VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Ivy Bridge+AES (306a9); 2012 Intel Core i5-3427U; 2 x 1800MHz; hunsnivy, supercop-20240625

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 3.39 3.41 3.42 T:blake2b 4.29 4.30 4.31 T:k12 5.20 5.23 5.25 T:keccakc256treed2 5.20 5.27 5.31 T:bblake256 5.34 5.34 5.35 T:blake2s 5.68 5.69 5.70 T:blake32 5.97 6.00 6.04 blake512 6.10 6.12 6.16 T:skein512512 6.13 6.16 6.18 T:skein512256 6.23 6.26 6.28 T:blake64 6.94 6.98 7.01 T:keccakc512treed2 7.11 7.14 7.16 sha384 7.11 7.14 7.17 sha512 7.57 7.57 7.58 blake256 8.07 8.14 8.22 T:skein10241024 8.32 8.34 8.35 shake128 8.68 8.77 9.14 T:skein256256 9.00 9.32 9.99 T:groestl256 9.49 9.50 9.53 T:keccakc448 9.67 9.69 9.71 sha3224 10.11 10.13 10.16 T:keccakc512 10.10 10.13 10.15 sha224 10.13 10.14 10.18 sha256 10.35 10.36 10.37 sha3256 10.34 10.36 10.38 shake256 10.78 10.80 10.81 T:keccak 13.01 13.07 13.16 T:jh256 13.05 13.09 13.14 T:jh224 13.04 13.10 13.17 T:jh512 13.06 13.11 13.19 T:jh384 13.12 13.14 13.16 T:groestl512 13.48 13.51 13.53 T:keccakc768 13.75 13.77 13.78 sha3384 15.04 15.08 15.11 T:round3jh256 14.87 15.14 15.27 T:round3jh512 18.91 18.93 18.96 T:keccakc1024 19.15 19.17 19.20 sha3512

Cycles/byte for 4096 bytes 25% 50% 75% hash 3.43 3.44 3.44 T:blake2b 4.54 4.54 4.54 T:k12 5.36 5.36 5.36 T:blake2s 5.82 5.83 5.83 T:blake32 5.83 5.85 5.86 T:bblake256 6.17 6.19 6.19 T:keccakc256treed2 6.22 6.22 6.23 blake512 6.28 6.29 6.29 T:skein512256 6.30 6.31 6.32 T:skein512512 6.49 6.50 6.51 T:blake64 7.44 7.45 7.45 sha384 7.44 7.45 7.46 sha512 7.49 7.50 7.51 T:keccakc512treed2 7.73 7.73 7.73 blake256 8.45 8.47 8.50 T:skein10241024 8.70 8.71 8.71 shake128 8.82 8.84 8.85 T:skein256256 9.72 9.73 10.06 T:groestl256 9.90 9.90 9.91 T:keccakc448 10.05 10.05 10.06 sha3224 10.35 10.36 10.37 sha224 10.37 10.37 10.38 sha256 10.54 10.55 10.56 T:keccakc512 10.72 10.73 10.73 sha3256 10.72 10.73 10.73 shake256 11.18 11.19 11.19 T:keccak 13.33 13.34 13.36 T:jh512 13.33 13.34 13.35 T:jh224 13.33 13.34 13.38 T:jh384 13.33 13.35 13.37 T:jh256 13.57 13.58 13.59 T:keccakc768 13.78 13.79 13.79 sha3384 13.91 13.92 13.92 T:groestl512 15.33 15.34 15.35 T:round3jh256 15.32 15.40 15.44 T:round3jh512 19.33 19.33 19.34 T:keccakc1024 19.53 19.54 19.55 sha3512

Cycles/byte for 1536 bytes 25% 50% 75% hash 3.48 3.49 3.49 T:blake2b 4.94 4.95 4.95 T:k12 5.38 5.38 5.38 T:blake2s 6.03 6.04 6.05 T:blake32 6.47 6.48 6.49 T:skein512256 6.54 6.59 6.63 blake512 6.60 6.61 6.62 T:skein512512 6.82 6.83 6.85 T:bblake256 6.90 6.91 6.94 T:blake64 7.23 7.25 7.25 T:keccakc256treed2 7.95 7.96 7.97 sha512 7.95 7.96 7.97 sha384 7.97 7.97 7.98 blake256 8.34 8.36 8.38 T:keccakc512treed2 8.64 8.95 9.01 T:skein256256 8.99 9.03 9.07 T:skein10241024 9.30 9.30 9.31 shake128 10.11 10.12 10.13 T:keccakc448 10.20 10.20 10.22 sha3224 10.37 10.39 10.68 T:groestl256 10.71 10.72 10.74 sha256 10.72 10.73 10.74 sha224 10.99 11.00 11.01 T:keccakc512 11.10 11.10 11.11 sha3256 11.10 11.11 11.13 shake256 11.82 11.83 11.86 T:keccak 13.65 13.66 13.67 T:keccakc768 13.71 13.74 13.76 T:jh384 13.73 13.74 13.77 T:jh224 13.73 13.75 13.79 T:jh256 13.73 13.76 13.77 T:jh512 13.82 13.83 13.84 sha3384 15.21 15.21 15.23 T:groestl512 15.77 15.79 15.81 T:round3jh256 15.77 15.81 15.89 T:round3jh512 20.00 20.01 20.02 T:keccakc1024 20.13 20.14 20.16 sha3512

