VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: amd64; Core 2 45nm (1067a); 2009 Intel Core 2 Duo E7600; 2 x 3060MHz; wolfdale, supercop-20240716

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 4.81 4.83 4.85 T:blake2b 5.01 5.01 5.01 T:k12 5.89 5.89 5.90 T:blake2s 6.32 6.36 6.44 T:skein512512 6.32 6.37 6.43 T:skein512256 6.49 6.53 6.57 T:blake32 6.38 6.57 6.97 T:bblake256 7.03 7.11 7.14 T:blake64 7.16 7.24 7.32 T:keccakc256treed2 7.33 7.36 7.46 blake512 8.23 8.23 8.26 T:skein256256 8.43 8.46 8.47 blake256 9.15 9.36 9.72 T:keccakc512treed2 9.36 9.38 9.38 T:skein10241024 9.66 9.68 9.79 shake128 9.73 9.78 9.89 sha384 9.70 9.79 9.93 sha512 11.10 11.13 11.14 T:keccakc448 11.28 11.31 11.33 sha3224 11.85 11.88 11.90 T:keccakc512 12.05 12.06 12.10 shake256 12.06 12.11 12.14 sha3256 12.64 12.65 12.67 T:keccak 13.01 13.04 13.06 sha256 13.03 13.05 13.08 sha224 15.69 15.70 15.72 T:keccakc768 16.04 16.05 16.05 sha3384 16.73 16.96 17.37 T:jh512 16.93 16.96 17.07 T:jh384 16.92 16.96 17.00 T:jh256 16.94 16.97 17.03 T:jh224 19.98 20.03 20.16 T:round3jh512 19.95 20.07 20.14 T:round3jh256 21.84 21.84 21.86 T:keccakc1024 22.20 22.26 22.34 T:groestl256 22.28 22.30 22.36 sha3512 31.40 31.49 31.53 T:groestl512

Cycles/byte for 4096 bytes 25% 50% 75% hash 4.86 4.87 4.88 T:blake2b 5.28 5.29 5.29 T:k12 5.92 5.92 5.93 T:blake2s 6.51 6.53 6.55 T:skein512512 6.51 6.53 6.54 T:skein512256 6.68 6.69 6.69 T:blake32 7.22 7.23 7.42 T:bblake256 7.39 7.42 7.43 T:blake64 7.65 7.65 7.70 blake512 8.35 8.36 8.36 T:skein256256 8.51 8.52 8.56 T:keccakc256treed2 8.62 8.62 8.63 blake256 9.76 9.76 9.76 T:skein10241024 10.09 10.10 10.28 T:keccakc512treed2 10.14 10.14 10.19 shake128 10.16 10.17 10.22 sha384 10.17 10.18 10.24 sha512 11.60 11.60 11.61 T:keccakc448 11.73 11.73 11.73 sha3224 12.36 12.36 12.37 T:keccakc512 12.50 12.50 12.51 shake256 12.52 12.52 12.54 sha3256 13.12 13.12 13.13 T:keccak 13.34 13.35 13.35 sha256 13.35 13.35 13.36 sha224 15.78 15.78 15.79 T:keccakc768 16.07 16.07 16.07 sha3384 17.23 17.25 17.26 T:jh256 17.24 17.25 17.45 T:jh512 17.25 17.25 17.28 T:jh224 17.25 17.26 17.29 T:jh384 20.34 20.37 20.40 T:round3jh256 20.36 20.39 20.42 T:round3jh512 22.31 22.32 22.32 T:keccakc1024 22.72 22.73 22.75 sha3512 22.90 22.91 22.95 T:groestl256 33.46 33.49 33.51 T:groestl512

Cycles/byte for 1536 bytes 25% 50% 75% hash 4.93 4.94 4.94 T:blake2b 5.74 5.74 5.74 T:k12 5.97 5.97 5.97 T:blake2s 6.77 6.79 6.79 T:skein512256 6.77 6.79 6.79 T:skein512512 6.93 6.95 6.95 T:blake32 7.93 7.94 7.95 T:blake64 8.11 8.14 8.14 blake512 8.32 8.35 8.50 T:bblake256 8.54 8.54 8.55 T:skein256256 8.90 8.91 8.93 blake256 9.87 9.89 9.94 T:keccakc256treed2 10.39 10.39 10.40 T:skein10241024 10.81 10.82 10.86 sha384 10.81 10.87 10.89 sha512 10.87 10.89 10.89 shake128 11.35 11.35 11.56 T:keccakc512treed2 11.85 11.85 11.86 T:keccakc448 11.88 11.88 11.89 sha3224 12.89 12.90 12.90 T:keccakc512 12.94 12.94 12.97 shake256 12.94 12.94 12.98 sha3256 13.84 13.85 13.87 sha224 13.83 13.86 13.89 sha256 13.90 13.90 13.90 T:keccak 15.91 15.91 15.92 T:keccakc768 16.11 16.11 16.12 sha3384 17.72 17.72 17.72 T:jh256 17.72 17.74 17.74 T:jh224 17.72 17.74 17.94 T:jh512 17.71 17.74 17.77 T:jh384 20.88 20.89 20.94 T:round3jh256 20.97 20.97 20.97 T:round3jh512 23.10 23.10 23.11 T:keccakc1024 23.42 23.44 23.45 sha3512 23.99 24.01 24.02 T:groestl256 36.82 36.85 36.86 T:groestl512

