VAMPIRE	eBACS: ECRYPT Benchmarking of Cryptographic Systems	ECRYPT II

Measurements of SHA-3 finalists on one machine: riscv64; U54 (sifive,u54-mc); 2017 SiFive Freedom U540; 4 x 1000MHz; riscvunleashed000, supercop-20240107

[Page version: 20240726 23:45:57]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).

Implementation notes

Graphs: (bytes,cycles)

Cycles/byte for long messages 25% 50% 75% hash 17.95 17.98 18.01 T:k12 18.86 18.88 18.90 T:blake2b 29.41 29.41 29.43 T:skein512256 29.19 29.43 29.54 T:skein256256 29.44 29.50 29.61 T:skein512512 29.74 29.76 29.78 T:blake64 33.27 33.31 33.34 blake512 33.37 33.40 33.46 shake128 34.98 34.98 34.99 T:skein10241024 35.94 36.02 36.16 T:blake2s 37.62 37.65 37.68 T:keccakc448 38.70 38.75 38.79 sha3224 39.83 39.89 39.96 sha512 40.33 40.45 40.62 T:keccakc512 40.93 41.26 41.67 sha384 41.36 41.39 41.40 sha3256 41.36 41.40 41.59 shake256 41.62 41.77 42.04 T:blake32 43.02 43.04 43.07 T:keccak 53.75 53.77 53.86 T:keccakc768 54.40 54.60 54.64 blake256 55.19 55.21 55.24 sha3384 55.71 55.74 55.78 T:bblake256 61.71 61.76 61.89 sha256 75.08 75.13 75.41 T:keccakc1024 76.56 76.64 76.74 sha3512 76.68 76.98 78.12 sha224 104.96 105.02 105.33 T:jh384 105.19 105.22 105.26 T:jh224 105.19 105.29 105.36 T:jh256 105.07 105.32 105.35 T:jh512 105.31 105.35 105.69 T:round3jh512 105.21 105.56 105.60 T:round3jh256 111.41 111.53 111.91 T:groestl256 174.54 175.19 181.56 T:groestl512

Cycles/byte for 4096 bytes 25% 50% 75% hash 18.95 18.95 18.97 T:k12 18.96 18.96 18.97 T:blake2b 29.75 29.81 29.86 T:skein256256 30.06 30.06 30.07 T:skein512256 30.16 30.17 30.18 T:skein512512 31.01 31.02 31.02 T:blake64 34.53 34.54 34.55 blake512 34.84 34.84 34.87 shake128 36.07 36.07 36.14 T:blake2s 36.38 36.38 36.38 T:skein10241024 39.23 39.23 39.24 T:keccakc448 40.17 40.17 40.18 sha3224 41.86 41.86 41.88 sha512 42.00 42.01 42.09 T:keccakc512 42.63 42.65 42.77 T:blake32 42.79 42.80 42.80 sha3256 42.81 42.81 42.91 shake256 43.80 43.86 44.05 sha384 44.58 44.59 44.60 T:keccak 54.00 54.01 54.05 T:keccakc768 55.25 55.25 55.27 sha3384 55.46 55.51 55.52 blake256 61.45 61.46 61.47 T:bblake256 63.07 63.08 63.14 sha256 76.69 76.69 76.83 T:keccakc1024 78.05 78.06 78.11 sha3512 79.62 79.66 80.19 sha224 106.80 106.82 106.94 T:jh384 106.92 106.93 106.94 T:jh256 106.81 106.93 106.94 T:jh512 106.94 106.95 106.96 T:jh224 107.31 107.32 107.49 T:round3jh512 107.31 107.43 107.44 T:round3jh256 114.24 114.26 114.45 T:groestl256 183.57 183.69 186.87 T:groestl512

Cycles/byte for 1536 bytes 25% 50% 75% hash 19.09 19.10 19.11 T:blake2b 20.57 20.57 20.59 T:k12 30.49 30.52 30.73 T:skein256256 31.12 31.14 31.15 T:skein512256 31.33 31.36 31.36 T:skein512512 33.10 33.11 33.12 T:blake64 36.15 36.16 36.18 T:blake2s 36.58 36.60 36.63 blake512 37.22 37.23 37.24 shake128 38.70 38.71 38.76 T:skein10241024 40.10 40.10 40.12 T:keccakc448 40.72 40.73 40.76 sha3224 43.71 43.72 43.73 T:keccakc512 44.11 44.23 44.28 T:blake32 44.25 44.25 44.29 sha3256 44.28 44.29 44.30 shake256 45.10 45.12 45.21 sha512 47.17 47.18 47.19 T:keccak 48.20 48.23 48.38 sha384 54.40 54.40 54.42 T:keccakc768 55.35 55.35 55.44 sha3384 57.14 57.32 57.34 blake256 65.26 65.28 65.33 sha256 70.97 70.98 71.03 T:bblake256 79.28 79.29 79.31 T:keccakc1024 80.42 80.43 80.47 sha3512 83.99 84.05 84.33 sha224 109.66 109.77 109.80 T:jh384 109.67 109.78 109.79 T:jh512 109.78 109.79 109.81 T:jh256 109.79 109.81 109.83 T:jh224 110.60 110.61 110.67 T:round3jh256 110.60 110.72 110.78 T:round3jh512 118.85 118.86 118.92 T:groestl256 197.91 197.97 198.48 T:groestl512

