VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20250415

[Page version: 20250609 20:22:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.014.034.06sha256
4.084.104.12sha224
5.635.645.66T:blake2s
6.176.206.23T:blake2b
6.386.406.41T:k12
7.197.217.23T:blake32
7.427.457.51T:bblake256
8.318.328.34T:skein512512
8.318.338.34T:skein512256
8.398.418.42blake256
8.568.578.60T:keccakc256treed2
9.069.089.09T:blake64
9.339.349.35T:skein256256
9.529.579.66blake512
11.5111.5411.57T:keccakc512treed2
11.8311.8411.86sha512
11.8211.8611.90sha384
12.5012.5112.54shake128
12.6212.6312.65T:skein10241024
14.0414.0614.08T:keccakc448
14.5614.5814.60sha3224
14.8515.0415.43T:groestl256
15.1015.1215.14T:keccakc512
15.4515.4715.65shake256
15.6915.7115.72sha3256
16.0316.0616.10T:keccak
19.9620.0020.01T:keccakc768
20.3420.3720.43T:jh224
20.4020.4120.42T:jh256
20.4120.4220.43T:jh512
20.4220.4220.43T:jh384
20.7220.7420.75sha3384
21.6921.7221.80T:groestl512
23.0323.0323.04T:round3jh256
23.0423.0423.04T:round3jh512
28.4628.4828.50T:keccakc1024
28.7128.7328.82sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
4.104.114.12sha256
4.234.234.24sha224
5.655.655.65T:blake2s
6.206.216.22T:blake2b
6.746.746.75T:k12
7.397.407.40T:blake32
8.118.118.13T:bblake256
8.488.498.49T:skein512256
8.558.568.56T:skein512512
8.598.598.59blake256
9.419.429.42T:blake64
9.469.469.46T:skein256256
9.929.929.96blake512
10.1310.1310.14T:keccakc256treed2
12.3112.3212.32sha512
12.3112.3312.34sha384
12.3812.3912.39T:keccakc512treed2
13.0613.0613.07shake128
13.1113.1113.11T:skein10241024
14.6914.6914.69T:keccakc448
15.1015.1015.11sha3224
15.7215.7315.73T:keccakc512
15.8515.8516.04T:groestl256
16.0816.0816.17shake256
16.1616.1716.17sha3256
16.6716.6816.69T:keccak
20.1120.1120.12T:keccakc768
20.7120.7120.74T:jh224
20.7420.7420.75sha3384
20.7420.7420.75T:jh256
20.7620.7620.76T:jh512
20.7620.7620.76T:jh384
23.2323.2323.26T:groestl512
23.4023.4023.40T:round3jh256
23.4023.4023.41T:round3jh512
29.0529.0529.06T:keccakc1024
29.3729.3729.38sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
4.234.234.24sha256
4.424.434.45sha224
5.655.655.66T:blake2s
6.206.206.22T:blake2b
7.317.327.33T:k12
7.707.717.72T:blake32
8.758.768.77T:skein512256
8.888.898.90blake256
8.938.958.96T:skein512512
9.199.209.22T:bblake256
9.659.669.67T:skein256256
9.979.989.99T:blake64
10.5010.5310.55blake512
11.7611.7711.79T:keccakc256treed2
13.0913.1013.12sha384
13.0913.1013.12sha512
13.7713.7913.81T:keccakc512treed2
13.8913.9013.92T:skein10241024
13.9413.9613.97shake128
15.0415.0515.07T:keccakc448
15.2915.3015.32sha3224
16.4016.4116.42T:keccakc512
16.6116.6316.64shake256
16.6916.7016.72sha3256
17.1917.2117.38T:groestl256
17.6817.7017.73T:keccak
20.2920.3020.33T:keccakc768
20.7720.7920.80sha3384
21.2721.2821.30T:jh224
21.3021.3021.32T:jh256
21.3121.3221.33T:jh512
21.3221.3321.33T:jh384
24.0124.0224.03T:round3jh256
24.0124.0324.03T:round3jh512
25.7125.7425.76T:groestl512
29.9930.0030.01T:keccakc1024
30.3830.3930.39sha3512
Cycles/byte for 576 bytes
