VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.072.132.18sha224
2.222.232.25sha256
5.235.335.40T:k12
5.465.495.51T:blake2s
5.705.956.03T:blake2b
6.486.526.54T:blake32
6.886.997.10T:bblake256
7.517.567.59T:skein512512
7.547.587.61T:skein512256
7.587.667.76T:blake64
8.278.278.28T:keccakc256treed2
8.308.338.36blake256
8.518.568.60blake512
9.189.209.21T:skein10241024
9.8810.0510.07T:skein256256
10.3010.3210.34shake128
10.2810.3610.44sha512
10.2310.3710.46sha384
11.0011.0211.03T:keccakc512treed2
11.5311.5611.60T:keccakc448
11.9711.9912.02sha3224
12.3812.4012.41T:keccakc512
12.8412.8612.89sha3256
12.8612.8912.93shake256
13.1913.2413.26T:keccak
13.5113.5313.58T:groestl256
16.4716.5016.51T:keccakc768
17.0417.0717.09sha3384
19.0219.0619.09T:groestl512
20.3420.3920.46T:jh256
20.3720.4020.42T:jh384
20.3520.4120.42T:jh512
20.3620.4120.43T:jh224
23.1023.1423.20T:keccakc1024
23.8023.8323.87sha3512
23.9723.9823.99T:round3jh512
23.9723.9824.01T:round3jh256
Cycles/byte for 4096 bytes
25%50%75%hash
2.282.282.29sha256
2.592.612.62sha224
5.495.505.50T:blake2s
5.575.585.61T:k12
5.845.965.97T:blake2b
6.656.666.67T:blake32
7.587.617.66T:bblake256
7.727.737.74T:skein512256
7.757.767.77T:skein512512
7.957.998.02T:blake64
8.508.518.52blake256
8.888.888.90blake512
9.559.569.56T:skein10241024
9.769.779.77T:keccakc256treed2
10.0710.1210.13T:skein256256
10.7610.7610.77shake128
11.1511.2011.23sha384
11.2111.2211.25sha512
11.8111.8211.82T:keccakc512treed2
12.0712.0812.09T:keccakc448
12.4412.4512.46sha3224
12.9012.9112.91T:keccakc512
13.3013.3113.32sha3256
13.3113.3213.34shake256
13.7213.7413.74T:keccak
14.1514.1614.18T:groestl256
16.5816.5916.60T:keccakc768
17.0817.0917.10sha3384
20.2520.2620.27T:groestl512
20.7520.7620.77T:jh384
20.7420.7620.78T:jh256
20.7420.7620.76T:jh512
20.7420.7720.77T:jh224
23.6723.6823.70T:keccakc1024
24.2724.2824.30sha3512
24.3724.3724.37T:round3jh512
24.3724.3724.37T:round3jh256
Cycles/byte for 1536 bytes
25%50%75%hash
2.352.362.36sha256
3.393.443.48sha224
5.515.525.53T:blake2s
5.945.975.98T:blake2b
6.016.036.05T:k12
6.856.866.88T:blake32
7.967.988.00T:skein512256
8.068.088.11T:skein512512
8.498.508.51T:blake64
8.698.738.75T:bblake256
8.768.798.80blake256
9.379.399.47blake512
10.1310.1610.16T:skein10241024
10.2810.2910.32T:skein256256
11.3311.3311.34T:keccakc256treed2
11.4811.4811.49shake128
12.3912.4012.41T:keccakc448
12.5512.6112.66sha384
12.6312.6412.65sha3224
12.6412.6712.76sha512
13.1413.1513.16T:keccakc512treed2
13.4913.4913.50T:keccakc512
13.7613.7713.78sha3256
13.7713.7813.80shake256
14.5614.5714.59T:keccak
15.1715.1715.18T:groestl256
16.7516.7716.78T:keccakc768
17.1117.1317.14sha3384
21.2921.3121.31T:jh224
21.3021.3121.31T:jh384
21.3121.3221.33T:jh256
21.3021.3321.34T:jh512
22.2722.2822.30T:groestl512
24.5324.5424.56T:keccakc1024
24.9825.0025.01T:round3jh512
24.9725.0025.01T:round3jh256
25.0125.0225.03sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.562.572.58sha256
5.545.565.57T:blake2s
