VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20250415

[Page version: 20250609 20:22:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.734.764.84T:blake2b
5.325.385.44T:k12
5.955.955.97T:skein512512
5.945.965.97T:skein512256
6.216.216.22T:skein256256
7.337.347.37T:blake64
7.507.527.56blake512
8.088.118.12T:blake2s
9.299.319.35sha512
9.279.349.41sha384
9.679.689.72T:skein10241024
10.2510.2510.25shake128
10.8710.8810.88T:blake32
11.5911.6011.61T:keccakc448
11.9311.9311.95sha3224
12.3812.3812.40T:keccakc512
12.7512.7612.76shake256
12.7712.7712.77sha3256
13.2913.3113.32T:keccak
13.4813.5413.56blake256
13.7413.8013.84T:bblake256
14.6314.6614.68sha224
14.6414.6814.70sha256
16.6216.6316.68T:keccakc768
16.9616.9616.97sha3384
23.2523.2623.27T:keccakc1024
23.6423.6423.64sha3512
33.4233.7034.26T:groestl256
36.5436.5536.55T:jh224
36.5336.5536.56T:jh512
36.5436.5536.57T:jh384
36.5436.5536.58T:jh256
42.3942.4042.45T:round3jh512
42.3942.4542.46T:round3jh256
53.6853.7253.85T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
4.784.784.82T:blake2b
5.685.685.71T:k12
6.096.096.10T:skein512512
6.096.106.10T:skein512256
6.316.316.31T:skein256256
7.637.637.64T:blake64
7.847.847.85blake512
8.118.138.13T:blake2s
10.0810.0910.10T:skein10241024
10.2610.2810.30sha384
10.2910.2910.31sha512
10.7010.7010.70shake128
11.1011.1011.10T:blake32
12.1012.1012.11T:keccakc448
12.3812.3812.39sha3224
12.8912.8912.89T:keccakc512
13.2113.2113.21shake256
13.2213.2213.22sha3256
13.7913.8013.80T:keccak
13.7813.8113.81blake256
15.2715.2715.29T:bblake256
15.5615.5715.57sha224
15.5715.5715.58sha256
16.7316.7316.75T:keccakc768
16.9916.9916.99sha3384
23.7623.7623.76T:keccakc1024
24.0824.0824.08sha3512
34.8634.8935.15T:groestl256
37.1337.1437.15T:jh384
37.1337.1437.14T:jh512
37.1337.1437.15T:jh256
37.1437.1437.14T:jh224
43.1043.1043.11T:round3jh512
43.1043.1243.12T:round3jh256
56.3556.3656.39T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
4.814.814.84T:blake2b
6.176.186.26T:k12
6.326.326.33T:skein512512
6.326.326.33T:skein512256
6.466.476.47T:skein256256
8.118.118.11T:blake64
8.158.168.16T:blake2s
8.368.368.38blake512
10.7510.7610.76T:skein10241024
11.4411.4511.45shake128
11.4711.4811.48T:blake32
11.8011.8511.90sha384
11.8911.9311.94sha512
12.3712.3812.38T:keccakc448
12.5512.5512.56sha3224
13.4313.4313.44T:keccakc512
13.6613.6813.68shake256
13.6713.6813.68sha3256
14.2414.2614.26blake256
14.5914.6014.60T:keccak
16.8616.8716.87T:keccakc768
17.0217.0317.03sha3384
17.0517.0717.11sha256
17.0617.0817.10sha224
17.7117.7317.79T:bblake256
24.5824.5924.60T:keccakc1024
24.8224.8224.83sha3512
36.7536.9337.06T:groestl256
38.1138.1138.12T:jh384
38.1138.1238.12T:jh256
38.1138.1238.14T:jh512
38.1338.1338.14T:jh224
44.2244.2444.26T:round3jh512
44.2444.2544.25T:round3jh256
60.6460.6860.70T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
