VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Bonnell (30661); 2011 Intel Atom D2500; 2 x 1866MHz; h8atom, supercop-20250415

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: old (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
7.327.327.33T:blake2b
9.649.659.65T:skein512256
9.749.749.75T:k12
9.769.7610.14T:skein512512
11.2511.2511.26T:skein256256
11.7511.7511.75T:blake2s
12.0912.0912.10T:blake32
12.1412.1412.14T:blake64
13.2813.8014.31blake512
13.9614.0214.12blake256
14.1414.2814.50sha512
14.1414.3614.45sha384
14.7614.7714.77T:keccakc256treed2
15.8516.1616.28T:bblake256
17.8717.8817.88T:skein10241024
18.3518.4318.53sha224
18.3518.4418.53sha256
18.5718.5818.58shake128
20.0520.0620.07T:keccakc512treed2
20.9720.9921.00T:keccakc448
21.5621.5721.59sha3224
22.6522.6622.67T:keccakc512
23.0823.0923.10shake256
23.0723.1023.10sha3256
24.0624.0724.10T:keccak
28.0928.0928.10T:jh256
28.0928.1028.10T:jh512
28.0928.1028.10T:jh224
28.2328.2328.25T:jh384
29.9429.9529.97T:keccakc768
30.2730.2830.28T:round3jh256
30.2730.2830.29T:round3jh512
30.6130.7730.82sha3384
41.9041.9141.92T:keccakc1024
42.8342.8442.86sha3512
86.1586.2386.45T:groestl256
131.58131.62132.33T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
7.377.377.37T:blake2b
9.949.949.94T:skein512256
10.0010.0010.19T:skein512512
10.3610.3610.36T:k12
11.4511.4511.46T:skein256256
11.7711.7711.78T:blake2s
12.4112.4112.41T:blake32
12.6412.6412.64T:blake64
13.9214.1314.30blake512
14.4214.4214.46blake256
16.5716.6116.69sha512
16.6116.6716.69sha384
17.1817.3317.39T:bblake256
17.4517.4517.45T:keccakc256treed2
18.6318.6318.64T:skein10241024
19.3919.3919.39shake128
20.4920.5120.54sha256
20.5120.5320.56sha224
21.5421.5421.54T:keccakc512treed2
21.9321.9321.94T:keccakc448
22.3622.3722.38sha3224
23.6223.6223.62T:keccakc512
23.8723.8723.87sha3256
23.8923.8923.90shake256
25.0125.0225.03T:keccak
28.5828.5828.58T:jh256
28.5828.5828.58T:jh224
28.5928.5928.59T:jh512
28.7228.7228.73T:jh384
30.1430.1530.15T:keccakc768
30.8130.8130.81T:round3jh256
30.8130.8130.83sha3384
30.8230.8230.83T:round3jh512
42.8742.8742.87T:keccakc1024
43.6443.6443.65sha3512
88.3288.3588.36T:groestl256
138.14138.15138.43T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
7.437.447.44T:blake2b
10.4010.4010.40T:skein512512
10.4410.4510.47T:skein512256
11.3911.3911.40T:k12
11.7911.7911.79T:skein256256
11.8111.8211.82T:blake2s
12.9412.9412.94T:blake32
13.4713.4713.48T:blake64
14.6514.9415.20blake512
14.9815.0315.07blake256
19.3619.3719.37T:bblake256
19.8919.9019.90T:skein10241024
20.3320.3320.33T:keccakc256treed2
20.3820.4520.52sha512
20.4520.5020.55sha384
20.7420.7420.75shake128
22.5022.5022.51T:keccakc448
22.6622.6722.68sha3224
23.9023.9524.00sha256
23.9924.0024.01T:keccakc512treed2
24.0024.0724.14sha224
24.6724.6824.69sha3256
24.7124.7124.72T:keccakc512
24.7424.7424.75shake256
26.5726.5826.58T:keccak
29.3829.3829.39T:jh256
29.4029.4029.41T:jh224
29.4129.4129.42T:jh512
29.5429.5429.54T:jh384
30.4630.4730.48T:keccakc768
30.8630.8630.87sha3384
31.7031.7031.71T:round3jh256
31.7331.7331.74T:round3jh512
44.4644.4644.47T:keccakc1024
44.9644.9644.97sha3512
91.6691.7291.79T:groestl256