25%50%75%hash
4.584.584.59sha256
4.954.954.96sha224
5.665.675.68T:blake2s
6.946.956.98T:blake2b
8.118.128.14T:k12
8.508.518.54T:blake32
9.489.509.51T:skein512256
9.639.659.68blake256
9.979.9910.00T:skein512512
10.1210.1410.15T:skein256256
10.4910.5110.52T:blake64
11.0111.0311.05blake512
12.1412.1612.20T:bblake256
13.8913.9113.91sha384
13.9113.9313.94sha512
14.9214.9414.95shake128
16.1316.1516.17T:keccakc256treed2
17.5517.6517.68T:skein10241024
18.5018.5318.56sha3224
18.5018.5318.57sha3256
18.5218.5618.62shake256
18.5818.6018.62T:keccakc448
18.6318.6518.67T:keccak
18.6918.7118.73T:keccakc512
20.8020.8521.01T:groestl256
21.4121.4721.50T:keccakc512treed2
22.1122.1422.17T:keccakc768
22.1622.1922.22sha3384
22.7722.8022.82T:jh224
22.7822.8122.83T:jh256
22.8022.8222.85T:jh512
22.8022.8322.85T:jh384
25.6425.6725.69T:round3jh256
25.6425.6725.69T:round3jh512
29.9029.9429.96T:groestl512
32.9132.9532.98T:keccakc1024
33.0033.0633.10sha3512
Cycles/byte for 64 bytes
25%50%75%hash
5.755.755.78T:blake2s
9.129.129.16sha256
11.6911.6911.72sha224
12.8812.8812.91T:blake2b
16.4116.6916.91T:skein256256
18.4418.4718.69T:skein512256
18.8818.9118.94T:blake32
19.5319.5619.56blake256
21.1221.1621.75T:blake64
21.6621.6921.75T:k12
22.4722.6922.75blake512
22.8822.8822.94T:skein512512
29.8129.8129.84sha384
30.1230.1630.19sha512
33.8133.8834.06sha3224
33.8433.9134.00sha3256
33.9133.9734.09sha3512
33.9434.0034.09sha3384
34.1234.1934.38shake256
34.1634.2234.31shake128
36.1636.2236.28T:keccakc1024
38.7238.7838.81T:keccak
38.8438.9138.97T:keccakc768
38.8838.9438.97T:keccakc448
39.1239.1939.22T:keccakc512
41.3141.3441.38T:jh256
41.4441.4741.56T:jh512
41.5041.5341.62T:jh384
41.7841.8841.97T:jh224
46.1946.2546.56T:round3jh512
46.4746.5346.62T:round3jh256
49.4149.5349.62T:bblake256
55.6255.6955.75T:skein10241024
66.7566.9167.09T:groestl256
94.6994.7894.91T:groestl512
99.2299.3499.47T:keccakc256treed2
100.66100.72100.88T:keccakc512treed2
Cycles/byte for 8 bytes
25%50%75%hash
44.7544.7544.75sha256
50.2550.2550.50T:blake2s
62.5063.0063.25sha224
89.7590.2592.00blake256
93.5094.5095.25T:skein256256
101.25101.25101.50T:blake32
102.75103.00103.00T:blake2b
146.75147.25147.50T:skein512256
167.25167.50167.75T:blake64
172.75173.00173.50T:k12
179.75180.75181.75blake512
182.00182.00182.50T:skein512512
235.25235.75236.00sha384
237.75238.00238.25sha512
268.75269.25269.75sha3384
268.25269.50270.50sha3224
268.75269.75270.50sha3256
268.75270.00270.75sha3512
271.25271.75273.00shake256
271.50272.00272.50shake128
287.25288.50289.25T:keccakc1024
309.75310.25310.75T:keccakc768
311.25311.75312.50T:keccak
311.50311.75312.25T:keccakc512
312.75313.00313.25T:keccakc448
330.25331.25332.00T:jh256
330.00331.50332.50T:bblake256
331.50331.75332.50T:jh512
332.25332.75333.25T:jh384
339.25339.50340.50T:jh224
366.75367.50370.25T:round3jh256
367.25368.50370.75T:round3jh512
408.75409.75410.75T:groestl256
445.50446.25446.75T:skein10241024
766.00767.25768.00T:groestl512
794.75795.75796.75T:keccakc256treed2
801.25803.25806.50T:keccakc512treed2