VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Tremont (906c0); 2021 Intel Pentium Silver N6000; 4 x 1100MHz; jasper, supercop-20240625

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 2.09 2.09 2.10 sha224 2.09 2.10 2.10 sha256 5.28 5.29 5.31 T:k12 5.36 5.46 5.51 T:blake2b 5.48 5.49 5.51 T:blake2s 5.75? 6.47? 7.23? T:blake32 7.07 7.12 7.20 T:bblake256 7.50 7.57 7.60 T:skein512512 7.52 7.58 7.61 T:skein512256 7.74 7.79 7.84 T:blake64 8.28 8.28 8.29 T:keccakc256treed2 8.33 8.38 8.43 blake256 8.57 8.60 8.62 blake512 9.19 9.20 9.22 T:skein10241024 9.64 9.92 10.14 shake128 9.93 9.96 10.07 T:skein256256 10.29 10.42 10.53 sha512 10.34 10.43 10.48 sha384 11.00 11.02 11.03 T:keccakc512treed2 11.57 11.61 11.62 T:keccakc448 11.33 11.62 11.81 sha3224 11.79? 12.36? 13.25? shake256 12.23 12.38 12.71 sha3256 12.40 12.41 12.43 T:keccakc512 13.22 13.24 13.26 T:keccak 13.50 13.53 13.54 T:groestl256 15.81 16.43 17.06 sha3384 16.49 16.50 16.52 T:keccakc768 19.03 19.07 19.09 T:groestl512 20.36 20.40 20.42 T:jh384 20.36 20.40 20.43 T:jh224 20.39 20.41 20.42 T:jh256 20.36 20.43 20.46 T:jh512 22.84 22.86 22.93 sha3512 23.55 23.58 23.59 T:keccakc1024 23.97 23.97 23.98 T:round3jh512 23.92 23.99 24.02 T:round3jh256

Cycles/byte for 4096 bytes 25% 50% 75% hash 2.17 2.17 2.17 sha224 2.17 2.17 2.17 sha256 5.44 5.49 5.49 T:blake2b 5.50 5.50 5.51 T:blake2s 5.54 5.55 5.55 T:k12 6.41 6.54 6.90 T:blake32 7.71 7.73 7.74 T:skein512256 7.73 7.75 7.78 T:bblake256 7.74 7.76 7.77 T:skein512512 8.05 8.06 8.08 T:blake64 8.54 8.55 8.57 blake256 8.88 8.89 8.89 blake512 9.55 9.55 9.55 T:skein10241024 9.77 9.77 9.77 T:keccakc256treed2 10.06 10.07 10.12 T:skein256256 10.44 10.53 10.63 shake128 10.79 10.82 10.84 sha384 10.81 10.85 10.88 sha512 11.81 11.82 11.82 T:keccakc512treed2 12.08 12.10 12.10 T:keccakc448 12.10 12.23 12.25 sha3224 12.91 12.91 12.92 T:keccakc512 12.95 12.96 13.40 shake256 12.96 12.98 13.13 sha3256 13.73 13.74 13.74 T:keccak 14.14 14.15 14.15 T:groestl256 16.59 16.60 16.60 T:keccakc768 16.45 16.62 16.93 sha3384 20.27 20.29 20.29 T:groestl512 20.74 20.76 20.76 T:jh384 20.76 20.76 20.77 T:jh256 20.75 20.76 20.77 T:jh224 20.75 20.77 20.78 T:jh512 23.44 23.44 23.45 sha3512 24.03 24.04 24.05 T:keccakc1024 24.37 24.37 24.37 T:round3jh512 24.34 24.37 24.37 T:round3jh256

Cycles/byte for 1536 bytes 25% 50% 75% hash 2.29 2.29 2.30 sha224 2.29 2.29 2.30 sha256 5.51 5.52 5.53 T:blake2s 5.49 5.53 5.54 T:blake2b 5.98 5.99 6.00 T:k12 6.66 6.77 7.19 T:blake32 7.96 7.96 7.98 T:skein512256 8.05 8.07 8.09 T:skein512512 8.50 8.51 8.53 T:blake64 8.77 8.79 8.82 T:bblake256 8.79 8.81 8.82 blake256 9.36 9.38 9.39 blake512 10.12 10.13 10.16 T:skein10241024 10.27 10.28 10.32 T:skein256256 11.33 11.33 11.34 T:keccakc256treed2 11.45 11.50 11.52 sha384 11.51 11.52 11.54 sha512 11.52 11.53 11.66 shake128 12.37 12.39 12.41 T:keccakc448 12.65 12.69 12.74 sha3224 13.14 13.15 13.15 T:keccakc512treed2 13.49 13.50 13.50 T:keccakc512 13.67 13.69 14.24 shake256 13.68 13.70 13.77 sha3256 14.57 14.57 14.59 T:keccak 15.14 15.15 15.15 T:groestl256 16.76 16.76 16.77 T:keccakc768 16.93 16.96 17.27 sha3384 21.30 21.30 21.31 T:jh256 21.29 21.31 21.34 T:jh512 21.30 21.31 21.32 T:jh224 21.29 21.31 21.32 T:jh384 22.31 22.32 22.35 T:groestl512 24.43 24.43 24.46 sha3512 24.81 24.82 24.83 T:keccakc1024 24.97 24.98 25.00 T:round3jh256 24.99 25.01 25.01 T:round3jh512

