VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A53 (410fd034); 2018 Broadcom BCM2837B0; 4 x 1400MHz; pi3bplus, supercop-20241022

[Page version: 20241120 00:41:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
6.036.056.11T:blake2b
6.32?6.36?7.84?T:k12
6.756.756.77T:skein256256
5.07?6.97?10.08?T:skein512256
5.92?7.97?10.33?T:skein512512
9.849.859.89T:blake2s
7.43?10.23?28.20?sha512
5.56?10.66?14.80?sha384
10.6410.6610.69T:skein10241024
10.8510.8710.91T:blake64
6.65?11.33?17.46?blake512
10.41?12.28?14.14?T:keccakc448
7.24?12.37?14.15?shake128
8.30?12.98?16.33?shake256
10.95?13.09?15.19?T:keccakc512
11.63?13.97?16.14?T:keccak
6.70?14.13?18.39?sha3224
14.5114.5514.66T:blake32
2.20?14.92?16.54?sha3256
9.14?15.28?18.77?sha224
6.46?15.65?18.89?sha256
15.72?17.55?20.06?T:keccakc768
14.40?18.53?21.73?blake256
14.08?19.39?20.71?sha3384
9.58?20.30?21.90?T:bblake256
21.51?24.16?27.38?T:keccakc1024
21.79?25.76?30.17?sha3512
38.38?39.82?43.67?T:groestl256
20.58?41.55?44.72?T:jh224
21.43?41.55?44.69?T:jh512
30.17?41.93?44.79?T:jh256
34.65?42.05?43.97?T:jh384
46.9949.5451.44T:round3jh256
47.1249.7052.35T:round3jh512
70.01?77.73?84.97?T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
6.076.076.10T:blake2b
6.756.767.49T:k12
6.55?6.84?8.39?T:skein512256
6.876.876.88T:skein256256
6.56?7.34?8.52?T:skein512512
9.869.879.89T:blake2s
11.1011.1111.12T:skein10241024
11.3111.3211.34T:blake64
10.94?11.60?19.77?sha512
11.39?12.15?13.01?shake128
12.49?12.70?14.86?blake512
11.84?12.70?14.29?sha384
12.7912.8313.74T:keccakc448
13.6013.6414.67T:keccakc512
12.99?13.83?15.91?sha3224
14.4514.5015.56T:keccak
13.83?14.64?15.40?sha3256
13.8214.6615.30shake256
14.8614.8614.91T:blake32
16.1416.8517.66sha256
17.4917.5918.83T:keccakc768
17.0817.9518.88sha224
17.8818.6819.31sha3384
20.0120.1820.88blake256
22.1922.8123.40T:bblake256
24.6424.7126.27T:keccakc1024
25.2526.5827.92sha3512
40.8040.8342.74T:groestl256
42.1542.7643.74T:jh512
42.1342.7943.79T:jh256
42.1642.8043.77T:jh224
42.2042.8343.39T:jh384
50.0750.5751.24T:round3jh256
50.1650.6551.48T:round3jh512
78.1381.1581.95T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
6.116.116.11T:blake2b
6.806.806.84T:skein512256
6.816.826.87T:skein512512
7.067.067.07T:skein256256
7.437.447.46T:k12
9.909.909.90T:blake2s
11.62?11.64?13.67?sha512
11.8511.8511.86T:skein10241024
12.0712.0712.08T:blake64
12.15?12.21?15.77?shake128
12.52?12.64?17.22?blake512
13.1113.1313.36T:keccakc448
13.16?13.21?19.36?sha3224
14.2114.2315.56T:keccakc512
14.29?14.32?18.82?shake256
14.28?14.32?19.10?sha3256
15.3315.3515.68T:keccak
15.3815.3915.40T:blake32
16.65?16.68?18.80?sha256
15.39?17.20?24.66?sha384
17.67?17.73?22.18?T:keccakc768
17.93?18.23?24.85?sha3384
20.36?22.36?32.05?sha224
20.05?22.86?55.59?blake256
25.5225.5728.15T:keccakc1024
24.95?27.03?32.95?T:bblake256
25.97?28.03?30.31?sha3512
42.4842.5044.34T:groestl256
43.68?44.58?60.95?T:jh256
43.68?45.04?56.87?T:jh512
43.70?45.22?56.47?T:jh224
43.70?45.31?56.38?T:jh384
51.30?51.59?58.97?T:round3jh512
