VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Bonnell (106ca); 2010 Intel Atom N455; 1 x 1000MHz; h2atom, supercop-20240107

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: old (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 7.20 7.21 7.22 T:blake2b 9.64 9.64 9.65 T:skein512256 9.65 9.65 9.65 T:skein512512 9.73 9.73 9.74 T:k12 10.59 10.60 10.60 T:skein256256 11.62 11.62 11.62 T:blake64 11.71 11.73 11.74 T:blake2s 11.94 11.94 11.95 T:blake32 12.72 12.72 12.72 blake512 14.08 14.09 14.11 blake256 14.42 14.42 14.43 T:keccakc256treed2 15.84 15.87 15.89 T:bblake256 17.35 17.36 17.38 T:skein10241024 18.00 18.01 18.02 shake128 19.01 19.02 19.04 T:keccakc512treed2 20.50 20.50 20.51 T:keccakc448 20.52 20.52 20.52 sha512 20.96 20.97 20.98 sha3224 22.03 22.03 22.04 T:keccakc512 22.41 22.43 22.44 shake256 22.44 22.45 22.46 sha3256 23.63 23.63 23.64 T:keccak 27.37 27.38 27.38 T:jh256 27.38 27.38 27.38 T:jh512 27.38 27.38 27.38 T:jh224 27.38 27.38 27.38 T:jh384 29.25 29.25 29.25 T:keccakc768 29.81 29.82 29.84 sha3384 30.24 30.28 30.28 sha256 31.02 31.03 31.04 T:round3jh256 31.03 31.03 31.04 T:round3jh512 41.24 41.25 41.26 T:keccakc1024 41.56 41.58 41.59 sha3512 86.15 86.27 87.77 T:groestl256 131.71 131.91 132.60 T:groestl512

Cycles/byte for 4096 bytes 25% 50% 75% hash 7.26 7.26 7.26 T:blake2b 9.87 9.87 9.87 T:skein512256 10.03 10.03 10.03 T:skein512512 10.37 10.37 10.37 T:k12 10.86 10.86 10.86 T:skein256256 11.77 11.77 11.78 T:blake2s 12.10 12.10 12.10 T:blake64 12.25 12.25 12.26 T:blake32 13.24 13.24 13.24 blake512 14.43 14.43 14.43 blake256 17.06 17.06 17.06 T:keccakc256treed2 17.18 17.19 17.20 T:bblake256 18.10 18.10 18.11 T:skein10241024 18.82 18.82 18.82 shake128 20.46 20.46 20.48 T:keccakc512treed2 21.25 21.25 21.25 sha512 21.57 21.58 21.58 T:keccakc448 21.75 21.75 21.76 sha3224 23.09 23.09 23.10 T:keccakc512 23.22 23.22 23.22 sha3256 23.23 23.23 23.23 shake256 24.69 24.69 24.69 T:keccak 27.86 27.86 27.87 T:jh224 27.86 27.86 27.87 T:jh256 27.86 27.86 27.87 T:jh384 27.87 27.87 27.87 T:jh512 29.58 29.58 29.58 T:keccakc768 29.87 29.87 29.88 sha3384 30.78 30.80 30.80 sha256 31.59 31.59 31.59 T:round3jh256 31.59 31.59 31.60 T:round3jh512 42.27 42.27 42.28 T:keccakc1024 42.38 42.39 42.39 sha3512 88.33 88.35 89.07 T:groestl256 138.15 138.24 138.55 T:groestl512

Cycles/byte for 1536 bytes 25% 50% 75% hash 7.34 7.34 7.35 T:blake2b 10.24 10.24 10.25 T:skein512256 10.66 10.66 10.67 T:skein512512 11.29 11.29 11.31 T:skein256256 11.41 11.42 11.42 T:k12 11.84 11.84 11.84 T:blake2s 12.77 12.77 12.77 T:blake32 12.91 12.91 12.91 T:blake64 14.10 14.10 14.10 blake512 14.98 14.98 14.99 blake256 19.35 19.35 19.36 T:skein10241024 19.38 19.39 19.41 T:bblake256 19.89 19.90 19.90 T:keccakc256treed2 20.16 20.16 20.17 shake128 22.06 22.06 22.11 sha3224 22.41 22.41 22.52 T:keccakc448 22.46 22.46 22.46 sha512 22.87 22.88 22.88 T:keccakc512treed2 24.02 24.02 24.03 sha3256 24.07 24.09 24.09 shake256 24.38 24.38 24.38 T:keccakc512 26.44 26.44 26.44 T:keccak 28.68 28.68 28.68 T:jh224 28.68 28.68 28.69 T:jh256 28.68 28.68 28.68 T:jh384 28.69 28.69 28.69 T:jh512 29.96 29.97 29.98 sha3384 30.12? 30.13? 48.91? T:keccakc768 31.68 31.68 31.72 sha256 32.52 32.52 32.53 T:round3jh256 32.53 32.53 32.54 T:round3jh512 43.71 43.71 43.72 sha3512 43.98 43.99 43.99 T:keccakc1024 91.76 91.81 91.86 T:groestl256 148.70 148.81 148.92 T:groestl512

