VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 4 (a70f41); 2023 AMD Ryzen 5 7640HS; 6 x 4300MHz; phoenix, supercop-20260217

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
2.012.032.05sha224
1.06?2.23?4.23?T:keccakc256treed2
2.842.872.88T:k12
2.932.962.99T:keccakc512treed2
3.463.473.48T:blake2b
4.104.174.22sha512
4.164.244.31sha384
4.554.564.58T:skein512512
4.584.584.62T:skein512256
4.554.614.64T:blake64
4.934.974.99T:bblake256
5.045.065.09blake512
5.385.405.43shake128
5.525.545.56T:blake2s
5.645.665.67T:skein256256
5.635.675.68T:groestl256
5.986.026.07T:skein10241024
6.126.146.17T:groestl512
6.286.316.36sha3224
6.296.346.37T:keccakc448
6.476.506.54T:blake32
6.636.656.66T:keccakc512
6.656.736.82sha3256
6.636.786.91shake256
7.137.157.17T:keccak
7.797.817.85blake256
8.898.918.95sha3384
8.948.969.04T:keccakc768
9.219.289.37T:jh256
9.209.299.39T:jh512
9.209.299.38T:jh224
9.189.309.39T:jh384
10.5510.7511.05T:round3jh256
10.6110.8311.04T:round3jh512
12.2912.4612.63sha3512
12.5112.5312.62T:keccakc1024
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
2.272.282.28sha224
2.63?2.64?3.63?T:keccakc256treed2
3.013.023.02T:k12
3.183.193.20T:keccakc512treed2
3.483.493.49T:blake2b
4.544.564.58sha512
4.594.614.62sha384
4.674.684.68T:skein512512
4.684.684.69T:skein512256
4.784.794.81T:blake64
5.235.245.25blake512
5.525.535.54T:blake2s
5.575.575.58T:bblake256
5.635.635.64shake128
5.745.745.74T:skein256256
5.885.895.89T:groestl256
6.256.266.28T:skein10241024
6.526.536.56sha3224
6.576.586.59T:keccakc448
6.626.636.64T:blake32
6.706.706.71T:groestl512
6.906.906.91T:keccakc512
6.976.977.01sha3256
6.987.007.05shake256
7.417.427.42T:keccak
7.937.947.95blake256
8.938.938.95sha3384
8.978.989.01T:keccakc768
9.429.439.46T:jh256
9.409.449.46T:jh384
9.419.449.47T:jh512
9.419.449.47T:jh224
10.9110.9611.05T:round3jh256
10.9411.0011.06T:round3jh512
12.6712.7312.76sha3512
12.7512.7612.80T:keccakc1024
Cycles/byte for 1536 bytes
25%50%75%hash
2.112.112.11sha256
2.692.692.70sha224
3.05?3.07?4.25?T:keccakc256treed2
3.283.283.28T:k12
3.513.513.51T:blake2b
3.553.563.57T:keccakc512treed2
4.844.844.85T:skein512256
4.854.864.88T:skein512512
5.095.105.18T:blake64
5.185.215.23sha512
5.225.245.29sha384
5.505.515.52T:blake2s
5.515.525.54blake512
5.875.895.89T:skein256256
6.016.016.03shake128
6.246.256.27T:groestl256
6.576.596.60T:bblake256
6.626.646.65sha3224
6.636.676.70T:skein10241024
6.706.716.74T:keccakc448
6.836.846.86T:blake32
7.187.197.19T:keccakc512
7.207.217.41sha3256
7.217.237.40shake256
7.637.647.65T:groestl512
7.847.857.86T:keccak
8.148.158.16blake256
8.948.978.99sha3384
9.029.039.05T:keccakc768
9.649.689.72T:jh256
9.659.699.76T:jh384
9.659.709.75T:jh512
9.669.729.77T:jh224
11.1411.2511.39T:round3jh256
11.1811.3011.41T:round3jh512
13.1613.1813.20T:keccakc1024
13.0513.2213.26sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.252.262.26sha256
3.633.633.64T:k12
