VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: armeabi; Cortex-A9+NEON (412fc09a); 2011 Freescale i.MX6 Quad; 4 x 1200MHz; unstable; novena, supercop-20220506

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 10.55 10.55 10.55 T:blake2b 12.89 12.89 13.28 T:blake2s 15.23 15.24 16.02 sha256 15.04? 15.82? 22.07? sha224 23.05 23.05 23.24 T:blake32 19.14? 24.61? 24.81? sha512 24.61 24.81 24.81 sha384 19.01? 27.54? 34.06? T:skein256256 28.71 29.10 29.10 T:k12 29.30 29.69 30.08 blake256 29.69 29.69 29.69 T:bblake256 30.47? 30.67? 43.56? shake256 24.81? 31.84? 32.81? T:skein512256 31.06 32.03 32.82 T:skein512512 32.42? 41.21? 41.21? T:round3jh512 32.42? 41.21? 41.21? T:round3jh256 41.21 41.41 41.41 blake512 26.50? 41.60? 41.80? shake128 47.27 47.66 48.05 sha3224 50.40 50.79 50.98 sha3256 52.35 52.54 52.74 T:blake64 54.30 54.50 54.69 T:keccakc512 57.62 57.82 57.82 T:keccak 61.33 61.72 61.92 T:keccakc448 52.15? 66.02? 92.98? sha3384 66.22 66.22 66.22 T:skein10241024 70.71 70.90 70.90 T:keccakc768 75.01 75.40 75.98 T:groestl256 70.90? 90.44? 128.14? sha3512 97.27 97.27 97.47 T:keccakc1024 104.31 105.09 106.26 T:groestl512 154.70 155.09 156.46 T:jh256 154.70 155.29 155.48 T:jh224 155.09 155.48 156.46 T:jh512 155.09 155.68 157.24 T:jh384

Cycles/byte for 4096 bytes 25% 50% 75% hash 10.94 10.94 10.94 T:blake2b 13.28 13.28 13.38 T:blake2s 16.21 16.21 16.51 sha256 16.11? 16.51? 19.53? sha224 23.83 23.83 23.83 T:blake32 25.98 25.98 25.98 sha384 25.98 25.98 25.98 sha512 24.64? 28.23? 29.59? T:skein256256 30.37 30.47 30.67 blake256 30.76 30.76 30.76 T:k12 31.94? 32.03? 38.48? shake256 32.42 32.91 33.11 T:skein512256 32.42 32.91 33.11 T:skein512512 33.01 33.01 33.01 T:bblake256 42.19 42.19 42.19 T:round3jh512 42.19 42.19 42.19 T:round3jh256 43.56 43.66 43.66 blake512 36.88? 44.34? 44.44? shake128 50.20 50.30 50.39 sha3224 53.32 53.42 53.42 sha3256 54.69 54.69 54.79 T:blake64 56.45 56.55 56.55 T:keccakc512 59.77 59.87 59.87 T:keccak 64.46 64.65 64.65 T:keccakc448 67.09? 67.19? 80.57? sha3384 68.76 68.76 68.76 T:skein10241024 71.29 71.29 71.29 T:keccakc768 77.55 77.64 77.94 T:groestl256 92.78? 92.98? 111.73? sha3512 99.42 99.42 99.42 T:keccakc1024 110.65 110.75 111.24 T:groestl512 157.63 157.83 158.41 T:jh256 157.63 157.83 157.92 T:jh224 157.83 158.12 158.80 T:jh384 158.12 158.22 158.70 T:jh512

Cycles/byte for 1536 bytes 25% 50% 75% hash 11.46 11.72 11.72 T:blake2b 13.80 13.80 13.80 T:blake2s 17.45 17.45 17.45 sha224 17.45? 17.71? 20.84? sha256 25.00 25.00 25.26 T:blake32 27.87 28.13 28.13 sha384 28.13? 28.13? 33.60? sha512 25.51? 29.43? 30.47? T:skein256256 31.77 31.77 32.03 blake256 33.34 33.60 33.60 T:k12 33.60 33.60 33.60 shake256 33.86 34.12 34.64 T:skein512256 33.86 34.38 34.38 T:skein512512 38.54 38.54 38.55 T:bblake256 43.75 43.75 44.01 T:round3jh256 43.75 43.75 44.01 T:round3jh512 47.40 47.40 47.66 blake512 48.85 48.96 49.07 shake128 52.35 52.35 52.61 sha3224 56.51 56.52 56.78 sha3256 58.08 58.34 58.34 T:blake64 58.60 58.86 58.86 T:keccakc512 63.29 63.29 63.55 T:keccak 66.41 66.41 66.67 T:keccakc448 68.76 68.76 68.76 sha3384 71.88 71.88 72.14 T:keccakc768 72.92 72.92 73.18 T:skein10241024 81.26 81.52 81.52 T:groestl256 96.88 97.14 97.14 sha3512 102.87 102.87 102.87 T:keccakc1024 120.06 120.06 120.58 T:groestl512 162.25 162.25 162.51 T:jh256 162.25 162.25 162.51 T:jh384 162.25 162.25 162.51 T:jh224 162.77 163.03 163.29 T:jh512

