VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Goldmont Plus (706a8); 2019 Intel Celeron N4020; 2 x 1100MHz; gemini, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.014.064.13sha224
4.064.074.07sha256
5.725.735.75T:blake2s
5.805.825.86T:k12
6.236.286.29T:blake2b
6.396.516.77T:blake32
6.907.007.19T:bblake256
7.917.928.02T:skein512256
7.30?7.93?8.99?T:skein512512
8.278.308.38blake256
8.318.338.34T:keccakc256treed2
7.69?8.54?10.04?T:blake64
9.219.249.26blake512
9.819.819.82T:skein256256
10.6310.7110.78sha384
10.6210.8311.00sha512
10.9711.0111.04shake128
11.0111.0211.02T:skein10241024
11.0411.1211.15T:keccakc512treed2
12.3212.3312.33T:keccakc448
12.7712.8012.82sha3224
13.2513.2613.26T:keccakc512
13.6713.6813.70sha3256
13.6913.7313.74shake256
14.0414.0714.16T:keccak
14.1414.1414.16T:groestl256
18.0818.0818.09T:keccakc768
18.1318.1418.15sha3384
18.21?19.84?22.80?T:groestl512
21.4821.4921.53T:jh256
21.5221.5321.65T:jh384
21.6421.6521.65T:jh512
21.5221.6921.69T:jh224
23.3723.3723.40T:round3jh256
23.3923.3923.39T:round3jh512
25.0525.0625.08T:keccakc1024
25.3225.3425.35sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
4.154.154.15sha256
4.734.754.77sha224
5.735.735.74T:blake2s
6.106.116.13T:k12
6.256.276.27T:blake2b
6.676.676.80T:blake32
7.687.697.78T:bblake256
8.088.088.13T:skein512256
8.138.138.66T:skein512512
8.478.478.51blake256
8.858.869.61T:blake64
9.559.559.55blake512
9.819.829.82T:keccakc256treed2
9.939.939.93T:skein256256
11.4411.4411.45T:skein10241024
11.4811.4811.49shake128
11.7311.7411.76sha384
11.8511.8811.95sha512
11.8911.9111.92T:keccakc512treed2
12.8712.8712.87T:keccakc448
13.2613.2613.28sha3224
13.8113.8113.81T:keccakc512
14.1414.1414.15sha3256
14.1714.1714.17shake256
14.6114.6114.65T:keccak
14.8514.8514.86T:groestl256
18.0218.0218.02T:keccakc768
18.1518.1618.16sha3384
21.1821.1922.66T:groestl512
21.3621.3721.38T:jh256
21.4121.4121.41T:jh224
21.4121.4121.41T:jh384
21.4121.4121.41T:jh512
23.7623.7623.76T:round3jh256
23.7623.7623.76T:round3jh512
25.4225.4225.43T:keccakc1024
25.8225.8225.82sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
4.274.284.28sha256
5.725.735.74T:blake2s
5.855.885.93sha224
6.266.276.28T:blake2b
6.606.606.61T:k12
6.936.937.06T:blake32
8.348.358.35T:skein512256
8.458.469.02T:skein512512
8.758.768.78blake256
8.838.858.90T:bblake256
9.389.4010.04T:blake64
10.0710.0910.11blake512
10.0010.1010.11T:skein256256
11.4111.4111.41T:keccakc256treed2
12.1512.1512.16T:skein10241024
12.2612.2612.30shake128
13.1813.1813.18T:keccakc448
13.2313.2513.26T:keccakc512treed2
13.4413.4413.46sha3224
13.4413.4913.53sha384
13.6213.6913.76sha512
14.4314.4314.43T:keccakc512
14.6214.6214.65shake256
14.6214.6214.64sha3256
15.4915.5115.53T:keccak
16.0416.0416.04T:groestl256
18.0218.0218.02T:keccakc768
18.1918.2018.20sha3384
21.3521.3521.35T:jh224
21.4121.4121.41T:jh512
21.4621.4621.47T:jh256
21.5321.5321.53T:jh384
23.4323.4425.30T:groestl512
24.3824.3824.38T:round3jh512
24.3724.4024.41T:round3jh256
26.2626.2726.28T:keccakc1024
26.6226.6326.63sha3512