51.2752.3356.31T:round3jh256
81.5788.0189.05T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
6.866.866.86T:blake2b
7.497.497.52T:skein512256
7.507.507.55T:skein512512
7.597.597.61T:skein256256
8.648.698.78T:k12
9.979.979.98T:blake2s
12.4112.4313.48sha512
12.8812.8812.90T:blake64
13.0313.0413.15shake128
13.18?13.20?16.80?blake512
15.0115.0315.04T:skein10241024
15.8815.9216.08sha3224
15.9015.9416.62sha3256
15.93?15.96?19.61?shake256
16.2016.2016.52T:keccakc512
16.2016.2116.53T:keccakc448
16.2216.2216.45T:keccak
16.7616.7916.83T:blake32
17.9117.9819.26sha256
19.13?19.18?21.39?sha3384
19.2719.3420.05T:keccakc768
21.58?21.70?31.40?blake256
23.24?23.85?31.90?sha384
28.2028.2529.44T:keccakc1024
28.32?28.37?36.47?sha3512
28.27?29.51?41.68?sha224
33.92?37.07?51.34?T:bblake256
46.9746.9848.59T:groestl256
44.80?50.41?57.39?T:jh512
44.79?50.67?76.35?T:jh256
44.79?53.05?72.99?T:jh384
45.00?54.33?106.05?T:jh224
53.25?62.29?100.70?T:round3jh256
53.35?63.47?136.52?T:round3jh512
88.91?97.43?100.14?T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
10.7510.7810.78T:blake2s
13.2813.2813.28T:blake2b
14.1714.1714.17T:skein256256
15.4515.4815.56T:skein512256
15.6115.6115.66T:skein512512
25.4725.4725.58sha512
26.8127.2027.98T:k12
27.4827.5227.52T:blake64
27.8127.8928.28blake512
29.0929.0929.38sha3256
29.1229.1231.55sha3384
29.1229.1730.30sha3224
29.2329.2330.84sha3512
29.4529.4529.94shake256
29.5829.5829.95shake128
33.4233.4737.06T:keccakc1024
33.9533.9735.45T:keccakc768
34.1634.1935.94T:keccakc512
34.1634.2734.45T:keccak
34.3034.3135.27T:keccakc448
34.3034.3334.58sha256
34.3334.3334.33T:blake32
42.7342.8343.28blake256
48.9148.9148.91T:skein10241024
81.3481.3682.16T:jh256
81.4181.4282.34T:jh384
81.4181.6681.95T:jh224
81.4481.7084.28T:jh512
100.70100.80103.28T:round3jh256
100.80100.80101.53T:round3jh512
103.77103.81104.14T:groestl256
129.08?130.72?147.67?sha384
131.25133.08143.36sha224
149.09?149.50?219.17?T:bblake256
222.86?243.27?259.09?T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
85.0085.2585.38T:blake2s
85.5085.5085.50T:skein256256
105.12105.12105.12T:blake2b
123.12123.38125.62T:skein512256
124.00124.12124.50T:skein512512
150.25150.25152.00sha256
153.50153.50153.50T:blake32
190.88191.00191.62blake256
205.12205.12207.38sha512
209.62211.00213.38T:k12
221.12221.38221.38T:blake64
224.00224.50225.62blake512
228.12228.12231.88sha3384
228.25228.25237.50sha3256
228.88229.00229.12sha3224
229.00229.00229.62sha3512
231.12231.25236.62shake256
231.75231.75237.25shake128
269.75269.75276.62T:keccakc1024
272.88273.00281.88T:keccakc768
273.00273.38277.50T:keccakc512
274.12274.25274.38T:keccakc448
274.25275.00279.62T:keccak
390.88390.88391.00T:skein10241024
508.62509.50534.12T:groestl256
652.75653.12662.00T:jh224
653.12653.50665.88T:jh512
652.25654.38664.75T:jh256
652.88654.38663.25T:jh384
802.75804.00822.88T:round3jh256
804.00805.62854.12T:round3jh512
935.88?944.00?1071.00?sha224
1041.38?1043.75?1316.25?T:bblake256
1033.381045.001112.38sha384
1801.38?2028.12?2130.00?T:groestl512