VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: mipso32; Octeon II (cnmips64v2); 2011 Cavium Octeon II CN6120; 2 x 2000MHz; gcc23, supercop-20230530

[Page version: 20251015 23:19:38]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Test results

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 22.02 22.03 22.04 T:blake2s 31.14 31.40 31.92 T:blake32 38.47 38.47 38.48 blake256 40.08 40.08 40.09 T:bblake256 44.65 44.88 45.32 sha256 46.44 46.68 47.18 T:k12 52.32 53.40 55.22 T:blake2b 71.24 71.25 71.26 T:skein256256 77.87 77.88 77.89 T:skein512512 77.87 77.88 77.88 T:skein512256 86.21 86.22 86.23 sha224 88.47 88.48 88.49 shake128 93.99 94.00 94.01 T:keccakc448 95.36? 95.38? 112.43? T:blake64 99.89 99.90 99.93 T:keccakc512 101.84 101.85 101.86 sha3224 103.00 103.00 103.00 sha512 105.54 105.55 105.55 T:keccak 107.86 107.86 107.86 blake512 108.28 108.28 108.29 sha3256 108.28 108.28 108.28 shake256 128.11 128.16 128.25 T:skein10241024 128.68 128.70 128.71 T:keccakc768 138.21 138.22 138.24 sha384 141.30 141.30 141.34 sha3384 173.94 173.96 173.98 T:keccakc1024 193.65 194.12 194.13 sha3512 197.24 197.25 197.26 T:jh224 197.25 197.25 197.25 T:jh512 197.25 197.25 197.25 T:jh384 197.24 197.26 197.26 T:jh256 221.78 221.78 221.78 T:groestl256 227.42 227.44 227.45 T:round3jh512 227.43 227.45 227.59 T:round3jh256 365.70 365.84 366.69 T:groestl512

Cycles/byte for 4096 bytes 25% 50% 75% hash 22.29 22.29 22.30 T:blake2s 32.30 32.30 32.56 T:blake32 39.48 39.48 39.48 blake256 44.75 44.75 44.75 T:bblake256 45.83 45.83 46.05 sha256 49.13 49.19 49.42 T:k12 57.37 57.70 58.38 T:blake2b 72.23 72.24 72.24 T:skein256256 79.48 79.48 79.48 T:skein512256 79.49 79.49 79.50 T:skein512512 88.47 88.48 88.48 sha224 92.44 92.45 92.45 shake128 98.56 98.56 98.57 T:keccakc448 98.99 99.00 107.52 T:blake64 104.37 104.37 104.38 T:keccakc512 105.52 105.52 105.52 sha3224 106.59 106.59 106.59 sha512 109.94 109.95 109.95 T:keccak 111.85 111.85 111.85 blake512 111.98 111.98 111.98 sha3256 112.19 112.19 112.19 shake256 129.74 129.74 129.75 T:keccakc768 132.73 132.75 132.79 T:skein10241024 141.72 141.72 141.74 sha3384 143.79 143.79 143.80 sha384 177.96 177.97 177.97 T:keccakc1024 197.88 197.88 197.88 sha3512 200.61 200.61 200.61 T:jh512 200.60 200.61 200.61 T:jh256 200.62 200.62 200.62 T:jh384 200.62 200.63 200.63 T:jh224 227.51 227.51 227.52 T:groestl256 231.27 231.27 231.28 T:round3jh512 231.27 231.28 231.35 T:round3jh256 386.22 386.24 386.65 T:groestl512

Cycles/byte for 1536 bytes 25% 50% 75% hash 22.73 22.73 22.74 T:blake2s 33.80 33.81 34.06 T:blake32 41.18 41.18 41.18 blake256 47.42 47.45 47.65 sha256 52.53 52.53 52.53 T:bblake256 53.19 53.36 53.38 T:k12 64.31 64.79 65.47 T:blake2b 73.87 73.88 73.88 T:skein256256 82.15 82.15 82.15 T:skein512256 82.18 82.19 82.19 T:skein512512 92.24 92.24 92.24 sha224 99.05 99.05 99.07 shake128 101.72 101.72 101.77 T:keccakc448 105.02 105.05 105.05 T:blake64 107.23 107.23 107.24 sha3224 109.60 109.60 109.62 T:keccakc512 112.56 112.56 112.56 sha512 115.92 115.93 115.93 sha3256 116.49 116.49 116.49 shake256 117.27 117.28 117.29 T:keccak 118.49 118.49 118.49 blake512 131.52 131.52 131.53 T:keccakc768 140.38 140.40 140.46 T:skein10241024 142.42 142.43 142.43 sha3384 153.06 153.08 153.09 sha384 184.70 184.71 184.72 T:keccakc1024 204.13 204.14 204.14 sha3512 206.20 206.20 206.20 T:jh512 206.19 206.21 206.24 T:jh256 206.24 206.24 206.25 T:jh384 206.24 206.26 206.26 T:jh224 237.07 237.07 237.07 T:groestl256 237.66 237.67 237.68 T:round3jh256 237.66 237.68 237.68 T:round3jh512 420.21 420.23 420.27 T:groestl512

