VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3aplus, supercop-20251114

[Page version: 20260219 17:01:08]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
6.046.046.04T:blake2b
6.296.326.35T:k12
6.386.396.40T:skein512512
6.396.396.40T:skein512256
6.746.756.76T:skein256256
9.599.679.90sha384
9.849.849.85T:blake2s
10.4410.4510.46sha512
10.6410.6610.67T:skein10241024
10.8510.8610.89T:blake64
10.9010.9310.95shake128
11.3211.3411.38blake512
12.2212.2512.32T:keccakc448
12.5212.5312.54sha3224
13.0013.0613.15T:keccakc512
13.3513.3513.38shake256
13.3513.3613.38sha3256
13.9013.9313.99T:keccak
14.5314.5514.55T:blake32
14.7614.9415.33sha224
15.8115.8415.87sha256
17.3417.3917.46T:keccakc768
17.8317.8517.87sha3384
18.9118.9318.97blake256
19.4419.4519.49T:bblake256
24.0624.1224.25T:keccakc1024
24.7124.7324.79sha3512
39.6639.8142.11T:groestl256
40.1040.1340.61T:jh256
40.1140.1340.76T:jh512
40.1140.1442.69T:jh384
40.1140.1442.68T:jh224
46.8446.9950.17T:round3jh512
46.8347.0649.60T:round3jh256
68.5472.0775.04T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
6.076.076.07T:blake2b
6.556.556.55T:skein512256
6.556.556.55T:skein512512
6.736.746.75T:k12
6.876.876.87T:skein256256
9.869.869.87T:blake2s
10.8810.8910.89sha512
11.1011.1011.11T:skein10241024
11.3111.3211.33T:blake64
11.3811.3911.40shake128
11.5711.5811.68sha384
11.7711.7811.79blake512
12.7912.7912.82T:keccakc448
12.9812.9812.98sha3224
13.6013.6013.64T:keccakc512
13.8113.8113.82sha3256
13.8213.8213.82shake256
14.4514.4514.48T:keccak
14.8614.8614.87T:blake32
16.1216.1316.14sha256
16.7916.8116.98sha224
17.4917.4917.53T:keccakc768
17.8617.8717.88sha3384
19.2919.3019.32blake256
21.4821.4821.49T:bblake256
24.6424.6424.71T:keccakc1024
25.2025.2025.22sha3512
40.6240.6641.81T:groestl256
40.7740.7741.01T:jh256
40.7740.7841.09T:jh512
40.7740.7842.05T:jh384
40.7740.7842.05T:jh224
47.6647.7449.01T:round3jh256
47.6747.7449.29T:round3jh512
74.7775.7076.45T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
6.116.116.11T:blake2b
6.806.806.81T:skein512256
6.816.816.81T:skein512512
7.067.067.07T:skein256256
7.427.447.46T:k12
9.909.909.90T:blake2s
11.6011.6111.61sha512
11.8411.8511.85T:skein10241024
12.0612.0712.07T:blake64
12.1512.1512.17shake128
12.5012.5112.53blake512
13.1113.1113.16T:keccakc448
13.1613.1613.17sha3224
14.2114.2114.23T:keccakc512
14.2714.2714.28sha3256
14.2914.2914.30shake256
14.7414.7714.89sha384
15.3315.3315.36T:keccak
15.3815.3915.39T:blake32
16.6016.6216.62sha256
17.6717.6817.69T:keccakc768
17.8917.9017.90sha3384
19.9119.9219.93blake256
19.8619.9319.98sha224
24.8524.8524.87T:bblake256
25.5125.5225.55T:keccakc1024
25.9425.9425.97sha3512
41.8541.8541.86T:jh256
41.8541.8541.87T:jh512
41.8541.8641.86T:jh384
41.8541.8641.87T:jh224
42.1742.1842.23T:groestl256
48.9148.9148.93T:round3jh256
48.9248.9248.95T:round3jh512
80.1280.4184.26T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
