VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; K10 45nm (100f63); 2010 AMD Athlon II Neo K125; 1 x 1700MHz; h3neo, supercop-20251114

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
5.015.025.03T:blake2b
5.305.315.31T:k12
5.955.955.97T:skein512512
5.945.965.97T:skein512256
6.216.216.22T:skein256256
7.337.347.37T:blake64
7.507.527.56blake512
8.238.248.24T:blake2s
9.339.359.46sha384
9.359.399.45sha512
9.679.689.72T:skein10241024
10.2510.2510.25shake128
10.8710.8810.88T:blake32
11.5911.6011.61T:keccakc448
11.9311.9311.95sha3224
12.3812.3812.40T:keccakc512
12.7512.7612.76shake256
12.7712.7712.77sha3256
13.2913.3113.32T:keccak
13.4813.5413.56blake256
13.7413.8013.84T:bblake256
14.6014.6514.71sha224
14.6014.6614.71sha256
16.6216.6316.68T:keccakc768
16.9616.9616.97sha3384
23.2523.2623.27T:keccakc1024
23.6423.6423.64sha3512
33.4233.7034.26T:groestl256
36.5436.5536.55T:jh224
36.5336.5536.56T:jh512
36.5436.5536.57T:jh384
36.5436.5536.58T:jh256
42.3942.4042.45T:round3jh512
42.3942.4542.46T:round3jh256
53.6853.7253.85T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
5.045.055.05T:blake2b
5.605.605.60T:k12
6.096.096.10T:skein512512
6.096.106.10T:skein512256
6.316.316.31T:skein256256
7.637.637.64T:blake64
7.847.847.85blake512
8.278.278.27T:blake2s
10.0810.0910.10T:skein10241024
10.2810.2810.32sha384
10.3010.3110.34sha512
10.7010.7010.70shake128
11.1011.1011.10T:blake32
12.1012.1012.11T:keccakc448
12.3812.3812.39sha3224
12.8912.8912.89T:keccakc512
13.2113.2113.21shake256
13.2213.2213.22sha3256
13.7913.8013.80T:keccak
13.7813.8113.81blake256
15.2715.2715.29T:bblake256
15.5015.5015.52sha224
15.5015.5115.53sha256
16.7316.7316.75T:keccakc768
16.9916.9916.99sha3384
23.7623.7623.76T:keccakc1024
24.0824.0824.08sha3512
34.8634.8935.15T:groestl256
37.1337.1437.15T:jh384
37.1337.1437.14T:jh512
37.1337.1437.15T:jh256
37.1437.1437.14T:jh224
43.1043.1043.11T:round3jh512
43.1043.1243.12T:round3jh256
56.3556.3656.39T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
5.095.095.09T:blake2b
6.086.096.11T:k12
6.326.326.33T:skein512512
6.326.326.33T:skein512256
6.466.476.47T:skein256256
8.118.118.11T:blake64
8.318.318.31T:blake2s
8.368.368.38blake512
10.7510.7610.76T:skein10241024
11.4411.4511.45shake128
11.4711.4811.48T:blake32
11.8311.8411.85sha384
11.8811.8811.89sha512
12.3712.3812.38T:keccakc448
12.5512.5512.56sha3224
13.4313.4313.44T:keccakc512
13.6613.6813.68shake256
13.6713.6813.68sha3256
14.2414.2614.26blake256
14.5914.6014.60T:keccak
16.8616.8716.87T:keccakc768
16.9116.9116.91sha256
16.9016.9416.95sha224
17.0217.0317.03sha3384
17.7117.7317.79T:bblake256
24.5824.5924.60T:keccakc1024
24.8224.8224.83sha3512
36.7536.9337.06T:groestl256
38.1138.1138.12T:jh384
38.1138.1238.12T:jh256
38.1138.1238.14T:jh512
38.1338.1338.14T:jh224
44.2244.2444.26T:round3jh512
44.2444.2544.25T:round3jh256