Cycles/byte for 576 bytes 25% 50% 75% hash 2.62 2.62 2.63 sha224 2.62 2.63 2.63 sha256 5.56 5.57 5.58 T:blake2s 6.23 6.25 6.28 T:blake2b 6.56 6.56 6.58 T:k12 7.30 7.35 7.73 T:blake32 8.58 8.61 8.64 T:skein512256 8.86 8.87 8.88 T:skein512512 8.86 8.90 8.93 T:blake64 9.44 9.45 9.48 blake256 9.71 9.72 9.76 blake512 10.84 10.88 10.91 T:skein256256 11.71 11.77 11.85 T:bblake256 12.15 12.18 12.22 sha384 12.22 12.24 12.30 sha512 12.78 12.79 12.82 T:skein10241024 13.06 13.09 13.26 shake128 15.37 15.38 15.39 T:keccakc448 15.45 15.45 15.46 T:keccak 15.46 15.46 15.46 T:keccakc512 15.51 15.51 15.52 T:keccakc256treed2 15.93 15.95 16.64 shake256 16.01 16.02 16.23 sha3256 16.11 16.17 16.22 sha3224 17.82 17.85 17.88 T:groestl256 18.36 18.36 18.37 T:keccakc768 18.87 18.94 19.19 sha3384 20.35 20.35 20.36 T:keccakc512treed2 22.75 22.77 22.82 T:jh224 22.77 22.78 22.80 T:jh384 22.77 22.78 22.82 T:jh512 22.77 22.80 22.83 T:jh256 25.61 25.62 25.66 T:groestl512 26.68 26.69 26.72 T:round3jh512 26.70 26.71 26.74 T:round3jh256 27.22 27.24 27.26 T:keccakc1024 27.25 27.40 27.45 sha3512

Cycles/byte for 64 bytes 25% 50% 75% hash 6.05 6.12 6.14 T:blake2s 6.75 6.78 6.80 sha224 6.77 6.78 6.81 sha256 12.50 12.50 12.52 T:blake2b 15.66 16.08 16.38 T:blake32 16.52 16.58 16.88 T:skein512256 16.95 17.14 17.42 T:k12 17.39 17.70 17.78 T:blake64 17.77 17.98 18.22 blake256 18.08 18.09 18.36 T:skein256256 18.80 18.88 19.16 blake512 19.06 19.09 19.33 T:skein512512 25.62 25.75 25.91 sha384 26.08 26.27 26.39 sha512 29.83 30.08 30.14 T:keccakc1024 33.06 33.14 33.17 T:keccak 33.22 33.23 33.30 T:keccakc768 33.27 33.28 33.30 T:keccakc448 33.34 33.38 33.39 T:keccakc512 37.95 38.14 38.45 sha3512 38.03 38.38 39.03 shake256 38.30 38.42 38.62 sha3256 37.94 38.44 38.61 shake128 38.11 38.59 38.81 sha3384 38.59 38.84 39.23 sha3224 41.33 41.44 41.52 T:skein10241024 41.64 41.72 41.73 T:jh224 41.69 41.73 41.91 T:jh512 41.72 41.83 42.08 T:jh384 41.77 41.83 41.92 T:jh256 48.39 48.50 48.52 T:round3jh256 48.55 48.59 48.64 T:round3jh512 49.12 49.53 49.89 T:bblake256 52.33 52.69 52.83 T:groestl256 78.22 78.55 78.73 T:groestl512 94.78 94.78 94.86 T:keccakc512treed2 94.98 95.06 95.08 T:keccakc256treed2

Cycles/byte for 8 bytes 25% 50% 75% hash 35.88 36.25 38.88 sha224 37.38 38.88 39.38 sha256 48.50 49.00 49.75 T:blake2s 74.25 76.00 77.62 T:blake32 81.00 82.75 84.88 blake256 99.50 99.88 101.75 T:blake2b 113.62 114.00 114.38 T:skein256256 131.62 132.25 134.25 T:skein512256 136.25 138.88 141.00 T:k12 142.12 143.88 146.75 T:blake64 150.75 151.38 152.12 blake512 149.75 151.75 153.25 T:skein512512 201.75 202.50 205.00 sha384 205.00 206.12 207.88 sha512 238.38 241.00 241.62 T:keccakc1024 264.38 265.25 265.50 T:keccakc768 265.62 265.75 266.12 T:keccak 266.00 266.25 266.25 T:keccakc512 267.75 268.62 268.88 T:keccakc448 303.62 305.75 308.12 sha3512 303.88 306.38 312.62 shake256 305.00 307.25 308.75 shake128 305.88 308.62 310.12 sha3256 307.62 310.75 314.88 sha3384 309.88 312.62 315.50 sha3224 311.00 313.25 314.00 T:groestl256 327.88 330.75 332.88 T:bblake256 332.62 332.88 334.88 T:skein10241024 336.88 337.25 338.75 T:jh384 337.88 338.38 338.88 T:jh256 338.38 338.50 338.88 T:jh224 338.25 338.62 340.62 T:jh512 388.25 389.25 389.50 T:round3jh256 389.25 389.62 390.62 T:round3jh512 628.50 629.25 630.75 T:groestl512 757.62 757.88 758.25 T:keccakc512treed2 760.00 760.25 760.75 T:keccakc256treed2