6.866.866.86T:blake2b
7.497.497.51T:skein512256
7.507.507.50T:skein512512
7.597.597.59T:skein256256
8.638.678.72T:k12
9.979.979.97T:blake2s
12.3812.4112.41sha512
12.8812.8812.90T:blake64
13.0313.0313.05shake128
13.1713.1813.19blake512
15.0115.0215.03T:skein10241024
15.8715.8815.88sha3224
15.9015.9015.90sha3256
15.9315.9315.93shake256
16.2016.2016.25T:keccakc512
16.2016.2116.26T:keccakc448
16.2116.2116.21T:keccak
16.7616.8116.82T:blake32
17.8917.8917.91sha256
19.1319.1319.13sha3384
19.2719.2719.27T:keccakc768
21.5721.5721.59blake256
22.2522.3522.52sha384
28.0828.1628.27sha224
28.2028.2028.28T:keccakc1024
28.3028.3028.34sha3512
33.8433.8633.89T:bblake256
44.7344.7344.75T:jh224
44.7344.7344.77T:jh256
44.7344.7444.76T:jh384
44.7344.7444.77T:jh512
46.5946.6246.65T:groestl256
52.2552.2552.28T:round3jh256
52.2752.2752.30T:round3jh512
87.4787.5890.84T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
10.7510.8010.80T:blake2s
13.2713.2713.27T:blake2b
14.1714.1914.19T:skein256256
15.4815.5215.52T:skein512256
15.6115.6115.61T:skein512512
25.4725.4825.67sha512
26.7227.0827.38T:k12
27.4827.4827.52T:blake64
27.8427.8427.88blake512
29.0929.1429.67sha3256
29.1229.1429.17sha3224
29.1229.2029.20sha3384
29.2529.2830.03sha3512
29.4429.4529.47shake256
29.5829.5829.58shake128
33.4533.4533.94T:keccakc1024
33.9533.9733.98T:keccakc768
34.1134.1234.17T:keccakc512
34.1634.1634.16T:keccak
34.2734.3034.38T:keccakc448
34.3034.3034.33sha256
34.3334.3334.33T:blake32
42.4842.5942.69blake256
48.8848.8948.91T:skein10241024
81.3481.3481.70T:jh256
81.4181.4181.42T:jh384
81.4181.5381.66T:jh224
81.4581.6981.69T:jh512
94.9194.9195.19T:round3jh256
95.0395.0395.03T:round3jh512
102.61103.09103.28T:groestl256
122.14122.83124.03sha384
132.33133.19135.91sha224
148.92149.02149.33T:bblake256
219.06220.95233.70T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
85.2585.3885.62T:blake2s
85.5085.6285.62T:skein256256
105.00105.00105.00T:blake2b
123.12123.38123.38T:skein512256
124.00124.00124.00T:skein512512
150.25151.12151.12sha256
153.50154.12157.25T:blake32
190.88191.25193.25blake256
205.12205.25207.38sha512
209.38211.50213.00T:k12
221.12221.38222.12T:blake64
224.00224.25225.62blake512
228.25228.25228.62sha3256
228.50228.62228.75sha3384
228.50228.88229.00sha3224
229.50229.50229.75sha3512
231.00231.12231.25shake256
231.75231.75232.12shake128
269.38269.75271.38T:keccakc1024
272.88272.88273.88T:keccakc768
273.25273.25277.62T:keccakc512
273.62273.62275.75T:keccak
274.12274.38279.75T:keccakc448
391.12391.25392.00T:skein10241024
501.25503.12507.12T:groestl256
652.25652.25652.25T:jh256
652.75652.75652.75T:jh224
652.88652.88653.00T:jh384
653.12653.12654.12T:jh512
760.50760.50762.50T:round3jh256
761.50761.75761.75T:round3jh512
935.88944.25956.75sha224
967.25973.621006.38sha384
1039.381041.121042.12T:bblake256
1750.881757.621816.00T:groestl512