Cycles/byte for 576 bytes
25%50%75%hash
4.624.634.64sha256
5.715.725.74T:blake2s
6.997.017.02T:blake2b
7.277.297.31T:k12
7.627.657.74T:blake32
8.878.969.05sha224
9.059.059.06T:skein512256
9.399.4010.13T:skein512512
9.459.479.52blake256
9.889.9310.58T:blake64
10.4910.4910.58T:skein256256
10.4910.5010.51blake512
12.0012.0212.07T:bblake256
13.1513.1913.21shake128
15.3015.3115.31T:skein10241024
15.6515.6715.68T:keccakc256treed2
16.2716.2916.32sha3224
16.2616.2916.31T:keccakc448
16.2816.2916.30sha3256
16.3016.3216.35shake256
16.3916.4116.44T:keccak
16.4716.4716.47T:keccakc512
16.9217.0417.18sha384
17.4017.5017.56sha512
19.1419.1519.17T:groestl256
19.4419.4419.47sha3384
19.6919.6919.71T:keccakc768
20.5220.5520.57T:keccakc512treed2
22.9422.9422.95T:jh512
22.9422.9723.03T:jh256
22.9323.0223.07T:jh384
22.9123.0323.03T:jh224
26.0426.0626.06T:round3jh512
26.0426.0626.09T:round3jh256
27.2727.3129.44T:groestl512
28.7928.8128.97T:keccakc1024
29.1029.1129.12sha3512
Cycles/byte for 64 bytes
25%50%75%hash
5.835.866.08T:blake2s
9.129.149.22sha256
12.9112.9412.97T:blake2b
16.6916.7716.98T:blake32
16.8316.8417.11T:skein256256
17.4217.4417.47T:skein512256
18.7318.7818.88blake256
19.3619.3819.52T:k12
19.6719.7220.27T:blake64
20.5320.5920.67T:skein512512
20.8020.8320.86blake512
29.8929.9730.06sha3384
29.8929.9830.08sha3512
29.9430.0230.05sha3256
30.0530.0530.05sha3224
30.0030.0930.27shake256
30.0630.1930.31shake128
31.6231.8332.23T:keccakc1024
34.4834.4834.48T:keccak
34.5334.5534.61T:keccakc448
34.8134.8134.81T:keccakc512
34.8434.9435.08T:keccakc768
41.9141.9142.33T:jh384
41.8941.9442.19T:jh512
41.9441.9842.22T:jh224
42.0242.1242.69T:jh256
47.0847.0947.16T:round3jh512
47.0547.1147.17T:round3jh256
48.3048.7249.64sha224
49.0849.0949.09T:skein10241024
51.7351.9252.23T:bblake256
59.2359.2359.28T:groestl256
66.8367.3168.12sha384
70.1270.4771.69sha512
87.1487.3093.72T:groestl512
96.1996.1996.19T:keccakc512treed2
96.2596.2596.25T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
42.7542.7543.38sha256
50.6250.6250.62T:blake2s
81.0081.0086.38T:blake32
86.0086.0086.75blake256
96.2596.2596.25T:skein256256
103.62104.00104.12T:blake2b
139.00139.25139.38T:skein512256
154.12154.50154.50T:k12
158.75159.50161.12T:blake64
164.38165.00166.12T:skein512512
166.25167.25167.62blake512
238.12238.25238.62sha3384
238.38238.50238.75sha3224
238.38238.62239.25sha3256
237.75239.00239.00sha3512
239.62239.62239.62shake256
240.25241.12241.25shake128
252.62253.00257.75T:keccakc1024
276.38276.88279.00T:keccak
278.00278.00278.00T:keccakc512
277.62279.12279.12T:keccakc768
279.12280.00280.00T:keccakc448
337.12339.88341.75T:jh224
340.25340.75345.00T:jh512
340.88341.25341.75T:jh256
339.62343.25343.25T:jh384
348.25349.12349.62T:bblake256
352.88356.38362.75sha224
356.75357.12357.12T:groestl256
375.88376.12377.88T:round3jh512
375.62377.25377.50T:round3jh256
393.62393.62393.62T:skein10241024
539.50545.25553.12sha384
552.12559.12565.62sha512
690.62691.88745.50T:groestl512
769.88769.88771.00T:keccakc256treed2
768.38770.00771.25T:keccakc512treed2