VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Bulldozer (600f20); 2012 AMD FX-8350; 4 x 4000MHz; saber214, supercop-20240625

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 4.59 4.59 4.60 T:keccakc256treed2 5.01 5.01 5.01 T:blake2b 5.65 5.69 5.78 T:bblake512 5.96 6.00 6.01 T:k12 6.10 6.11 6.12 T:keccakc512treed2 6.71 6.72 6.72 blake512 6.96 7.01 7.06 sha512 6.93 7.02 7.42 sha384 7.01 7.03 7.07 T:bblake256 8.02 8.02 8.02 T:blake2s 8.32 8.34 8.35 T:skein512256 8.37 8.47 8.50 T:blake64 8.46 8.50 8.50 T:skein512512 8.71 9.12 9.34 T:skein256256 9.00 9.28 9.82 T:blake32 10.91 11.10 11.22 shake256 11.34 11.35 11.36 shake128 11.33 11.38 11.39 blake256 11.38 11.43 11.57 sha224 11.36 11.47 11.49 sha256 11.65 11.68 11.69 T:skein10241024 11.92 12.03 12.12 T:groestl256 12.90 12.90 12.93 T:keccakc448 13.09 13.11 13.15 sha3224 13.91 13.96 14.00 T:keccakc512 14.06 14.09 14.12 sha3256 14.62 14.86 15.09 T:keccak 16.37 16.39 16.45 T:jh384 16.37 16.39 16.45 T:jh224 16.32 16.40 16.44 T:jh256 16.37 16.40 16.46 T:jh512 17.35 17.51 17.56 T:groestl512 18.75 18.78 18.87 T:keccakc768 18.78 18.80 18.83 sha3384 18.97 18.98 18.99 T:round3jh512 18.97 18.99 19.00 T:round3jh256 25.77 25.87 25.87 T:keccakc1024 26.17 26.20 26.22 sha3512

Cycles/byte for 4096 bytes 25% 50% 75% hash 5.03 5.03 5.03 T:blake2b 5.48 5.48 5.48 T:keccakc256treed2 6.35 6.36 6.36 T:k12 6.60 6.61 6.61 T:keccakc512treed2 6.85 6.86 6.90 T:bblake512 7.00 7.00 7.00 blake512 7.95 7.96 7.97 T:bblake256 8.03 8.03 8.05 sha512 8.03 8.03 8.03 T:blake2s 8.07 8.07 8.26 sha384 8.55 8.55 8.56 T:skein512256 8.67 8.69 8.69 T:skein512512 8.79 8.81 8.81 T:blake64 9.05 9.16 9.26 T:skein256256 9.50 9.50 9.77 T:blake32 11.44 11.52 11.53 shake256 11.58 11.59 11.60 blake256 11.86 11.86 11.86 shake128 12.15 12.16 12.16 T:skein10241024 12.41 12.41 12.46 sha224 12.44 12.45 12.46 sha256 12.48 12.53 12.55 T:groestl256 13.46 13.46 13.46 T:keccakc448 13.65 13.65 13.66 sha3224 14.52 14.53 14.55 T:keccakc512 14.60 14.61 14.62 sha3256 15.33 15.38 15.47 T:keccak 16.66 16.68 16.70 T:jh256 16.68 16.68 16.71 T:jh224 16.69 16.69 16.72 T:jh384 16.69 16.70 16.72 T:jh512 18.41 18.47 18.50 T:groestl512 18.81 18.82 18.83 sha3384 18.86 18.87 18.88 T:keccakc768 19.34 19.34 19.34 T:round3jh512 19.34 19.34 19.34 T:round3jh256 26.41 26.44 26.44 T:keccakc1024 26.70 26.71 26.71 sha3512

Cycles/byte for 1536 bytes 25% 50% 75% hash 5.05 5.06 5.07 T:blake2b 6.46 6.46 6.47 T:keccakc256treed2 6.97 6.97 6.97 T:k12 7.43 7.44 7.45 T:keccakc512treed2 7.46 7.46 7.46 blake512 8.06 8.06 8.06 T:blake2s 8.80 8.81 8.84 T:bblake512 8.92 8.92 8.93 T:skein512256 9.03 9.05 9.06 T:skein512512 9.27 9.30 9.56 T:skein256256 9.38 9.43 9.48 T:blake64 9.48 9.51 9.52 T:bblake256 9.68 9.69 9.73 sha512 9.74 9.77 9.86 sha384 9.87 9.87 10.16 T:blake32 11.95 11.95 11.99 blake256 11.91 12.01 12.03 shake256 12.68 12.69 12.69 shake128 12.95 12.95 12.97 T:skein10241024 13.31 13.32 13.37 T:groestl256 13.70 13.70 13.73 T:keccakc448 13.90 13.91 13.92 sha3224 13.88 13.92 13.96 sha224 14.04 14.09 14.11 sha256 15.12 15.13 15.18 sha3256 15.16 15.20 15.21 T:keccakc512 16.25 16.26 16.43 T:keccak 17.16 17.16 17.21 T:jh256 17.18 17.18 17.23 T:jh512 17.18 17.19 17.21 T:jh224 17.20 17.20 17.23 T:jh384 18.85 18.87 18.89 sha3384 18.95 18.96 19.00 T:keccakc768 19.91 19.92 19.93 T:round3jh256 19.92 19.92 19.94 T:round3jh512 20.08 20.08 20.09 T:groestl512 27.39 27.43 27.43 T:keccakc1024 27.55 27.55 27.57 sha3512

