh256
24.7024.7724.79T:jh384
24.7724.9024.92T:jh512
26.4426.6926.87T:groestl512
29.0129.0329.05T:round3jh512
29.0129.0329.05T:round3jh256
Cycles/byte for 4096 bytes
25%50%75%hash
1.972.032.04sha224
2.072.072.07sha256
3.563.563.58T:k12
3.773.773.77T:blake2b
4.494.504.51T:skein512256
4.504.504.51T:skein512512
5.385.385.39T:skein10241024
6.186.196.19T:blake2s
6.306.316.32T:skein256256
6.526.536.54T:blake64
6.556.556.55shake128
6.556.566.57sha512
6.606.626.65sha384
7.007.017.02blake512
7.457.457.46T:keccakc448
7.547.557.55sha3224
7.967.977.98T:keccakc512
8.068.068.07sha3256
8.078.078.07shake256
8.468.478.47T:keccak
8.578.598.63T:blake32
10.2910.3010.31T:keccakc768
10.5310.5310.53sha3384
11.1611.1611.19blake256
12.1812.1912.21T:bblake256
14.5914.6014.61T:keccakc1024
14.8714.8714.88sha3512
17.9918.0118.03T:groestl256
25.1725.1825.18T:jh384
25.1725.1825.24T:jh224
25.1725.1825.24T:jh256
25.1825.2425.25T:jh512
27.8427.9428.00T:groestl512
29.5029.5029.51T:round3jh256
29.5029.5029.51T:round3jh512
Cycles/byte for 1536 bytes
25%50%75%hash
2.122.122.12sha256
2.662.722.73sha224
3.783.783.79T:blake2b
3.883.883.89T:k12
4.634.644.65T:skein512256
4.634.644.65T:skein512512
5.695.715.72T:skein10241024
6.206.216.24T:blake2s
6.396.416.43T:skein256256
6.926.936.94T:blake64
6.976.996.99sha512
6.997.017.01shake128
7.387.397.42blake512
7.577.587.58T:keccakc448
7.567.587.68sha384
7.667.667.68sha3224
8.288.298.30T:keccakc512
8.348.348.35sha3256
8.348.368.37shake256
8.858.878.88T:blake32
8.968.968.98T:keccak
10.3510.3610.37T:keccakc768
10.5410.5510.57sha3384
11.4811.4911.51blake256
14.0314.0414.07T:bblake256
15.0815.0915.11T:keccakc1024
15.3315.3415.35sha3512
18.7418.7718.80T:groestl256
25.8425.8525.87T:jh224
25.8625.9025.92T:jh256
25.8625.9125.94T:jh512
25.8525.9125.93T:jh384
30.0030.0330.07T:groestl512
30.2930.3030.31T:round3jh256
30.2930.3030.31T:round3jh512
Cycles/byte for 576 bytes
25%50%75%hash
2.272.282.28sha256
4.234.244.24T:blake2b
4.304.314.36T:k12
4.644.654.69sha224
4.984.995.01T:skein512512
4.985.005.01T:skein512256
6.226.246.26T:blake2s
6.686.706.72T:skein256256
7.137.157.16T:skein10241024
7.297.317.33T:blake64
7.337.357.37sha512
7.497.517.52shake128
7.677.687.70blake512
9.259.279.30sha3224
9.279.289.30sha3256
9.299.309.34shake256
9.299.309.32T:keccakc512
9.299.319.35T:keccakc448
9.319.339.34T:keccak
9.599.609.64T:blake32
9.709.729.92sha384
11.1411.1611.18T:keccakc768
11.2311.2411.27sha3384
12.3212.3312.37blake256
16.5316.5516.62T:keccakc1024
16.7316.7616.79sha3512
18.8918.9018.94T:bblake256
20.7220.7720.82T:groestl256
27.6427.6727.70T:jh384
27.6627.6727.69T:jh256
27.6827.7027.72T:jh224
27.6827.7327.75T:jh512
32.3932.4132.43T:round3jh256
32.3932.4232.44T:round3jh512
32.7732.8132.87T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
4.254.364.38sha256
6.536.566.59T:blake2s
7.897.958.02T:blake2b
9.429.479.53T:skein512256
9.459.509.56T:skein512512
10.3010.3610.45T:skein256256
11.5811.6411.69T:k12
14.3814.4414.52sha512
14.4114.4814.62T:blake64
15.0515.1415.25blake512
16.9216.9817.05sha3256
16.9517.0017.09sha3224
16.9817.0517.17sha3384
17.0017.0917.17sha3512
17.0817.1217.16shake256
17.1617.1917.23shake128
18.3018.3618.45T:keccakc1024
18.3318.3818.44T:keccak
18.3418.3918.47T:keccakc448
18.3018.4418.50T:keccakc512
18.4218.5018.64T:keccakc768
19.1219.1719.25T:blake32
22.5522.5822.62T:skein10241024
23.2023.2323.30blake256
31.2031.7231.88sha224
37.7539.8441.34sha384
45.7045.9746.25T:groestl256
50.0950.2250.38T:jh224
50.1950.3650.50T:jh384
50.2750.3650.52T:jh256
50.2550.4150.45T:jh512
58.8158.9459.03T:round3jh512
58.9159.0059.08T:round3jh256
81.5881.7381.80T:bblake256
81.6681.9182.12T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
22.7523.0025.25sha256
52.0052.1253.12T:blake2s
57.2558.2559.50T:skein256256
63.0063.3863.50T:blake2b
75.1275.5075.88T:skein512256
75.2575.5076.00T:skein512512
82.0082.6284.25T:blake32
91.5091.7593.25T:k12
99.3899.6299.88blake256
116.38116.62117.50sha512
116.38117.00118.00T:blake64
122.25123.12123.75blake512
134.62135.12136.62sha3256
134.75135.50136.50sha3384
135.00135.50136.38sha3224
135.75136.25137.38shake256
135.62136.50138.75sha3512
136.25136.75139.50shake128
146.75147.38147.75T:keccakc448
146.88147.50149.88T:keccak
147.00147.75148.38T:keccakc512
147.25148.00148.50T:keccakc768
147.88148.62150.12T:keccakc1024
180.25180.88181.50T:skein10241024
225.12226.25228.88T:groestl256
238.50243.12244.00sha224
302.88320.88332.25sha384
401.25402.62405.00T:jh384
401.38402.62404.38T:jh224
401.62403.00404.38T:jh512
402.25404.75406.25T:jh256
469.12470.00471.00T:round3jh512
469.50471.38473.88T:round3jh256
565.62567.25569.38T:bblake256
659.38660.88663.00T:groestl512