Cycles/byte for 576 bytes 25% 50% 75% hash 8.32 8.32 8.32 T:blake2b 11.22 11.22 11.24 T:skein512256 11.99 11.99 11.99 T:blake2s 12.34 12.34 12.36 T:skein512512 12.46 12.46 12.46 T:skein256256 13.08 13.10 13.10 T:k12 13.90 13.91 13.93 T:blake64 14.17 14.17 14.17 T:blake32 15.00 15.00 15.00 blake512 16.45 16.48 16.55 blake256 21.75 21.75 21.75 shake128 23.43 23.43 23.43 sha512 24.68 24.70 24.73 T:skein10241024 25.29 25.31 25.38 T:bblake256 26.77 26.77 26.79 sha3224 26.82 26.82 26.82 sha3256 27.01 27.01 27.01 shake256 27.42 27.42 27.43 T:keccakc256treed2 28.32 28.32 28.32 T:keccakc448 28.47 28.47 28.47 T:keccakc512 28.65 28.65 28.65 T:keccak 30.85 30.85 30.85 T:jh224 30.85 30.85 30.85 T:jh256 30.86 30.86 30.86 T:jh384 30.88 30.88 30.88 T:jh512 32.15 32.15 32.19 sha3384 33.49 33.49 33.50 T:keccakc768 34.02 34.02 34.02 sha256 35.01 35.01 35.01 T:round3jh256 35.03 35.03 35.03 T:round3jh512 35.51 35.51 35.51 T:keccakc512treed2 47.81 47.82 47.84 sha3512 49.09 49.09 49.12 T:keccakc1024 101.18 101.44 101.63 T:groestl256 162.56 162.72 163.02 T:groestl512

Cycles/byte for 64 bytes 25% 50% 75% hash 13.91 13.91 14.14 T:blake2s 17.03 17.03 17.03 T:blake2b 23.19 23.19 23.19 T:skein512256 27.03 27.03 27.03 T:skein256256 30.41 30.41 30.50 T:blake64 31.78 31.78 31.78 T:blake32 33.22 33.22 33.22 blake512 33.34 33.34 33.45 T:skein512512 35.23 35.28 35.52 blake256 38.94 38.94 39.02 T:k12 46.50 46.50 46.50 sha512 49.33 49.33 49.44 sha3224 49.38 49.38 49.38 sha3256 50.36 50.36 50.36 sha3384 50.42 50.42 50.53 sha3512 51.30 51.30 51.30 shake256 51.42 51.42 51.42 shake128 58.38 58.38 58.38 T:jh256 58.39 58.39 58.39 T:jh224 58.41 58.41 58.41 T:jh384 58.66 58.66 58.66 T:jh512 63.56 63.56 63.56 T:keccakc1024 64.72 64.72 64.72 T:keccakc768 65.17 65.17 65.17 sha256 65.88 65.88 65.88 T:keccakc512 66.12 66.12 66.12 T:keccak 66.42 66.42 66.42 T:keccakc448 66.75 66.75 67.03 T:round3jh256 67.00 67.00 67.00 T:round3jh512 81.09 81.09 81.09 T:skein10241024 100.53 100.64 101.31 T:bblake256 167.38 167.38 167.38 T:keccakc512treed2 169.11 169.11 169.39 T:keccakc256treed2 222.34 222.77 223.14 T:groestl256 404.39 405.58 406.78 T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 113.12 113.12 115.88 T:blake2s 134.12 134.12 134.12 T:blake2b 163.00 163.00 165.25 T:blake32 168.88 169.38 171.25 blake256 169.38 169.38 171.12 T:skein256256 183.25 183.38 185.25 T:skein512256 247.50 247.50 247.50 T:blake64 264.50 265.38 267.00 T:skein512512 265.75 265.75 267.75 blake512 277.62 277.62 279.62 sha256 310.75 310.75 311.38 T:k12 373.12 373.12 373.12 sha512 392.75 392.75 395.12 sha3256 392.38? 396.62? 751.25? sha3224 401.00 401.00 403.25 sha3384 403.00 403.88 405.25 sha3512 408.88 408.88 411.12 shake256 409.88 409.88 412.12 shake128 469.62 469.62 471.88 T:jh224 470.00? 470.00? 861.38? T:jh256 470.25 470.25 472.50 T:jh384 472.00 472.00 472.00 T:jh512 505.00 505.00 507.00 T:keccakc1024 514.25 514.25 516.25 T:keccakc768 523.50 523.50 523.50 T:keccakc512 525.50 525.50 527.50 T:keccak 527.88 527.88 527.88 T:keccakc448 544.50 544.50 544.50 T:round3jh256 546.50 546.50 546.50 T:round3jh512 647.62 647.75 649.50 T:skein10241024 680.75 683.25 687.62 T:bblake256 1109.50 1109.75 1111.88 T:groestl256 1336.88 1336.88 1339.12 T:keccakc512treed2 1350.62 1350.62 1352.88 T:keccakc256treed2 3246.88 3252.12 3260.75 T:groestl512