Cycles/byte for 576 bytes 25% 50% 75% hash 5.81 5.81 5.83 T:blake2b 7.94 7.97 7.98 T:k12 7.98 7.98 7.99 blake512 8.09 8.09 8.10 T:blake2s 9.09 9.09 9.10 T:keccakc256treed2 9.84 9.85 9.89 T:skein512256 9.82 9.87 9.88 T:skein512512 9.85 9.91 9.93 T:skein256256 10.03 10.05 10.15 T:blake64 10.84 10.85 11.00 T:blake32 11.65 11.65 11.65 T:keccakc512treed2 12.94 13.01 13.07 blake256 13.11 13.14 13.18 sha512 13.17 13.26 13.27 sha384 13.44 13.45 13.45 T:bblake512 13.46 13.46 13.49 shake256 13.64 13.65 13.69 shake128 14.06 14.09 14.24 T:bblake256 15.49 15.53 15.57 T:groestl256 16.41 16.44 16.49 T:skein10241024 16.90 16.91 16.97 T:keccakc448 16.90 16.94 16.99 sha3224 16.96 16.99 17.03 sha3256 16.97 17.01 17.06 T:keccak 17.21 17.24 17.25 T:keccakc512 17.80 17.87 18.01 sha224 17.97 18.12 18.19 sha256 18.47 18.50 18.55 T:jh256 18.49 18.50 18.61 T:jh512 18.49 18.54 18.56 T:jh224 18.59 18.60 18.62 T:jh384 20.27 20.28 20.29 sha3384 20.41 20.43 20.51 T:keccakc768 21.47 21.47 21.51 T:round3jh256 21.48 21.48 21.48 T:round3jh512 22.93 22.94 22.98 T:groestl512 30.23 30.25 30.26 sha3512 30.39 30.47 30.49 T:keccakc1024

Cycles/byte for 64 bytes 25% 50% 75% hash 8.64 8.66 8.70 T:blake2s 12.11 12.16 12.25 T:blake2b 18.09 18.09 18.56 T:skein256256 18.19 18.20 18.25 blake512 20.44 20.45 20.80 T:skein512512 21.66 21.67 21.89 T:skein512256 23.06 23.16 23.70 T:blake64 23.95 23.97 24.05 T:k12 23.34 24.33 24.97 T:blake32 26.19 26.36 26.47 shake256 25.73 26.58 27.06 blake256 31.73 31.83 31.86 sha3384 32.00 32.06 32.52 shake128 31.69 32.09 32.48 sha3256 32.08 32.09 32.64 sha3512 32.22 32.23 32.23 sha3224 33.25 33.38 33.70 T:keccakc768 33.42 33.44 33.44 T:keccakc448 33.69 33.69 33.69 T:keccak 35.08 35.12 35.97 T:jh256 35.14 35.16 35.17 T:jh224 35.17 35.22 36.08 T:jh512 35.20 35.23 35.30 T:jh384 35.38 35.55 35.78 T:keccakc512 37.22 37.69 37.94 T:keccakc1024 41.03 41.05 41.47 T:round3jh256 41.08 41.08 41.12 T:round3jh512 43.58 43.59 43.73 T:groestl256 52.91 53.17 53.23 T:skein10241024 55.92 56.12 56.34 T:keccakc512treed2 57.06 57.06 57.44 T:keccakc256treed2 61.20 61.47 61.77 sha512 60.75 61.91 62.06 sha384 65.80 65.91 66.17 T:groestl512 68.23 68.50 69.27 sha224 69.58 70.52 71.75 sha256 69.94 71.58 71.73 T:bblake256 75.53 75.61 75.78 T:bblake512

Cycles/byte for 8 bytes 25% 50% 75% hash 76.50 76.50 76.88 T:blake2s 98.12 98.12 103.50 T:skein256256 100.50 101.12 102.88 T:blake2b 119.75 119.88 125.12 T:blake32 122.38 122.50 123.25 blake256 144.62 145.38 148.50 blake512 159.00 162.88 163.00 T:skein512512 172.38 172.62 174.88 T:skein512256 184.38 185.88 186.88 T:blake64 188.00 188.88 189.00 T:k12 209.75 210.25 210.50 shake256 252.25 252.50 253.25 sha3384 252.00 253.00 254.75 sha3256 255.50 255.88 256.12 T:groestl256 256.00 256.00 257.25 sha3512 256.25 256.38 256.38 sha3224 255.25 256.75 257.62 shake128 263.75 263.88 268.38 T:keccakc448 268.12 268.25 270.00 T:keccakc768 269.62 269.62 269.62 T:keccak 281.00 281.12 281.88 T:jh224 281.88 282.50 288.50 T:jh512 282.00 282.50 285.50 T:jh256 283.00 283.88 285.25 T:jh384 286.38 287.88 288.75 T:keccakc512 298.12 298.25 300.62 T:keccakc1024 336.88 337.12 339.50 T:round3jh256 337.25 337.38 340.50 T:round3jh512 423.12 423.38 426.38 T:skein10241024 447.12 447.25 447.25 T:keccakc512treed2 455.00 455.00 455.00 T:keccakc256treed2 460.75 461.88 465.50 sha224 467.00 468.12 477.75 T:bblake256 464.12 470.62 471.25 sha256 486.38 491.00 493.62 sha384 491.75 492.88 494.25 sha512 501.00 501.62 503.25 T:groestl512 603.50 606.62 610.50 T:bblake512