VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A76 (414fd0b1); 2023 Broadcom BCM2712; 4 x 1500MHz; pi5, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.581.591.63sha224
2.032.032.04sha256
3.293.323.34T:k12
3.713.723.74T:blake2b
4.364.394.42T:skein512256
4.364.404.43T:skein512512
5.285.315.35T:skein10241024
5.475.505.52T:blake64
6.016.046.06T:skein256256
6.006.056.10sha384
6.096.106.12shake128
6.216.226.23T:blake2s
6.216.246.30sha512
6.186.256.36blake512
6.946.966.97T:keccakc448
7.077.087.11sha3224
7.437.507.54T:keccakc512
7.567.587.60shake256
7.567.597.61sha3256
7.927.978.00T:keccak
7.927.988.13T:blake32
9.919.949.96T:keccakc768
10.1610.1710.19sha3384
10.7410.7410.77blake256
10.8810.9110.93T:bblake256
13.8413.8713.90T:keccakc1024
14.1214.1414.17sha3512
17.1217.1517.18T:groestl256
23.4623.4723.48T:jh256
23.4723.4823.49T:jh384
23.4723.4823.48T:jh512
23.4723.4823.49T:jh224
26.6927.3027.90T:groestl512
27.4827.5027.52T:round3jh512
27.4927.5127.52T:round3jh256
Cycles/byte for 4096 bytes
25%50%75%hash
1.951.951.97sha224
2.072.072.07sha256
3.503.503.51T:k12
3.743.743.74T:blake2b
4.474.484.49T:skein512256
4.474.494.50T:skein512512
5.505.515.52T:skein10241024
5.705.715.71T:blake64
6.106.106.11T:skein256256
6.226.236.23T:blake2s
6.376.376.38shake128
6.466.476.50sha512
6.476.496.53blake512
6.596.616.62sha384
7.257.257.25T:keccakc448
7.357.357.36sha3224
7.767.777.79T:keccakc512
7.847.857.86sha3256
7.857.857.86shake256
8.148.168.22T:blake32
8.258.268.27T:keccak
9.979.979.98T:keccakc768
10.1810.1810.19sha3384
10.9610.9610.97blake256
11.9912.0012.01T:bblake256
14.1614.1714.17T:keccakc1024
14.4114.4214.43sha3512
17.5917.6017.60T:groestl256
23.8523.8623.86T:jh512
23.8523.8623.86T:jh256
23.8523.8623.86T:jh384
23.8623.8623.86T:jh224
27.9327.9427.95T:round3jh512
27.9427.9527.95T:round3jh256
28.4828.6428.88T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
2.562.572.62sha224
3.753.753.75T:blake2b
3.793.803.81T:k12
4.624.634.64T:skein512256
4.634.644.65T:skein512512
5.845.855.87T:skein10241024
6.046.056.06T:blake64
6.206.216.23T:skein256256
6.236.246.24T:blake2s
6.816.816.81shake128
6.846.856.86sha512
6.866.876.91blake512
7.387.387.40T:keccakc448
7.467.477.48sha3224
7.537.557.58sha384
8.078.088.12T:keccakc512
8.118.128.14sha3256
8.128.138.15shake256
8.418.458.47T:blake32
8.728.748.77T:keccak
10.0410.0510.05T:keccakc768
10.2010.2110.22sha3384
11.2911.3011.30blake256
13.8213.8213.84T:bblake256
14.6514.6614.68T:keccakc1024
14.8614.8714.88sha3512
18.3118.3318.34T:groestl256
24.4824.4924.49T:jh512
24.4924.4924.50T:jh256
24.4924.4924.50T:jh224
24.4924.5024.50T:jh384
28.6728.6828.70T:round3jh512
28.6828.6828.69T:round3jh256
30.7830.9431.16T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
2.282.292.30sha256
4.134.154.23sha224
4.194.204.21T:blake2b
4.204.214.25T:k12
5.015.025.05T:skein512512
5.005.035.05T:skein512256
6.256.266.26T:blake2s
6.336.356.38T:blake64
6.486.506.53T:skein256256
7.187.217.24blake512
7.287.297.32shake128
7.337.347.37T:skein10241024
7.347.367.38sha512
9.029.039.07sha3256
9.019.039.07sha3224
9.039.059.09shake256
9.069.089.10T:keccakc448
9.099.119.13T:keccak
9.099.129.16T:keccakc512
9.119.149.17T:blake32
9.199.259.40sha384
10.8210.8310.85T:keccakc768
10.8810.9010.93sha3384
12.1212.1312.17blake256
16.0616.0716.11T:keccakc1024
16.2316.2616.29sha3512
18.6718.6818.70T:bblake256
20.2120.2420.29T:groestl256
26.1426.1526.19T:jh384
26.1526.1726.19T:jh512
26.1626.1826.21T:jh224
26.1726.1826.20T:jh256
30.6030.6230.65T:round3jh512
30.6030.6230.67T:round3jh256
33.5433.6933.94T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
4.164.254.37sha256
6.536.566.59T:blake2s
7.817.867.91T:blake2b
9.579.639.71T:skein512512
9.579.649.75T:skein512256
10.2610.3510.46T:skein256256
11.2111.2911.72T:k12
12.7212.8412.98T:blake64
14.2714.3514.57blake512
15.8215.9115.97sha512
16.4916.5516.90sha3256
16.5316.5916.82sha3224
16.5716.6216.88sha3512
16.6116.6717.00sha3384
16.6816.7217.05shake256
16.7416.8017.07shake128
17.6517.7418.13T:blake32
17.7817.8417.92T:keccakc1024
17.9718.0318.10T:keccakc768
18.0118.1018.20T:keccak
18.0318.1118.16T:keccakc448
18.0418.1418.20T:keccakc512
23.0123.0523.41blake256
23.2123.3123.38T:skein10241024
25.3426.3226.78sha224
34.8535.7737.01sha384
44.2544.5644.86T:groestl256
47.5047.5447.74T:jh512
47.5047.5547.80T:jh224
47.5147.5747.84T:jh256
47.5047.5747.87T:jh384
55.4555.5255.85T:round3jh256
55.4755.5455.69T:round3jh512
80.2580.2880.49T:bblake256
83.8484.2384.75T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
20.8821.4321.58sha256
51.7652.5053.42T:blake2s
57.6158.2559.21T:skein256256
62.4562.7263.45T:blake2b
76.1476.8778.60T:blake32
76.5177.2078.18T:skein512512
76.8577.2778.10T:skein512256
88.2889.3495.74T:k12
98.9599.20100.12blake256
102.64103.35104.47T:blake64
110.63111.51113.41sha512
115.03115.76116.59blake512
131.67132.54135.05sha3256
132.35132.74135.10sha3224
132.50133.06135.97sha3384
132.46133.18134.86sha3512
132.84133.49135.62shake256
133.53134.41136.95shake128
143.91144.59146.22T:keccakc1024
144.12144.72146.75T:keccakc512
144.30144.73146.98T:keccakc768
144.29144.85146.61T:keccakc448
144.14144.87145.69T:keccak
185.36186.38188.61T:skein10241024
196.18205.90209.71sha224
217.78219.44220.87T:groestl256
286.88288.49296.63sha384
381.75382.35384.49T:jh256
382.13382.85384.42T:jh512
382.40383.19385.59T:jh224
382.21383.26385.99T:jh384
444.88445.66447.43T:round3jh256
445.06445.86447.65T:round3jh512
557.11557.82561.19T:bblake256
675.08678.48687.40T:groestl512