Cycles/byte for 576 bytes 25% 50% 75% hash 14.58 14.59 14.59 T:blake2b 15.28 15.28 15.28 T:blake2s 20.14 20.83 20.84 sha256 20.14 20.84 20.84 sha224 28.47 28.47 28.48 T:blake32 30.56 30.56 31.25 sha384 30.56 30.56 31.25 sha512 32.85 33.34 33.34 T:skein256256 35.42 35.42 36.11 blake256 38.20 38.20 38.20 T:k12 38.20 38.20 38.20 T:skein512256 38.20 38.20 38.20 T:skein512512 38.89 38.89 38.89 shake256 47.92 47.92 48.61 T:round3jh512 47.92? 48.61? 57.64? T:round3jh256 52.09 52.78 52.78 blake512 53.48 53.48 53.48 T:bblake256 56.95 56.95 57.07 shake128 62.50 62.51 62.51 T:blake64 65.98 66.67 66.67 T:keccakc512 66.67 66.67 67.37 sha3256 66.67 67.37 67.37 T:keccak 66.67 67.37 67.37 sha3224 77.09 77.09 77.78 sha3384 77.78 78.48 78.48 T:keccakc768 82.65 83.34 84.04 T:keccakc448 90.98 91.67 91.68 T:groestl256 91.67 91.68 91.68 T:skein10241024 109.73 109.73 110.43 sha3512 113.20 113.20 113.90 T:keccakc1024 133.34 133.35 134.04 T:groestl512 174.32 174.32 175.01 T:jh256 174.32 174.32 175.01 T:jh224 175.01 175.01 175.02 T:jh512 174.32 175.02 175.71 T:jh384

Cycles/byte for 64 bytes 25% 50% 75% hash 31.25? 31.27? 37.50? T:blake2s 43.75? 43.77? 49.98? T:blake2b 56.25? 62.50? 62.52? sha224 56.25? 62.50? 62.52? sha256 67.44 68.75 68.75 T:skein256256 68.75 68.77 75.00 T:blake32 75.00 81.23 81.27 sha384 75.00 81.25 81.27 sha512 81.25 81.27 81.27 blake256 87.50 87.50 87.52 shake256 87.50 87.52 93.73 T:skein512512 87.50 87.52 93.75 T:skein512256 100.02 106.25 106.27 T:round3jh256 100.02 106.25 106.27 T:round3jh512 106.27 112.50 112.52 T:k12 125.00 125.02 131.25 blake512 131.25 131.27 137.50 T:blake64 131.27 131.28 137.50 T:keccakc512 131.27 137.50 137.52 T:keccakc1024 131.27 137.50 137.52 T:keccakc768 137.52 137.52 143.77 T:keccak 162.52 162.53 168.77 sha3512 162.52 162.53 168.78 sha3384 168.75 168.77 168.77 sha3224 168.75 168.77 168.77 sha3256 175.02 176.39 181.27 shake128 181.25 181.28 181.28 T:keccakc448 212.52 218.77 218.78 T:groestl256 243.77 243.77 243.77 T:bblake256 293.77 293.78 293.78 T:skein10241024 331.27 331.28 331.28 T:jh224 331.27 331.28 331.28 T:jh256 331.27 331.28 331.28 T:jh384 331.28 331.28 337.52 T:jh512 350.03 350.03 356.28 T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 250.00? 250.12? 300.00? T:blake2s 350.00 350.00 350.12 sha224 350.00 350.00 350.12 sha256 350.00 350.12 350.12 T:blake2b 350.12? 400.00? 400.12? T:blake32 400.12? 415.12? 450.00? T:skein256256 400.00? 450.00? 450.00? blake256 600.12 649.88 650.12 sha512 600.00 650.12 650.12 sha384 650.12 700.00 700.12 shake256 700.00 700.12 750.00 T:skein512256 700.00 700.12 750.00 T:skein512512 850.00 850.00 850.12 T:k12 850.00 850.00 850.12 T:round3jh256 850.00 850.00 850.12 T:round3jh512 1000.00 1000.12 1050.25 blake512 1050.00 1050.00 1050.12 T:keccakc512 1050.00 1050.12 1050.12 T:keccakc1024 1050.00 1050.12 1050.12 T:keccakc768 1100.00 1100.12 1100.12 T:keccak 1100.12 1100.12 1100.12 T:blake64 1100.12 1150.00 1150.12 T:groestl256 1300.00 1300.12 1350.00 sha3512 1300.12 1300.25 1350.00 sha3384 1300.12 1350.12 1350.12 sha3224 1300.25 1350.12 1350.12 sha3256 1400.12 1400.12 1411.12 shake128 1450.12 1450.25 1500.12 T:keccakc448 1700.12 1700.12 1700.25 T:bblake256 2350.12 2350.25 2350.25 T:skein10241024 2650.12 2650.25 2650.25 T:jh224 2650.12 2650.25 2700.12 T:jh256 2650.25 2650.25 2700.12 T:jh384 2650.25 2650.25 2700.12 T:jh512 2800.12 2800.25 2850.38 T:groestl512