VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 2 (860f01); 2022 AMD Ryzen 5 4500U; 6 x 3600MHz; renoir, supercop-20251222

[Page version: 20260221 06:45:05]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.012.022.02sha256
2.002.022.04sha224
3.253.273.28T:blake2b
3.363.393.44T:k12
4.604.624.67sha384
4.694.724.74sha512
4.914.934.95T:bblake256
4.954.964.99T:skein512256
5.005.045.08T:skein512512
5.285.285.29T:blake64
5.355.365.36T:blake2s
5.385.395.41T:keccakc256treed2
5.615.635.67blake512
5.965.965.98T:skein10241024
6.096.146.21shake128
6.546.566.61T:blake32
6.536.616.65T:skein256256
6.986.997.02T:groestl256
7.037.067.11T:keccakc448
7.147.157.15T:keccakc512treed2
7.147.197.25sha3224
7.557.587.64T:keccakc512
7.597.607.60blake256
7.647.687.75shake256
7.637.707.74sha3256
8.068.078.07T:keccak
9.919.949.98T:groestl512
10.1610.2110.22sha3384
10.2210.2810.33T:keccakc768
11.2311.2611.28T:jh224
11.2211.2611.29T:jh384
11.2411.2711.30T:jh256
11.2311.3111.38T:jh512
13.0713.0813.12T:round3jh512
13.0613.1013.12T:round3jh256
14.0114.0514.12T:keccakc1024
14.1614.1814.22sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
2.062.062.06sha256
2.552.562.56sha224
3.273.273.28T:blake2b
3.583.593.61T:k12
4.894.904.91sha512
5.065.075.08T:skein512256
5.135.145.16T:skein512512
5.355.355.35T:blake2s
5.425.425.44sha384
5.545.555.55T:bblake256
5.595.605.60T:blake64
5.825.825.83blake512
6.216.216.22T:skein10241024
6.326.336.33T:keccakc256treed2
6.436.446.47shake128
6.686.716.72T:skein256256
6.736.746.75T:blake32
7.377.377.37T:groestl256
7.387.387.40T:keccakc448
7.457.477.49sha3224
7.647.647.64T:keccakc512treed2
7.737.737.73blake256
7.917.917.93T:keccakc512
7.957.957.98shake256
7.947.967.98sha3256
8.418.418.42T:keccak
10.2210.2310.23sha3384
10.2910.3010.32T:keccakc768
10.5010.5210.53T:groestl512
11.4511.4611.47T:jh224
11.4611.4611.47T:jh384
11.4611.4711.48T:jh256
11.4611.5011.52T:jh512
13.3013.3113.31T:round3jh512
13.3013.3113.32T:round3jh256
14.4114.4314.46T:keccakc1024
14.4914.5014.51sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
2.132.132.13sha256
3.273.283.29T:blake2b
3.443.443.45sha224
3.893.913.95T:k12
5.195.205.22sha512
5.235.245.25T:skein512256
5.295.305.32T:skein512512
5.355.355.35T:blake2s
6.016.016.01T:blake64
6.146.146.15blake512
6.586.586.59T:bblake256
6.636.646.64T:skein10241024
6.706.706.72sha384
6.846.846.89T:skein256256
6.936.936.99shake128
7.007.057.05T:blake32
7.287.287.29T:keccakc256treed2
7.577.607.64sha3224
7.597.607.61T:keccakc448
7.937.937.97T:groestl256
7.957.957.96blake256
8.238.238.28sha3256
8.248.248.28shake256
8.308.308.31T:keccakc512
8.458.468.46T:keccakc512treed2
8.978.988.98T:keccak
10.2610.2910.30sha3384
10.3310.3310.33T:keccakc768
11.4511.4711.48T:groestl512
11.7811.7811.81T:jh224
11.7711.7811.79T:jh384
11.7811.7911.82T:jh256
11.8011.8111.82T:jh512
13.6313.6413.68T:round3jh256
13.6413.6613.68T:round3jh512
15.0215.0215.02T:keccakc1024
15.0315.0415.08sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.312.322.32sha256