Cycles/byte for 576 bytes 25% 50% 75% hash 23.90 23.92 23.94 T:blake2s 37.75 37.77 38.06 T:blake32 45.70 45.70 45.72 blake256 51.69 51.83 51.94 sha256 59.15 59.55 61.23 T:k12 73.28 73.28 73.32 T:bblake256 78.26 78.26 78.47 T:skein256256 89.27 89.27 91.31 T:skein512256 89.35 89.38 91.61 T:skein512512 87.07? 90.61? 99.44? T:blake2b 102.26 102.28 102.58 sha224 107.88 107.88 107.93 shake128 110.60 110.61 110.66 T:blake64 117.25 117.25 119.42 sha512 124.25 124.25 124.27 blake512 125.38 125.38 125.53 T:keccak 126.49 126.61 126.84 T:keccakc512 127.63 127.63 128.11 T:keccakc448 129.40 129.41 129.58 sha3256 129.44 129.44 129.58 sha3224 130.90 130.90 133.33 shake256 144.71 144.75 148.21 T:keccakc768 153.11 153.11 155.56 sha3384 162.63 162.71 165.90 sha384 175.12 175.12 175.50 T:skein10241024 204.86 204.90 204.96 T:keccakc1024 221.10 221.10 221.15 T:jh256 221.12 221.12 224.06 T:jh512 221.24 221.24 221.27 T:jh384 221.24 221.27 221.28 T:jh224 223.76 223.77 223.80 sha3512 254.72 254.74 254.74 T:round3jh256 254.71 254.76 254.79 T:round3jh512 262.55 262.56 262.56 T:groestl256 470.05 470.06 470.24 T:groestl512

Cycles/byte for 64 bytes 25% 50% 75% hash 37.53 37.53 37.75 T:blake2s 87.97 88.22 88.75 T:blake32 103.53 103.53 103.78 blake256 105.84 106.12 106.28 sha256 121.97 121.97 121.97 T:blake2b 133.62 133.62 133.62 T:skein256256 158.38 158.59 159.50 T:k12 177.94 177.94 178.16 T:skein512256 178.66 178.66 178.84 T:skein512512 227.81 228.50 228.78 T:blake64 229.88 229.88 230.44 sha224 231.19 231.19 231.41 sha512 243.81 244.00 244.22 sha3224 244.69 244.72 244.88 sha3256 246.75 246.75 247.78 sha3384 248.62 248.81 248.97 sha3512 249.19 249.56 249.88 T:keccakc1024 251.47 251.47 251.88 blake512 258.09 258.09 258.22 shake256 262.03 262.03 262.69 shake128 266.22 266.28 266.72 T:keccakc768 277.53 277.53 277.94 T:keccak 280.47 281.28 281.44 T:keccakc512 285.84 286.03 286.09 T:keccakc448 338.69 338.81 339.34 T:bblake256 354.16 355.56 355.56 sha384 411.84 412.00 412.66 T:jh256 412.22 412.22 412.44 T:jh512 413.12 413.12 413.12 T:jh384 413.28 413.56 414.34 T:jh224 472.84 473.31 474.25 T:round3jh512 473.00 473.78 474.44 T:round3jh256 548.94 548.94 549.44 T:skein10241024 588.69 588.75 589.12 T:groestl256 1303.75 1304.03 1347.25 T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 297.25 297.25 297.25 T:blake2s 454.00 455.50 455.50 T:blake32 496.50 497.75 500.00 sha256 524.75 527.25 527.25 blake256 785.50 786.50 787.00 T:skein256256 971.00 972.25 974.50 T:blake2b 1140.75 1143.75 1147.25 sha224 1423.25 1424.50 1424.50 T:skein512256 1244.00? 1429.50? 1469.50? T:k12 1429.00 1430.50 1430.50 T:skein512512 1843.25 1849.00 1850.50 T:blake64 1848.75 1850.50 1852.25 sha512 1883.00 1884.50 1888.50 sha3224 1892.00 1893.50 1894.00 sha3256 1907.00 1907.00 1907.25 sha3384 1923.50 1924.75 1931.75 sha3512 1997.75 1997.75 1999.50 shake256 1996.75 1999.25 1999.25 T:keccakc1024 2029.25 2029.25 2032.75 shake128 2032.00 2032.00 2033.75 blake512 2126.25 2127.75 2151.50 T:keccakc768 2232.25 2234.50 2235.00 T:keccak 2242.75 2243.00 2253.50 T:keccakc512 2281.00 2281.00 2284.25 T:keccakc448 2410.25 2412.00 2413.25 T:bblake256 2834.50 2836.00 3075.25 sha384 2929.00 2929.00 2930.75 T:groestl256 3320.75 3322.50 3324.75 T:jh256 3323.75 3323.75 3324.25 T:jh512 3328.75 3330.50 3331.50 T:jh384 3330.50 3330.50 3335.25 T:jh224 3811.00 3812.75 3816.50 T:round3jh512 3809.00 3813.75 3814.50 T:round3jh256 4413.00 4416.50 4420.25 T:skein10241024 10443.75 10448.75 10582.50 T:groestl512