VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Airmont (406c3); 2015 Intel Pentium N3700; 4 x 1600MHz; nucnuc, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
8.558.568.57T:blake2b
9.399.449.47T:k12
10.1610.1610.16T:blake2s
11.6011.6111.63T:skein512256
11.6111.6111.63T:skein512512
11.6911.6911.69T:blake32
11.7211.7211.73T:skein256256
12.4912.5012.51T:blake64
12.8112.8112.81T:keccakc256treed2
13.6013.6013.61blake512
13.6213.6213.63blake256
15.1615.3115.38T:bblake256
17.2217.2217.24T:keccakc512treed2
17.2217.2317.24sha512
17.2217.2417.25sha384
17.8517.8717.90T:skein10241024
18.4218.4518.47shake128
20.4520.4520.46sha256
20.4520.4620.46sha224
20.7821.0321.22T:keccakc448
21.4621.5221.55sha3224
22.6922.7623.50T:keccakc512
22.5323.0223.94shake256
23.0523.0523.05sha3256
23.5623.7824.62T:keccak
25.6425.7125.88T:jh224
25.7225.7225.72T:jh384
25.7125.7225.83T:jh512
25.7125.7225.73T:jh256
29.5229.5429.54T:round3jh512
29.5329.5429.55T:round3jh256
30.1530.2230.26T:keccakc768
30.5530.6030.65sha3384
32.7132.7432.78T:groestl256
41.4542.2942.36T:keccakc1024
42.6942.7242.78sha3512
49.3049.3649.45T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
8.608.608.60T:blake2b
9.959.969.96T:k12
10.1610.1610.16T:blake2s
11.8511.8511.86T:skein512256
11.8511.8511.86T:skein512512
11.8811.8811.89T:skein256256
11.9511.9511.95T:blake32
12.9812.9812.99T:blake64
13.9213.9213.92blake256
14.1514.1514.15blake512
15.1015.1015.10T:keccakc256treed2
16.4616.4916.52T:bblake256
17.8917.9017.90sha384
17.9017.9017.90sha512
18.4718.4718.47T:keccakc512treed2
18.5518.5518.56T:skein10241024
19.2619.2619.27shake128
20.8820.8820.89sha224
20.8920.8920.89sha256
22.1422.1622.17T:keccakc448
22.3122.3222.32sha3224
23.6823.7124.06T:keccakc512
23.8223.8224.28shake256
23.8223.8223.82sha3256
25.1225.1525.49T:keccak
26.1426.1426.15T:jh256
26.1426.1426.14T:jh384
26.1426.1426.20T:jh512
26.1426.1426.22T:jh224
30.0230.0230.03T:round3jh256
30.0230.0230.03T:round3jh512
30.3830.3930.40T:keccakc768
30.6430.6430.67sha3384
33.6533.6633.67T:groestl256
43.1743.2143.23T:keccakc1024
43.5243.5243.55sha3512
52.1152.1452.17T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
8.658.658.67T:blake2b
10.1710.1710.17T:blake2s
10.8110.8410.85T:k12
12.1512.1512.16T:skein256256
12.2612.2612.26T:skein512256
12.2612.2612.26T:skein512512
12.3812.3812.38T:blake32
13.7813.7813.78T:blake64
14.4114.4114.42blake256
15.0515.0615.06blake512
17.5217.5217.52T:keccakc256treed2
18.5218.5518.67T:bblake256
18.9818.9919.00sha384
19.0119.0119.03sha512
19.6819.6819.69T:skein10241024
20.5320.5320.53T:keccakc512treed2
20.6220.9221.87shake128
21.6021.6021.60sha224
21.6021.6121.61sha256
22.6022.6023.06sha3224
22.6222.6322.73T:keccakc448
24.6224.6224.62sha3256
24.6524.6824.68shake256
24.6624.7125.02T:keccakc512
26.6126.6326.78T:keccak
26.8426.8426.85T:jh256
26.8526.8526.85T:jh384
26.8526.8526.85T:jh512
26.8526.8526.93T:jh224
30.5830.5930.63T:keccakc768
30.7230.7230.79sha3384
30.8330.8330.83T:round3jh256
30.8330.8330.85T:round3jh512
35.1935.2135.22T:groestl256
44.7644.8345.43T:keccakc1024
44.8644.8744.89sha3512
