VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: aarch64; Cortex-A72 (410fd083); 2019 Broadcom BCM2711; 4 x 1500MHz; pi4b, supercop-20241022

[Page version: 20241120 00:41:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.564.574.60T:k12
5.105.105.10T:skein512512
5.105.105.10T:skein512256
5.495.495.49T:blake2b
6.226.236.29T:skein10241024
7.197.227.23sha384
7.757.797.84T:skein256256
8.058.068.12sha512
8.428.458.46shake128
9.049.049.04T:blake64
9.079.079.07T:blake2s
9.419.429.42blake512
9.629.629.62T:keccakc448
9.729.759.80sha3224
10.3010.3010.32T:keccakc512
10.4110.4910.54sha224
10.4710.4910.52shake256
10.4910.5010.51sha3256
10.9610.9710.98T:keccak
11.4211.4211.43sha256
12.2512.2512.25T:blake32
13.6513.6713.69T:keccakc768
13.9013.9113.91sha3384
15.7215.7215.72blake256
15.8215.8315.83T:bblake256
19.0519.0619.09T:keccakc1024
19.3219.3319.37sha3512
25.1525.1725.19T:groestl256
35.9135.9235.93T:jh512
35.9135.9235.93T:jh384
35.9135.9235.93T:jh256
35.9235.9335.94T:jh224
42.1242.1242.13T:round3jh256
42.1242.1242.13T:round3jh512
54.7855.0655.37T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
4.864.864.87T:k12
5.215.215.21T:skein512256
5.215.215.21T:skein512512
5.515.515.51T:blake2b
6.516.516.54T:skein10241024
7.887.897.92T:skein256256
8.128.138.13sha384
8.408.408.42sha512
8.808.808.81shake128
9.089.089.08T:blake2s
9.399.399.39T:blake64
9.759.759.75blake512
10.0310.0310.03T:keccakc448
10.1210.1210.14sha3224
10.7210.7210.73T:keccakc512
10.8510.8510.87shake256
10.8510.8610.86sha3256
11.3011.3211.33sha224
11.3711.3711.38T:keccak
11.6211.6211.63sha256
12.4912.4912.49T:blake32
13.7313.7313.74T:keccakc768
13.9213.9213.92sha3384
16.0016.0016.00blake256
17.4217.4217.42T:bblake256
19.4619.4619.47T:keccakc1024
19.6919.7019.71sha3512
25.8125.8225.83T:groestl256
36.4936.4936.49T:jh256
36.4936.4936.49T:jh384
36.4936.4936.49T:jh512
36.4936.4936.50T:jh224
42.7942.7942.79T:round3jh256
42.7942.7942.79T:round3jh512
57.6657.6957.81T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
5.335.345.34T:k12
5.395.395.39T:skein512256
5.395.395.39T:skein512512
5.545.545.54T:blake2b
6.966.966.98T:skein10241024
8.068.068.09T:skein256256
8.958.968.97sha512
9.109.109.10T:blake2s
9.399.399.39shake128
9.639.649.66sha384
9.979.979.97T:blake64
10.2610.2610.26T:keccakc448
10.2610.2710.29sha3224
10.2910.3010.31blake512
11.1711.1811.18T:keccakc512
11.2011.2111.21sha3256
11.2211.2311.24shake256
11.9511.9511.95sha256
12.0412.0412.04T:keccak
12.6512.6912.73sha224
12.8912.8912.89T:blake32
13.8313.8313.84T:keccakc768
13.9513.9513.95sha3384
16.4816.4816.48blake256
20.0620.0620.07T:bblake256
20.1220.1220.14T:keccakc1024
20.3020.3020.31sha3512
26.9026.9026.91T:groestl256
37.4437.4437.45T:jh224
37.4437.4437.45T:jh256
37.4537.4537.45T:jh384
37.4537.4537.45T:jh512
43.9043.9143.92T:round3jh256
43.9143.9143.91T:round3jh512