5.425.425.44T:blake2b
6.896.906.90T:skein256256
6.906.906.90T:skein512256
6.916.916.91T:skein512512
6.906.917.14T:k12
8.208.218.21T:blake2s
8.598.598.60T:blake64
8.928.928.95blake512
12.3212.3412.35shake128
12.4912.5012.50T:blake32
13.6713.6813.71T:skein10241024
14.9815.0815.19sha384
15.1515.1815.28sha512
15.2415.2515.25T:keccakc512
15.2515.2615.27sha3224
15.2715.2815.28sha3256
15.2815.2815.31T:keccak
15.2815.2915.29T:keccakc448
15.3015.3115.32shake256
15.4415.4615.47blake256
18.2518.2518.26sha3384
18.3018.3018.32T:keccakc768
21.1021.1221.21sha256
21.0621.1321.21sha224
24.2324.2624.43T:bblake256
27.0727.0927.11T:keccakc1024
27.1527.1527.17sha3512
40.7240.7240.74T:jh256
40.7240.7340.75T:jh512
40.7240.7340.74T:jh384
40.7740.7840.79T:jh224
41.7441.8842.49T:groestl256
47.2447.2647.37T:round3jh256
47.2747.2847.29T:round3jh512
66.2666.3066.31T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
8.918.918.91T:blake2s
10.7010.7010.70T:blake2b
12.0912.1212.27T:skein256256
14.1214.1214.12T:skein512256
14.1914.1914.20T:skein512512
17.7017.7217.81T:blake64
18.69?18.72?21.42?T:k12
20.0620.0620.06blake512
25.2025.2325.36T:blake32
28.1428.2028.27sha3224
28.2028.2728.55sha3384
28.2728.2728.80sha3256
28.2528.3128.62sha3512
28.6428.6629.12shake256
28.7328.7529.09shake128
30.4130.4230.45T:keccak
30.4230.4430.45T:keccakc1024
30.6230.6430.66blake256
30.8330.8431.16T:keccakc768
31.1431.2031.45T:keccakc448
31.0231.2831.34T:keccakc512
44.3144.4444.44T:skein10241024
59.3160.5660.72sha384
60.3361.2761.70sha512
71.5571.8472.38sha256
71.1171.8872.00sha224
73.9473.9774.16T:jh256
73.9773.9874.17T:jh384
73.9574.0074.19T:jh512
74.4274.4574.59T:jh224
85.6485.6985.81T:round3jh256
85.7385.7885.91T:round3jh512
105.84106.56108.67T:groestl256
107.33107.66109.36T:bblake256
164.52164.55164.86T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
69.6269.6270.00T:skein256256
69.8869.8869.88T:blake2s
83.8883.8884.12T:blake2b
110.75111.00112.25T:blake32
111.62111.62113.62T:skein512256
112.00112.38114.00T:skein512512
139.12139.12139.12blake256
143.12143.12144.00T:blake64
148.75?153.12?170.62?T:k12
160.38160.38160.38blake512
225.12225.12227.12sha3256
225.12225.12227.25sha3384
225.12225.25229.00sha3224
225.50225.50227.88sha3512
228.75229.00230.38shake256
228.88229.00230.88shake128
244.00244.12245.62T:keccak
245.75246.50247.88T:keccakc1024
249.62249.62249.75T:keccakc448
248.12249.75249.75T:keccakc512
249.50252.00252.25T:keccakc768
353.12355.00355.75T:skein10241024
450.38451.25456.12sha256
453.62455.25460.00sha224
475.50483.12488.25sha384
481.75489.12495.00sha512
594.12594.25596.12T:jh256
594.50594.75596.38T:jh512
594.75594.88596.25T:jh384
575.50597.50604.88T:groestl256
596.62597.50599.12T:jh224
687.38687.62689.12T:round3jh256
688.38688.50689.00T:round3jh512
751.25755.75763.50T:bblake256
1319.001320.001320.12T:groestl512