Cycles/byte for 576 bytes 25% 50% 75% hash 4.01 4.04 4.14 T:blake2b 5.43 5.45 5.45 T:blake2s 5.57 5.57 5.59 T:k12 6.63 6.66 6.68 T:blake32 6.89 6.93 6.98 blake512 7.03 7.05 7.07 T:skein512256 7.31 7.33 7.39 T:blake64 7.35 7.39 7.43 T:skein512512 8.64 8.64 8.65 blake256 8.56 8.84 8.85 sha384 8.59 8.88 8.90 sha512 9.10 9.17 9.42 T:skein256256 9.60? 9.64? 13.43? T:bblake256 9.97 9.98 10.02 T:keccakc256treed2 9.99 10.00 10.02 shake128 11.28 11.42 11.53 T:skein10241024 11.69 11.71 11.76 sha256 11.67 11.71 11.77 sha224 12.09 12.12 12.41 T:groestl256 12.36 12.36 12.37 sha3224 12.36 12.37 12.38 T:keccak 12.37 12.38 12.40 sha3256 12.40 12.42 12.45 shake256 12.45 12.47 12.51 T:keccakc448 12.48 12.49 12.53 T:keccakc512 12.93 12.95 12.98 T:keccakc512treed2 14.69 14.73 14.79 T:jh224 14.72 14.73 14.78 T:jh512 14.70 14.73 14.76 T:jh384 14.70 14.77 14.80 T:jh256 14.79 14.80 14.81 T:keccakc768 14.81 14.83 14.85 sha3384 16.89 16.91 17.00 T:round3jh256 16.95 17.01 17.06 T:round3jh512 17.43 17.45 17.51 T:groestl512 22.00 22.02 22.04 T:keccakc1024 22.04 22.06 22.09 sha3512

Cycles/byte for 64 bytes 25% 50% 75% hash 6.06 6.25 6.33 T:blake2s 8.41? 8.78? 9.59? T:blake2b 13.98 14.08 14.39 T:blake32 14.17 14.27 14.48 T:skein512256 14.23 14.44 14.75 blake512 15.09 15.22 15.47 T:skein256256 15.31 15.39 15.53 T:blake64 15.61 15.64 15.77 T:k12 16.98 17.19 17.39 T:skein512512 17.19 17.22 17.27 blake256 19.09 19.31 19.41 sha384 19.44 19.48 19.61 sha512 23.02 23.09 23.30 sha3224 23.05 23.11 23.27 sha3384 23.03 23.14 23.23 sha3256 23.06 23.14 23.25 sha3512 23.23 23.34 23.59 shake256 23.30 23.41 23.55 shake128 24.02 24.09 24.20 sha224 24.03 24.16 24.25 sha256 24.61 24.67 24.89 T:keccak 24.77 24.88 25.05 T:keccakc1024 24.91 24.97 25.44 T:keccakc768 25.09 25.14 25.41 T:keccakc448 25.36 25.41 25.61 T:keccakc512 27.64 27.80 28.08 T:jh512 27.66 27.91 28.14 T:jh224 27.67 27.92 28.27 T:jh256 27.75 27.92 28.12 T:jh384 31.41 31.56 31.77 T:round3jh256 31.88 32.25 32.42 T:round3jh512 34.05 34.19 34.39 T:groestl256 36.39 36.47 36.70 T:skein10241024 43.98 44.11 44.22 T:bblake256 51.38 51.47 51.59 T:groestl512 60.95 61.06 61.34 T:keccakc512treed2 61.19 61.38 61.44 T:keccakc256treed2

Cycles/byte for 8 bytes 25% 50% 75% hash 51.88 53.12 53.38 T:blake2s 70.00 71.00 72.00 T:blake32 70.25 71.62 77.12 T:blake2b 80.50 81.50 82.50 blake256 86.88 87.38 88.50 T:skein256256 108.50 109.12 109.62 sha224 109.62 110.25 110.88 sha256 112.25 113.25 115.12 T:skein512256 113.75 115.12 117.12 blake512 123.88 124.25 125.00 T:k12 123.38 124.75 130.12 T:blake64 135.12 136.00 137.88 T:skein512512 152.62 154.50 156.00 sha384 156.25 157.00 157.62 sha512 183.25 183.25 185.12 sha3224 183.25 184.00 185.62 sha3256 183.50 184.38 185.38 sha3384 183.88 184.38 186.00 sha3512 184.88 185.25 186.62 shake256 185.62 186.12 187.25 shake128 197.00 197.75 198.38 T:keccak 198.00 199.25 200.75 T:keccakc1024 198.88 199.25 200.38 T:groestl256 199.75 200.50 203.12 T:keccakc768 200.25 200.62 202.38 T:keccakc448 202.62 203.00 204.50 T:keccakc512 224.38 225.75 228.38 T:jh256 223.50 225.88 227.75 T:jh512 225.00 226.38 228.25 T:jh384 225.38 226.62 228.12 T:jh224 254.25 255.50 257.00 T:round3jh256 255.38 256.88 259.00 T:round3jh512 290.50 291.25 292.38 T:skein10241024 293.75 297.12 301.88 T:bblake256 393.25 393.62 394.50 T:groestl512 487.38 488.12 489.88 T:keccakc512treed2 489.12 490.12 490.62 T:keccakc256treed2