VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Bobcat (500f20); 2011 AMD E-450; 2 x 1650MHz; h4e450, supercop-20251114

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
6.086.136.13T:blake2b
7.968.008.02T:k12
9.009.009.01T:skein256256
9.039.039.03T:skein512256
9.039.039.03T:skein512512
8.33?9.67?12.19?T:blake64
10.2010.2010.20T:blake2s
10.4510.5110.56blake512
14.0514.3615.07T:blake32
15.0015.0715.25T:skein10241024
15.1815.2015.25shake128
16.8916.9016.92sha512
16.9817.0917.20T:keccakc448
17.6717.6817.71sha3224
18.1118.3318.61T:keccakc512
18.3118.4518.53blake256
18.9118.9318.95sha3256
18.9018.9318.96shake256
18.9218.9518.97T:bblake256
19.2419.4819.78T:keccak
20.8820.9621.08T:keccakc256treed2
24.3024.4124.48T:keccakc768
24.6424.6624.67sha256
25.1525.1725.18sha3384
27.8227.8427.87T:keccakc512treed2
34.0334.1334.16T:keccakc1024
35.0935.1135.14sha3512
46.5546.9847.06T:groestl256
48.0148.0348.05T:jh256
48.0248.0348.05T:jh512
48.0248.0348.06T:jh224
48.0148.0448.06T:jh384
56.8256.8356.84T:round3jh256
56.8156.8356.84T:round3jh512
66.9867.0567.56T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
6.156.176.17T:blake2b
8.438.448.44T:k12
9.169.169.16T:skein256256
9.269.269.26T:skein512256
9.279.279.27T:skein512512
10.03?10.09?11.31?T:blake64
10.2610.2610.26T:blake2s
10.9610.9811.00blake512
14.7214.7315.08T:blake32
15.7315.7315.81T:skein10241024
15.8815.8915.90shake128
17.5017.5017.50sha512
17.8717.9217.92T:keccakc448
18.3418.3418.36sha3224
18.8218.8318.87blake256
19.1219.1719.25T:keccakc512
19.5919.6019.60sha3256
19.6119.6219.62shake256
20.2820.3020.41T:keccak
20.9020.9020.91T:bblake256
24.5524.5824.59T:keccakc768
24.6324.6424.69T:keccakc256treed2
25.1325.1325.14sha256
25.2025.2025.21sha3384
29.7529.7529.76T:keccakc512treed2
34.9034.9134.92T:keccakc1024
35.7935.7935.80sha3512
48.1748.1748.21T:groestl256
48.8248.8248.83T:jh512
48.8248.8248.83T:jh224
48.8248.8248.83T:jh256
48.8248.8248.83T:jh384
57.7557.7557.76T:round3jh256
57.7657.7657.76T:round3jh512
70.4170.4370.58T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
6.246.246.25T:blake2b
9.159.169.18T:k12
9.419.429.42T:skein256256
9.639.639.66T:skein512256
9.649.649.65T:skein512512
10.3110.3510.35T:blake2s
10.68?10.75?12.01?T:blake64
11.7111.7311.78blake512
15.3315.3515.62T:blake32
16.8016.8116.81T:skein10241024
17.0017.0317.03shake128
18.4818.4818.49sha512
18.3618.6418.65T:keccakc448
18.6218.6518.70sha3224
19.4419.4619.53blake256
20.1120.1820.29T:keccakc512
20.2720.2820.29sha3256
20.3120.3520.35shake256
21.5921.6421.92T:keccak
24.1724.1924.20T:bblake256
24.8524.8824.95T:keccakc768
25.2625.2625.27sha3384
25.9225.9325.94sha256
28.4528.4628.53T:keccakc256treed2
32.9132.9532.95T:keccakc512treed2
36.2036.2036.27T:keccakc1024
36.9236.9336.93sha3512
50.1350.1350.14T:jh256
50.1350.1350.14T:jh224
50.1350.1450.15T:jh384
50.1350.1450.15T:jh512
50.1150.1450.20T:groestl256
59.2959.3059.31T:round3jh256
59.3159.3159.32T:round3jh512
76.0576.2176.36T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