3.783.803.83sha224
3.994.004.02T:blake2b
4.21?4.22?5.92?T:keccakc256treed2
5.295.305.30T:skein512256
5.345.345.35T:skein512512
5.335.365.41T:blake64
5.465.485.50T:blake2s
5.505.535.56T:keccakc512treed2
5.665.685.71blake512
6.216.276.28T:skein256256
6.466.466.49shake128
6.436.466.50sha512
6.506.596.64sha384
7.197.227.26T:groestl256
7.397.427.44T:blake32
8.038.048.07sha3224
8.058.058.13sha3256
8.048.068.19shake256
8.138.158.18T:keccakc512
8.178.228.23T:keccak
8.228.278.33T:keccakc448
8.308.438.46T:skein10241024
8.678.688.70blake256
9.609.619.61sha3384
9.629.649.65T:bblake256
9.789.809.82T:keccakc768
10.0110.0510.10T:groestl512
10.2910.3510.42T:jh224
10.3210.3810.45T:jh384
10.3210.3810.43T:jh256
10.3110.3810.46T:jh512
11.9012.0212.14T:round3jh256
11.9012.0412.17T:round3jh512
14.4614.4914.53T:keccakc1024
14.2814.6114.82sha3512
Cycles/byte for 64 bytes
25%50%75%hash
4.154.174.21sha256
4.945.005.04T:blake2s
7.957.958.00T:blake2b
9.729.809.99T:k12
10.4510.5010.57T:skein256256
10.7010.7210.87T:skein512256
10.8210.8411.17T:blake64
10.9311.0411.37blake512
11.1911.2811.28T:skein512512
14.6714.7414.83T:blake32
15.12?15.15?17.58?shake128
15.1115.1516.02sha3224
15.1515.2016.04sha3384
15.18?15.54?18.26?sha3256
15.6115.6815.77blake256
15.8915.9816.57T:keccakc512
15.9416.0316.30T:keccak
16.0116.1016.50T:keccakc1024
16.1116.2216.52T:keccakc448
16.2216.3616.52T:keccakc768
16.25?17.81?19.23?shake256
17.9218.0518.28sha224
15.80?18.24?19.01?sha3512
18.9619.2019.57T:jh224
19.0219.2319.49T:jh256
18.9919.2619.60T:jh384
19.1219.2919.51T:jh512
19.6619.7219.86T:groestl256
21.6422.0322.33T:round3jh256
22.1322.2822.51T:round3jh512
24.5124.7225.09sha512
24.9825.4525.95sha384
25.4125.5925.86T:keccakc512treed2
25.9326.2027.57T:skein10241024
25.61?26.34?35.93?T:keccakc256treed2
41.2341.5541.70T:groestl512
43.6543.7543.84T:bblake256
Cycles/byte for 8 bytes
25%50%75%hash
25.4425.7625.95sha256
48.0648.5148.99T:blake2s
59.8860.0660.68T:skein256256
62.7562.7562.75T:blake2b
68.2268.5969.68T:blake32
71.3671.8472.02blake256
77.4177.7578.97T:k12
85.1885.3885.38T:skein512256
88.0988.2989.54T:blake64
88.5389.4491.95blake512
91.5091.7892.25T:skein512512
113.46114.27116.30T:groestl256
119.26119.39126.51sha3384
119.50119.60126.29sha3512
120.18120.57126.72shake128
120.32120.59126.90sha3224
119.80?122.80?144.91?sha3256
126.40126.90129.84T:keccakc512
127.32127.55128.01T:keccakc1024
127.47128.33132.18T:keccak
127.60128.53132.01T:keccakc768
128.68129.69132.06T:keccakc448
130.52132.08133.55sha224
123.16?136.64?153.03?shake256
154.83156.08156.81T:jh384
154.48157.59158.81T:jh512
155.61159.09161.48T:jh256
156.24160.56162.58T:jh224
178.27179.86182.89T:round3jh256
177.79181.05183.24T:round3jh512
195.97198.05200.84sha512
203.32204.46208.83T:keccakc512treed2
200.28205.47208.89sha384
207.84207.97215.21T:skein10241024
203.82?208.81?286.78?T:keccakc256treed2
284.56285.43287.00T:bblake256
285.43286.29287.36T:groestl512