56.7656.7756.78T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
9.749.749.74T:blake2b
10.1810.1810.18T:blake2s
12.0312.0712.09T:k12
12.8812.8812.88T:skein256256
13.3113.3113.31T:skein512256
13.3213.3213.32T:skein512512
13.5313.5313.54T:blake32
14.6514.6614.66T:blake64
15.7515.7715.77blake256
16.0116.0116.02blake512
20.0820.1020.11sha384
20.1220.1520.16sha512
22.1622.1922.30shake128
23.5123.5223.52sha224
23.5223.5323.53sha256
23.9623.9623.96T:keccakc256treed2
23.9824.0024.18T:bblake256
24.7724.7724.79T:skein10241024
27.4127.4127.93sha3224
27.4627.4627.88sha3256
27.5827.6727.99shake256
27.8627.9427.99T:keccakc448
27.8727.9428.30T:keccak
28.0128.1528.27T:keccakc512
28.7228.7228.73T:jh256
28.7228.7228.72T:jh384
28.7328.7328.73T:jh512
28.7328.7328.81T:jh224
31.6931.6931.69T:keccakc512treed2
32.9432.9432.94sha3384
32.9832.9833.00T:round3jh256
32.9832.9932.99T:round3jh512
33.1033.1833.23T:keccakc768
39.3739.3839.41T:groestl256
49.0949.1449.15sha3512
49.1249.3049.53T:keccakc1024
63.5063.6763.69T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
10.2510.2510.25T:blake2s
18.8618.8619.06T:blake2b
21.9121.9121.91T:skein256256
26.4826.4826.48T:skein512256
26.6126.6126.62T:skein512512
28.1628.1628.16T:blake32
30.4830.6430.64T:blake64
31.7732.0332.34T:k12
32.8032.8133.06blake256
35.1135.1135.14blake512
42.0942.3042.39sha384
42.5242.5342.77sha512
47.6747.7247.73sha224
47.8147.8847.89sha256
50.0550.0951.48sha3224
50.0950.0951.70sha3256
51.0051.0051.91sha3384
51.2551.6653.03shake128
52.0252.0552.12sha3512
51.2752.0953.23shake256
52.3852.3852.44T:jh256
52.4252.4252.42T:jh384
52.4452.4452.47T:jh512
52.4852.5052.61T:jh224
56.0256.3957.64T:keccakc1024
56.2857.0558.86T:keccakc768
56.7357.1158.55T:keccakc512
56.8957.4858.88T:keccakc448
56.8057.6959.98T:keccak
60.2360.3060.38T:round3jh256
60.3060.3460.34T:round3jh512
78.9178.9178.91T:skein10241024
92.0692.1192.17T:groestl256
94.0994.0994.23T:bblake256
146.64146.64146.64T:keccakc256treed2
147.22147.22147.22T:keccakc512treed2
175.69175.84175.94T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
83.6283.6283.62T:blake2s
127.38127.38127.38T:skein256256
138.12138.12138.88T:blake32
149.50149.50150.50T:blake2b
157.25157.62157.62blake256
210.12210.12211.25T:skein512256
211.12211.12211.50T:skein512512
213.00213.50213.62sha224
216.00216.38216.75sha256
247.12248.50248.50T:blake64
258.38260.00262.00T:k12
277.75277.75277.75blake512
337.00337.25338.00sha384
340.12340.62343.00sha512
398.62399.25400.75sha3256
399.25402.50403.38sha3224
406.50406.50406.50sha3512
406.88406.88412.25sha3384
407.88407.88408.62shake256
409.00409.00409.00shake128
420.88420.88421.50T:jh384
421.38421.38421.62T:jh256
421.38421.38422.00T:jh512
421.50421.75422.38T:jh224
444.25444.62456.62T:keccakc1024
441.88445.88449.25T:keccak
445.38447.25448.38T:keccakc768
449.12449.12454.38T:keccakc512
450.38454.12458.50T:keccakc448
471.38473.25475.62T:groestl256
485.62485.62491.00T:round3jh512
485.12490.00490.25T:round3jh256
630.75630.75630.75T:skein10241024
635.75636.00636.50T:bblake256
1171.751171.751171.75T:keccakc256treed2
1176.621176.621178.00T:keccakc512treed2
1402.001404.121404.12T:groestl512