5.565.685.80sha224
6.606.636.65T:k12
6.656.666.70T:blake2b
7.407.427.46T:blake32
8.598.618.66T:skein512256
8.888.908.93T:blake64
8.898.918.93T:skein512512
9.439.469.50blake256
9.689.719.74blake512
10.8910.9010.92T:skein256256
11.7011.7711.83T:bblake256
12.2612.2712.29shake128
12.8112.8312.84T:skein10241024
15.2615.2615.27sha3256
15.2815.2815.30shake256
15.2915.3115.33sha3224
15.3615.3815.42T:keccakc448
15.4415.4515.47T:keccak
15.4515.4615.47T:keccakc512
15.3315.4915.59sha384
15.5115.5115.52T:keccakc256treed2
15.6415.8215.89sha512
17.8717.8917.92T:groestl256
18.2518.2618.33sha3384
18.3618.3718.37T:keccakc768
20.3520.3520.35T:keccakc512treed2
22.7522.7722.80T:jh224
22.7722.7822.83T:jh512
22.7822.7822.84T:jh384
22.7722.8022.80T:jh256
25.4925.5025.52T:groestl512
26.6926.6926.73T:round3jh256
26.6926.7026.73T:round3jh512
27.1427.1627.18T:keccakc1024
27.2827.2927.31sha3512
Cycles/byte for 64 bytes
25%50%75%hash
5.235.275.33sha256
6.006.086.14T:blake2s
12.3412.4112.48T:blake2b
14.4414.5314.64T:blake32
16.5516.6616.83T:skein512256
16.9817.1217.30T:k12
17.6717.7017.94T:blake64
18.3318.3318.38T:skein256256
18.2318.4718.58blake256
18.8118.8918.98blake512
19.0919.2319.47T:skein512512
27.9227.9427.97sha3256
27.9527.9727.98sha3384
27.9427.9828.00sha3512
28.0328.0528.06shake256
28.0628.0828.08shake128
28.0828.1628.22sha3224
33.0533.1233.20T:keccak
33.1233.1433.19T:keccakc1024
33.2233.2533.34T:keccakc768
33.2733.2733.31T:keccakc448
33.3833.4133.42T:keccakc512
33.8835.0336.25sha224
41.3041.4741.55T:skein10241024
41.6641.7742.23T:jh224
41.7241.8042.00T:jh384
41.7241.8441.98T:jh256
41.7741.8641.98T:jh512
48.4748.4748.70T:round3jh256
48.5848.6448.66T:round3jh512
49.6950.1150.27T:bblake256
52.3852.7353.27T:groestl256
55.0556.7758.98sha384
57.3958.0959.62sha512
77.2377.5077.80T:groestl512
94.7394.7794.86T:keccakc512treed2
95.0095.0995.12T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
27.3827.5028.00sha256
49.0049.3850.25T:blake2s
65.6265.8868.25T:blake32
82.8883.3884.50blake256
99.25100.00101.50T:blake2b
114.00114.75115.25T:skein256256
131.88132.50134.00T:skein512256
136.25139.25140.62T:k12
142.38143.25144.88T:blake64
152.38153.12155.62T:skein512512
155.00155.62155.62blake512
222.62222.88223.12sha3256
222.75223.00223.62sha3384
222.88223.38223.38sha3512
223.62223.75223.75shake256
224.25224.50224.75shake128
224.25224.50227.12sha3224
252.25259.50269.75sha224
264.88265.25265.38T:keccakc1024
265.00265.38265.50T:keccakc768
265.62265.75266.00T:keccak
266.00266.25266.38T:keccakc512
267.75267.75268.25T:keccakc448
313.75314.38316.75T:groestl256
331.75332.62333.88T:skein10241024
336.62336.88337.50T:jh384
335.38338.25340.00T:bblake256
338.50338.62340.00T:jh512
338.00338.75339.38T:jh256
338.38338.88338.88T:jh224
388.50389.12389.38T:round3jh256
388.88389.75391.62T:round3jh512
440.62449.62463.25sha384
451.62459.25469.75sha512
621.50623.62625.75T:groestl512
757.62757.88758.25T:keccakc512treed2
760.00760.38761.00T:keccakc256treed2