Cycles/byte for 576 bytes 25% 50% 75% hash 5.66 5.66 5.67 T:blake2b 6.09 6.09 6.10 T:blake2s 6.41 6.42 6.48 T:k12 7.43 7.44 7.45 T:skein512256 7.44 7.45 7.46 T:skein512512 7.63 7.66 7.68 T:blake32 8.38 8.42 8.44 T:blake64 8.58 8.61 8.64 blake512 9.07 9.07 9.07 T:skein256256 9.66 9.69 9.70 blake256 11.51 11.51 11.63 sha384 11.55 11.55 11.63 sha512 11.55 11.61 11.72 T:bblake256 11.71 11.71 11.72 shake128 13.17 13.18 13.21 T:skein10241024 13.46 13.48 13.64 T:keccakc256treed2 14.40 14.41 14.42 sha3224 14.42 14.42 14.43 sha3256 14.46 14.47 14.49 shake256 14.55 14.56 14.56 T:keccak 14.64 14.65 14.73 T:keccakc448 14.67 14.67 14.68 T:keccakc512 15.13 15.17 15.21 sha256 15.13 15.17 15.20 sha224 17.26 17.27 17.28 T:keccakc768 17.29 17.29 17.29 sha3384 17.71 17.71 17.92 T:keccakc512treed2 18.99 18.99 19.05 T:jh384 18.99 19.00 19.27 T:jh512 18.99 19.00 19.00 T:jh224 19.03 19.04 19.06 T:jh256 22.35 22.41 22.42 T:round3jh256 22.43 22.43 22.43 T:round3jh512 25.55 25.56 25.56 T:keccakc1024 25.60 25.61 25.64 sha3512 27.02 27.03 27.15 T:groestl256 42.22 42.22 42.27 T:groestl512

Cycles/byte for 64 bytes 25% 50% 75% hash 6.98 7.02 7.08 T:blake2s 12.23 12.23 12.23 T:blake2b 15.36 15.36 15.36 T:skein512256 15.42 15.42 15.42 T:skein512512 15.52 15.53 15.58 T:skein256256 16.62 16.72 17.08 T:blake32 17.80 17.81 17.83 T:blake64 18.05 18.09 18.09 T:k12 19.42 19.59 19.78 blake256 19.55 19.77 19.78 blake512 24.64 24.69 24.98 sha384 24.86 24.97 25.23 sha512 26.70 26.70 26.73 sha3256 26.73 26.73 26.73 sha3224 26.80 26.80 26.80 sha3512 27.05 27.05 27.06 sha3384 27.25 27.25 27.28 shake256 27.34 27.34 27.50 shake128 29.31 29.33 29.48 T:keccakc768 29.27 29.34 29.52 T:keccakc1024 29.44 29.52 29.52 T:keccak 30.06 30.11 30.16 T:keccakc512 29.94 30.19 30.27 T:keccakc448 32.02 32.17 32.17 sha256 31.97 32.25 32.28 sha224 35.27 35.28 35.33 T:jh256 35.55 35.64 35.70 T:jh224 35.38 35.66 35.66 T:jh384 35.72 35.77 35.89 T:jh512 41.33 41.33 41.33 T:round3jh512 41.27 41.36 41.67 T:round3jh256 42.06 42.09 42.09 T:skein10241024 51.33 51.48 51.92 T:bblake256 65.14 65.33 65.33 T:groestl256 82.41 82.80 83.44 T:keccakc256treed2 84.42 84.42 85.50 T:keccakc512treed2 126.95 126.98 127.16 T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 57.25 57.88 57.88 T:blake2s 79.75 81.00 81.75 T:blake32 88.25 88.62 89.00 blake256 88.75 89.00 89.00 T:skein256256 98.75 98.75 98.75 T:blake2b 122.12 122.12 122.12 T:skein512256 122.62 122.62 122.62 T:skein512512 143.50 143.50 143.50 T:k12 147.88 148.00 149.38 sha256 146.62 149.00 150.62 sha224 148.25 149.62 149.88 T:blake64 150.12 151.88 151.88 blake512 197.50 198.88 199.88 sha384 201.38 202.62 203.25 sha512 212.00 212.00 213.50 sha3224 212.38 212.38 214.12 sha3512 212.88 212.88 215.12 sha3256 214.00 214.00 214.75 sha3384 217.12 217.38 217.75 shake256 217.50 218.00 218.75 shake128 234.25 234.25 236.00 T:keccakc1024 235.88 236.25 238.12 T:keccakc768 237.00 237.25 238.75 T:keccak 238.62 240.00 240.88 T:keccakc448 240.25 240.38 240.50 T:keccakc512 283.75 283.75 283.75 T:jh224 283.50 285.00 285.00 T:jh384 282.12 285.38 290.62 T:jh512 284.38 285.50 286.38 T:jh256 333.88 333.88 338.12 T:round3jh256 333.00 334.62 334.62 T:round3jh512 335.25 335.25 335.88 T:skein10241024 341.00 344.12 345.25 T:bblake256 343.38 344.25 345.50 T:groestl256 659.88 661.00 668.12 T:keccakc256treed2 671.25 671.25 680.12 T:keccakc512treed2 1015.25 1015.38 1017.38 T:groestl512