60.6460.6860.70T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
5.705.705.70T:blake2b
6.836.856.94T:k12
6.896.906.90T:skein256256
6.906.906.90T:skein512256
6.916.916.91T:skein512512
8.428.428.42T:blake2s
8.598.598.60T:blake64
8.928.928.95blake512
12.3212.3412.35shake128
12.4912.5012.50T:blake32
13.6713.6813.71T:skein10241024
14.9515.0015.08sha384
15.1915.2115.22sha512
15.2415.2515.25T:keccakc512
15.2515.2615.27sha3224
15.2715.2815.28sha3256
15.2815.2815.31T:keccak
15.2815.2915.29T:keccakc448
15.3015.3115.32shake256
15.4415.4615.47blake256
18.2518.2518.26sha3384
18.3018.3018.32T:keccakc768
20.5820.6220.65sha224
20.6220.6820.72sha256
24.2324.2624.43T:bblake256
27.0727.0927.11T:keccakc1024
27.1527.1527.17sha3512
40.7240.7240.74T:jh256
40.7240.7340.75T:jh512
40.7240.7340.74T:jh384
40.7740.7840.79T:jh224
41.7441.8842.49T:groestl256
47.2447.2647.37T:round3jh256
47.2747.2847.29T:round3jh512
66.2666.3066.31T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
9.949.949.94T:blake2s
10.9710.9710.98T:blake2b
12.0912.1212.27T:skein256256
14.1214.1214.12T:skein512256
14.1914.1914.20T:skein512512
17.7017.7217.81T:blake64
18.6118.6219.09T:k12
20.0620.0620.06blake512
25.2025.2325.36T:blake32
28.1428.2028.27sha3224
28.2028.2728.55sha3384
28.2728.2728.80sha3256
28.2528.3128.62sha3512
28.6428.6629.12shake256
28.7328.7529.09shake128
30.4130.4230.45T:keccak
30.4230.4430.45T:keccakc1024
30.6230.6430.66blake256
30.8330.8431.16T:keccakc768
31.1431.2031.45T:keccakc448
31.0231.2831.34T:keccakc512
44.3144.4444.44T:skein10241024
58.8359.3659.72sha384
60.7261.2061.30sha512
67.8467.9468.16sha224
68.3368.9169.17sha256
73.9473.9774.16T:jh256
73.9773.9874.17T:jh384
73.9574.0074.19T:jh512
74.4274.4574.59T:jh224
85.6485.6985.81T:round3jh256
85.7385.7885.91T:round3jh512
105.84106.56108.67T:groestl256
107.33107.66109.36T:bblake256
164.52164.55164.86T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
69.6269.6270.00T:skein256256
73.0073.0073.00T:blake2s
86.8887.0088.50T:blake2b
110.75111.00112.25T:blake32
111.62111.62113.62T:skein512256
112.00112.38114.00T:skein512512
139.12139.12139.12blake256
143.12143.12144.00T:blake64
148.00148.00148.62T:k12
160.38160.38160.38blake512
225.12225.12227.12sha3256
225.12225.12227.25sha3384
225.12225.25229.00sha3224
225.50225.50227.88sha3512
228.75229.00230.38shake256
228.88229.00230.88shake128
244.00244.12245.62T:keccak
245.75246.50247.88T:keccakc1024
249.62249.62249.75T:keccakc448
248.12249.75249.75T:keccakc512
249.50252.00252.25T:keccakc768
353.12355.00355.75T:skein10241024
422.62423.75424.38sha224
423.50423.75424.25sha256
471.25475.00482.88sha384
486.50488.25490.12sha512
594.12594.25596.12T:jh256
594.50594.75596.38T:jh512
594.75594.88596.25T:jh384
575.50597.50604.88T:groestl256
596.62597.50599.12T:jh224
687.38687.62689.12T:round3jh256
688.38688.50689.00T:round3jh512
751.25755.75763.50T:bblake256
1319.001320.001320.12T:groestl512