3.683.693.71T:blake2b
4.314.324.46T:k12
5.345.345.34T:blake2s
5.395.395.45sha512
5.695.695.70T:skein512256
5.785.795.79T:skein512512
5.825.835.85sha224
6.406.416.46blake512
6.576.606.76T:blake64
7.237.247.30T:skein256256
7.387.407.49shake128
7.687.687.70T:blake32
8.388.398.41T:skein10241024
8.548.548.55blake256
9.179.179.40shake256
9.159.189.18sha3256
9.189.189.26sha3224
9.429.449.44T:groestl256
9.479.489.55T:keccakc448
9.519.539.61sha384
9.539.539.54T:bblake256
9.589.609.62T:keccak
9.489.649.69T:keccakc512
9.849.859.87T:keccakc256treed2
10.9510.9811.08sha3384
11.1511.1811.18T:keccakc768
12.5912.5912.62T:jh224
12.6112.6312.67T:jh512
12.6512.6512.70T:jh256
12.6412.6712.68T:jh384
13.0013.0113.03T:keccakc512treed2
13.2813.3013.31T:groestl512
14.5514.5814.62T:round3jh512
14.5414.5914.62T:round3jh256
16.4416.4516.48sha3512
16.7716.7716.80T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
4.674.724.80sha256
5.225.235.25T:blake2s
6.946.957.06T:blake2b
10.7210.7310.89sha512
11.0611.1611.27T:skein512256
11.4811.4811.59T:skein512512
12.3912.4112.47T:k12
12.4412.6112.75T:skein256256
12.7512.7712.83blake512
14.7014.8614.88T:blake64
16.1216.1416.39blake256
16.3816.4216.44T:blake32
16.9816.9817.34sha3256
17.0617.0617.16sha3384
17.0617.0817.08sha3224
17.1717.1717.19shake128
17.1917.1917.58shake256
17.6917.7317.80sha3512
17.7517.8018.00T:keccakc768
19.1719.1719.78T:keccak
19.5019.7819.84T:keccakc448
19.4819.8019.81T:keccakc1024
20.4520.5320.62T:keccakc512
23.4823.5823.72T:jh256
23.5223.6423.80T:jh384
23.6123.6723.72T:jh512
23.5323.7523.81T:jh224
26.7026.9827.09T:round3jh256
26.9227.1627.23T:round3jh512
27.2027.2027.23T:skein10241024
27.8927.8927.89T:groestl256
36.5936.6736.92sha224
39.5339.5639.72T:groestl512
44.5044.5644.59T:bblake256
46.9246.9446.98sha384
59.7259.8860.03T:keccakc512treed2
59.8859.9159.92T:keccakc256treed2
Cycles/byte for 8 bytes
25%50%75%hash
27.1227.6228.62sha256
47.7547.7547.88T:blake2s
56.8857.2557.62T:blake2b
72.7573.3875.62blake256
77.0077.1277.12T:skein256256
85.1285.8885.88T:blake32
86.5086.6287.38sha512
88.7588.7592.38T:skein512256
92.5092.7595.25T:skein512512
98.6299.0099.12T:k12
103.38103.50103.62blake512
116.38116.38119.50T:blake64
135.25135.25135.25sha3256
135.38135.38135.38sha3384
135.62135.62135.62sha3224
136.00136.00136.88sha3512
136.62136.62136.75shake256
136.50136.75136.75shake128
143.75143.88148.12T:keccakc768
156.75157.88157.88T:keccakc448
153.12158.50159.62T:keccak
155.50158.50158.88T:keccakc1024
162.00162.00162.00T:groestl256
163.25163.88165.25T:keccakc512
187.25188.25189.50T:jh256
188.25189.38191.00T:jh224
189.38190.75191.75T:jh384
188.12191.25192.25T:jh512
217.25218.75219.38T:round3jh256
218.75219.12219.25T:skein10241024
218.88219.75220.62T:round3jh512
284.38285.88286.38sha224
287.50288.50288.88T:groestl512
296.50298.00301.75T:bblake256
372.25375.12376.25sha384
477.75479.12480.00T:keccakc256treed2
478.00479.12480.38T:keccakc512treed2