Cycles/byte for 576 bytes 25% 50% 75% hash 21.53 21.55 21.58 T:blake2b 22.98 23.00 23.06 T:k12 32.51 32.71 32.72 T:skein256256 33.95 33.95 33.95 T:skein512256 34.53 34.55 34.57 T:skein512512 35.47 35.48 35.52 T:blake64 36.35 36.35 36.36 T:blake2s 38.44 38.48 38.55 blake512 39.91 39.92 39.97 shake128 48.12 48.21 48.30 T:blake32 48.82 48.83 48.88 T:skein10241024 49.22 49.26 49.34 T:keccakc448 49.35 49.35 49.45 sha3256 49.37 49.41 49.53 sha3224 49.43 49.44 49.50 shake256 49.48 49.49 49.53 T:keccak 49.48 49.51 49.57 sha512 49.50 49.51 49.54 T:keccakc512 55.54 55.75 56.33 sha384 58.95 58.96 58.99 T:keccakc768 59.25 59.25 59.29 sha3384 62.14 62.16 62.21 blake256 71.11 71.15 71.19 sha256 87.20 87.22 87.27 T:keccakc1024 87.85 87.88 88.02 sha3512 95.64 95.85 96.15 sha224 96.39 96.42 96.56 T:bblake256 117.27 117.30 117.39 T:jh512 117.28 117.32 117.41 T:jh256 117.36 117.37 117.40 T:jh384 117.32 117.43 117.47 T:jh224 119.40 119.47 119.56 T:round3jh512 119.39 119.48 119.52 T:round3jh256 131.14 131.20 131.29 T:groestl256 216.91 216.93 216.99 T:groestl512

Cycles/byte for 64 bytes 25% 50% 75% hash 38.91 38.91 38.91 T:blake2s 42.47 42.53 42.58 T:blake2b 57.80 57.80 58.20 T:skein256256 61.97 62.08 62.34 T:k12 69.06 69.08 69.16 T:skein512256 73.06 73.50 73.53 T:skein512512 76.89 76.94 77.20 T:blake64 79.41 79.80 80.31 blake512 90.80 90.81 91.30 sha3256 90.88 90.91 91.67 sha3384 90.94 90.97 92.47 sha3224 90.81 91.11 91.84 sha3512 91.47 91.48 93.17 shake256 91.70 91.70 92.45 shake128 98.58 98.69 98.86 T:blake32 99.36 99.41 100.69 T:keccakc1024 99.84 100.08 100.48 T:keccakc512 100.03 100.16 101.55 T:keccakc768 100.19 100.33 102.19 T:keccak 100.50 100.66 101.78 T:keccakc448 114.78 114.86 115.58 sha512 123.78 123.78 123.84 blake256 145.92 146.02 146.22 sha256 157.34 157.36 157.59 T:skein10241024 168.22 170.97 173.77 sha384 214.28 214.41 214.70 T:jh384 214.31 214.59 214.86 T:jh256 214.47 214.66 214.95 T:jh512 214.80 215.08 215.22 T:jh224 231.33 231.59 231.95 T:round3jh512 231.53 231.78 232.08 T:round3jh256 244.50 246.19 249.11 sha224 288.31 288.55 289.25 T:groestl256 420.91 421.05 421.75 T:bblake256 546.53 546.91 549.36 T:groestl512

Cycles/byte for 8 bytes 25% 50% 75% hash 314.88 316.50 317.88 T:blake2s 339.62 342.00 342.75 T:blake2b 342.38 342.62 346.62 T:skein256256 455.38 455.75 458.62 T:blake32 489.75 490.62 497.62 T:k12 550.88 553.25 553.75 T:skein512256 556.12 556.75 561.25 blake256 591.25 592.25 596.00 T:skein512512 616.38 619.25 622.62 T:blake64 639.25 640.75 647.25 blake512 672.62 674.00 694.00 sha256 721.38 721.75 743.12 sha3256 722.25 724.88 743.50 sha3384 727.25 727.38 753.38 shake256 725.12 727.88 737.12 sha3224 726.00 728.88 744.38 sha3512 729.25 729.25 750.88 shake128 792.25 793.38 804.88 T:keccakc1024 797.50 799.88 823.75 T:keccakc768 799.38 800.88 827.38 T:keccakc448 799.38 801.75 825.00 T:keccakc512 804.62 813.12 894.00 T:keccak 918.75 921.50 934.75 sha512 1260.38 1261.75 1264.50 T:skein10241024 1328.50 1337.88 1358.88 sha224 1352.38 1361.88 1387.50 sha384 1412.88 1415.00 1418.88 T:groestl256 1713.12 1714.88 1717.38 T:jh384 1713.88 1715.00 1719.25 T:jh256 1714.62 1715.38 1718.25 T:jh512 1715.75 1718.62 1722.25 T:jh224 1845.75 1846.88 1850.00 T:round3jh256 1845.75 1848.50 1853.38 T:round3jh512 2938.62 2939.00 2942.50 T:bblake256 4375.88 4379.25 4385.75 T:groestl512