148.76148.86148.91T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
8.398.398.39T:blake2b
11.4511.4511.46T:skein512512
11.7311.8111.91T:skein512256
11.9111.9111.92T:blake2s
12.6812.6812.69T:skein256256
13.0213.0313.03T:k12
14.3414.3414.35T:blake32
14.4514.4614.47T:blake64
15.6215.6215.75blake512
16.4116.4516.52blake256
22.2922.3022.32shake128
25.2725.2825.29T:bblake256
25.2825.3025.33T:skein10241024
27.4927.4927.53sha3224
27.5027.5127.51sha3256
27.6827.7027.70shake256
27.8727.8827.89T:keccakc448
27.9527.9627.96T:keccakc256treed2
28.2628.2728.28T:keccakc512
28.2728.2828.29T:keccak
28.9829.1229.28sha512
29.0829.1829.29sha384
31.5231.5231.54T:jh256
31.5731.5931.59T:jh224
31.6131.6131.62T:jh512
31.7231.7231.73T:jh384
33.0133.0233.03sha3384
33.0833.2533.41sha256
33.1033.2533.48sha224
33.3433.3433.34T:keccakc768
34.0634.0634.06T:round3jh256
34.1434.1534.15T:round3jh512
37.0537.0537.05T:keccakc512treed2
49.1149.1249.13sha3512
49.1849.1949.21T:keccakc1024
101.14101.22101.45T:groestl256
162.40162.73162.92T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
13.0213.0213.45T:blake2s
16.6216.6216.62T:blake2b
23.7323.7323.84T:skein256256
23.9524.0624.06T:skein512512
27.7827.8928.11T:skein512256
31.0631.0631.06T:blake64
31.9432.0532.05T:blake32
34.7834.7834.78blake512
34.7834.8935.55blake256
38.7238.8339.05T:k12
49.9850.0950.09sha3256
50.2050.2050.64sha3224
50.2050.3150.64sha3384
50.3150.7552.39sha3512
51.6251.7351.95shake256
51.7351.7352.06shake128
58.7358.7358.73T:jh256
58.8458.8458.95T:keccakc768
59.1759.2859.28T:jh224
59.2859.3959.39T:jh384
59.5059.5059.61T:jh512
59.5059.7259.72T:keccakc448
60.3860.4860.59T:keccakc1024
63.2263.2263.33T:keccakc512
63.2263.3363.44T:keccak
64.0964.2064.20T:round3jh256
64.8664.8664.86T:round3jh512
82.9182.9182.91T:skein10241024
99.97100.19100.30T:bblake256
146.89147.98149.19sha512
146.78148.20150.50sha384
149.84151.16152.03sha256
151.27151.92153.23sha224
172.05172.16172.27T:keccakc256treed2
172.81172.81173.14T:keccakc512treed2
222.91224.44224.88T:groestl256
402.39403.05403.38T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
103.25103.25105.00T:blake2s
130.38130.38131.25T:blake2b
140.88140.88142.62T:skein256256
161.00161.88163.62T:blake32
165.38166.25168.00blake256
189.88189.88190.75T:skein512512
219.62219.62222.25T:skein512256
252.00252.88252.88T:blake64
279.12279.12280.88blake512
308.00308.00308.00T:k12
398.12398.12400.75sha3256
399.88399.88404.25sha3224
399.88400.75402.50sha3384
399.88400.75402.50sha3512
411.25411.25413.88shake128
411.25412.12419.12shake256
471.62472.50472.50T:keccakc768
472.50472.50473.38T:jh256
472.50475.12475.12T:keccakc448
476.88476.88476.88T:jh224
478.62479.50480.38T:jh512
481.25482.12482.12T:jh384
497.88500.50511.00T:keccakc1024
503.12504.00504.88T:keccakc512
506.62507.50508.38T:keccak
524.12524.12525.00T:round3jh256
530.25530.25530.25T:round3jh512
662.38662.38662.38T:skein10241024
679.00679.00679.88T:bblake256
1063.121075.381082.38sha256
1073.621084.121099.88sha224
1092.881097.251099.00T:groestl256
1171.621180.381190.88sha384
1173.381181.251195.25sha512
1373.751374.621376.38T:keccakc256treed2
1379.881380.751382.50T:keccakc512treed2
3228.753230.503237.50T:groestl512