7.047.047.04T:blake2b
10.0810.1010.10T:skein256256
10.1710.2010.24T:k12
10.4810.4810.48T:blake2s
10.6210.6210.63T:skein512256
10.6610.6610.67T:skein512512
11.44?11.49?12.77?T:blake64
12.6512.6512.65blake512
17.0217.0417.08T:blake32
18.3118.4018.40shake128
19.3019.3019.31sha512
21.1221.1421.39blake256
21.4521.4521.45T:skein10241024
22.6422.6422.70sha3256
22.6422.6522.68sha3224
22.8022.8522.97shake256
22.8923.0823.88T:keccak
22.8223.1723.19T:keccakc448
22.8823.3223.58T:keccakc512
27.0727.0727.07sha3384
27.0927.4127.53T:keccakc768
28.0228.0228.08sha256
32.9032.9233.06T:bblake256
38.5638.6738.73T:keccakc256treed2
40.0740.1040.14T:keccakc1024
40.4740.5040.53sha3512
50.5450.6450.64T:keccakc512treed2
53.6253.6453.69T:jh224
53.6253.6553.70T:jh256
53.6253.6553.68T:jh384
53.6253.6553.67T:jh512
55.3855.4255.43T:groestl256
63.4063.4063.43T:round3jh256
63.4463.4563.50T:round3jh512
83.5683.7183.81T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
12.6112.6612.67T:blake2s
14.7314.7314.73T:blake2b
18.6718.6918.92T:skein256256
22.6922.7022.72T:skein512256
23.0023.0623.20T:skein512512
24.6724.8126.84T:blake64
27.4827.4828.33T:k12
29.8829.8829.88blake512
36.0937.6638.56T:blake32
37.7037.7037.70sha512
42.1942.1942.98sha3384
42.2542.2542.94sha3256
42.2542.3142.78sha3224
42.3342.5945.97blake256
43.0943.0943.72shake256
43.1943.1943.47shake128
43.0943.4143.81sha3512
47.8848.1448.39T:keccakc1024
46.9149.4250.58T:keccakc768
48.17?49.62?56.28?T:keccak
48.1751.0651.09T:keccakc448
48.50?51.19?54.44?T:keccakc512
57.1957.1957.47sha256
70.3970.3970.39T:skein10241024
98.0398.0399.03T:jh384
98.0698.0699.06T:jh512
98.0998.0999.09T:jh224
98.0298.2899.02T:jh256
115.64115.86116.38T:round3jh256
116.16116.44116.70T:round3jh512
122.84122.98123.81T:groestl256
144.44144.53144.62T:bblake256
212.03212.05214.56T:groestl512
232.09232.94232.94T:keccakc512treed2
233.69233.81235.92T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
98.5098.5098.88T:blake2s
109.62110.00111.75T:skein256256
115.50115.50115.50T:blake2b
162.12166.75169.25T:blake32
179.38179.38179.38T:skein512256
180.12180.12180.88T:skein512512
188.00189.50204.50blake256
199.62?201.25?235.50?T:blake64
218.38218.38220.88T:k12
239.00239.00239.00blake512
247.00247.00247.62sha256
302.50302.62303.62sha512
335.00335.00335.50sha3384
337.00337.00337.00sha3256
337.00337.00337.50sha3224
342.75342.75344.25shake256
342.00343.00343.50sha3512
343.50343.50344.25shake128
382.12386.50400.62T:keccakc1024
377.62388.38398.88T:keccakc768
384.25?396.00?429.75?T:keccakc512
386.12?397.75?453.25?T:keccak
385.12407.00409.25T:keccakc448
563.25563.25565.38T:skein10241024
606.88606.88607.50T:groestl256
788.25788.25790.38T:jh256
788.38788.38790.50T:jh384
788.88788.88791.00T:jh224
788.62789.88790.75T:jh512
933.38933.38935.12T:round3jh256
937.12937.12937.75T:round3jh512
1009.121009.501009.75T:bblake256
1702.251707.501729.25T:groestl512
1855.501862.001862.00T:keccakc512treed2
1869.001870.881885.50T:keccakc256treed2