62.0362.2362.46T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
5.885.885.88T:skein512256
5.885.885.88T:skein512512
6.066.076.08T:k12
6.226.226.22T:blake2b
8.498.518.53T:skein256256
8.888.888.90T:skein10241024
9.179.179.17T:blake2s
9.519.519.52sha512
10.0610.0610.06shake128
10.4910.4910.49T:blake64
10.7410.7510.75blake512
12.4012.4012.41sha3224
12.4612.4812.49sha3256
12.4912.5012.51shake256
12.6412.6412.65T:keccak
12.6612.6612.67T:keccakc448
12.7012.7012.70T:keccakc512
12.8012.8212.85sha384
12.8312.8312.83sha256
13.9413.9413.94T:blake32
14.9014.9014.90sha3384
15.0315.0415.04T:keccakc768
16.2116.2916.39sha224
17.7117.7117.74blake256
22.1722.1822.19sha3512
22.1922.2022.24T:keccakc1024
27.0727.0927.09T:bblake256
29.7829.7929.80T:groestl256
40.0040.0040.01T:jh256
40.0040.0040.02T:jh224
40.0140.0140.02T:jh384
40.0140.0140.03T:jh512
46.8946.8946.91T:round3jh256
46.9046.9046.96T:round3jh512
68.0368.2268.43T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
9.809.809.80T:blake2s
11.8411.8411.84T:skein512256
11.8811.9111.91T:skein512512
11.9111.9111.91T:blake2b
14.0914.1114.11T:skein256256
17.8918.0318.22T:k12
20.7820.7820.81sha512
21.2821.2821.34T:blake64
21.5821.5821.58blake512
22.8422.8422.84sha3224
22.8422.8422.84sha3384
22.8622.8622.86sha3256
22.8622.8622.88sha3512
23.0523.0523.06shake256
23.1423.1423.14shake128
23.8623.8624.16sha256
25.6925.8025.81T:keccakc1024
25.9425.9526.00T:keccakc768
25.8926.0026.03T:keccak
26.0526.0826.12T:keccakc512
26.0926.1126.11T:keccakc448
27.4127.4227.47T:blake32
29.0829.0829.09T:skein10241024
33.6133.6133.86blake256
57.5857.7757.95sha384
61.9762.2862.67sha224
66.5666.5666.62T:groestl256
72.4772.4772.73T:jh224
72.5672.5672.83T:jh384
72.5972.5972.70T:jh512
72.4773.0073.06T:jh256
84.9184.9185.20T:round3jh256
84.9584.9585.55T:round3jh512
117.17117.17117.19T:bblake256
169.02169.58171.45T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
78.0078.0078.00T:blake2s
80.2580.5080.50T:skein256256
93.7593.7593.75T:skein512256
94.2594.2594.25T:skein512512
94.8895.1295.12T:blake2b
100.88100.88100.88sha256
118.50118.50118.62T:blake32
139.12139.88140.75T:k12
143.50143.50143.50blake256
166.75166.75167.25sha512
172.38172.38172.38T:blake64
173.00173.00176.88blake512
180.38180.38180.75sha3224
180.50180.75180.75sha3256
180.75180.88181.38sha3384
181.12181.50181.50sha3512
182.38182.50182.50shake256
182.75182.75182.88shake128
206.25206.62206.75T:keccakc1024
208.00208.38210.38T:keccakc768
207.62208.50208.75T:keccak
209.62209.88210.00T:keccakc448
209.88209.88210.00T:keccakc512
233.25233.25233.50T:skein10241024
328.12328.12328.62T:groestl256
406.38410.62415.62sha224
465.75467.50469.62sha384
581.75581.88583.88T:jh384
582.00582.12584.12T:jh512
581.12583.12585.50T:jh256
581.12583.25583.75T:jh224
680.75680.75683.00T:round3jh256
681.12681.12683.50T:round3jh512
812.88813.00814.25T:bblake256
1369.001375.381382.50T:groestl512