VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 4 (a60f12); 2023 AMD Ryzen 7 7700; 8 x 3800MHz; hertz, supercop-20260330

[Page version: 20260418 07:16:17]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
2.022.022.02sha256
2.022.032.05sha224
2.322.332.36T:keccakc256treed2
2.772.802.84T:k12
3.073.103.12T:keccakc512treed2
3.523.523.53T:blake2b
4.124.224.28sha384
4.144.244.27sha512
4.524.564.58T:skein512512
4.564.564.57T:skein512256
4.774.794.85T:blake64
5.065.105.14blake512
5.245.275.34shake128
5.415.435.46T:bblake256
5.505.525.54T:blake2s
5.685.705.74T:groestl256
5.755.785.82T:keccakc448
5.815.815.82T:skein256256
5.935.965.99T:groestl512
6.096.116.17sha3224
6.126.156.18T:keccakc512
6.126.176.23T:skein10241024
6.166.196.26T:blake32
6.326.546.76sha3256
6.526.556.58T:keccak
6.546.576.61shake256
7.787.837.85blake256
8.118.148.20T:keccakc768
8.668.698.73sha3384
9.269.389.54T:jh256
9.269.389.50T:jh384
9.269.399.53T:jh224
9.289.439.56T:jh512
10.7410.9511.17T:round3jh512
10.6510.9811.18T:round3jh256
11.4611.5211.55T:keccakc1024
11.9812.0812.21sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
2.052.052.05sha256
2.252.252.26sha224
2.752.752.76T:keccakc256treed2
2.952.962.97T:k12
3.323.333.34T:keccakc512treed2
3.543.543.54T:blake2b
4.504.534.55sha384
4.524.544.55sha512
4.674.674.67T:skein512256
4.674.674.68T:skein512512
4.964.974.98T:blake64
5.295.305.31blake512
5.495.495.53shake128
5.525.525.52T:blake2s
5.885.885.89T:skein256256
5.975.975.99T:groestl256
5.985.985.99T:keccakc448
6.066.076.08T:bblake256
6.296.306.32T:blake32
6.346.346.37sha3224
6.386.396.40T:keccakc512
6.406.426.43T:skein10241024
6.486.496.49T:groestl512
6.786.796.80T:keccak
6.806.806.82shake256
6.776.856.88sha3256
7.937.957.96blake256
8.178.188.20T:keccakc768
8.718.718.72sha3384
9.529.559.58T:jh384
9.529.559.60T:jh224
9.529.569.61T:jh256
9.539.569.60T:jh512
11.0511.1111.19T:round3jh512
11.0511.1511.21T:round3jh256
11.7211.7311.74T:keccakc1024
12.3412.3412.40sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
2.102.112.11sha256
2.612.612.62sha224
3.183.203.21T:keccakc256treed2
3.203.203.21T:k12
3.553.563.56T:blake2b
3.693.713.72T:keccakc512treed2
4.854.864.86T:skein512256
4.854.864.91T:skein512512
5.055.085.12sha384
5.065.105.12sha512
5.255.275.31T:blake64
5.505.515.52T:blake2s
5.645.645.67blake512
5.875.885.89shake128
6.006.006.01T:skein256256
6.086.106.11T:keccakc448
6.386.396.43T:groestl256
6.436.436.43sha3224
6.456.496.50T:blake32
6.636.646.66T:keccakc512
6.786.806.84T:skein10241024
7.057.067.07shake256
7.127.137.14T:bblake256
7.007.157.30sha3256
7.177.187.20T:keccak
7.367.387.38T:groestl512
8.148.158.17blake256
8.238.238.26T:keccakc768
8.738.738.76sha3384
9.729.809.85T:jh384
9.749.819.89T:jh256
9.769.819.88T:jh224
9.739.829.88T:jh512
11.3011.3511.45T:round3jh512
11.3011.3911.51T:round3jh256
12.1012.1212.14T:keccakc1024
12.7212.7612.82sha3512
Cycles/byte for 576 bytes
25%50%75%hash
2.252.252.26sha256
3.553.563.58T:k12
3.573.583.59sha224
4.004.004.01T:blake2b
4.354.374.39T:keccakc256treed2
5.345.345.34T:skein512256
5.345.355.47T:skein512512
5.475.485.49T:blake2s
5.545.575.63T:blake64
5.715.755.77T:keccakc512treed2
5.855.905.97blake512
6.126.156.20sha512
6.176.216.22sha384
6.296.306.32shake128
6.326.326.32T:skein256256
7.017.027.07T:blake32
7.407.427.44T:keccak
7.457.487.51T:keccakc512
7.467.517.55T:keccakc448
7.567.597.62T:groestl256
7.837.847.87sha3224
7.957.967.97shake256
7.838.258.62sha3256
8.518.608.67T:skein10241024
8.678.698.71blake256
8.858.888.90T:keccakc768
9.359.369.37sha3384
9.659.679.70T:groestl512
10.3510.3510.37T:bblake256
10.3810.4710.54T:jh256
10.3710.4910.61T:jh384
10.4210.5110.65T:jh512
10.4210.5210.65T:jh224
12.0512.1612.35T:round3jh256
12.0112.1712.39T:round3jh512
13.3213.3613.41T:keccakc1024
13.9513.9814.00sha3512
Cycles/byte for 64 bytes
25%50%75%hash
4.114.144.17sha256
5.005.065.14T:blake2s
8.028.028.02T:blake2b
9.599.619.82T:k12
10.3410.3410.40T:skein256256
11.1611.1911.19T:skein512256
11.1811.2312.36T:skein512512
11.1811.4612.06T:blake64
12.0512.0712.28blake512
13.4313.5913.67T:blake32
14.5014.6714.92T:keccak
14.6414.6815.48sha3384
14.6314.7315.49shake128
14.6914.7515.51sha3512
14.7314.7815.60sha3224
14.6614.8215.06T:keccakc448
14.7314.8215.02T:keccakc768
14.7214.9015.05T:keccakc512
14.8014.9015.05T:keccakc1024
15.5715.6416.34shake256
15.6315.6715.73blake256
15.9516.0516.21sha224
14.91?16.69?18.62?sha3256
19.0219.3619.76T:jh384
19.1619.4219.72T:jh256
19.1319.4219.72T:jh512
19.2119.4419.73T:jh224
21.8221.9422.08sha384
21.8222.1422.59T:round3jh256
21.9422.2122.71T:round3jh512
22.1522.2522.33sha512
22.3722.5422.78T:groestl256
26.5426.7627.03T:keccakc512treed2
26.7626.9027.68T:skein10241024
26.9527.1127.30T:keccakc256treed2
39.0839.2539.42T:groestl512
50.0250.1150.62T:bblake256
Cycles/byte for 8 bytes
25%50%75%hash
25.1225.5125.79sha256
48.4548.8849.30T:blake2s
60.7560.7561.12T:skein256256
62.2562.2562.25T:blake2b
62.8663.8666.55T:blake32
70.0570.3170.42blake256
75.7476.2877.29T:k12
90.0291.4896.75T:blake64
91.5691.6291.62T:skein512256
91.8891.8899.75T:skein512512
96.8997.45102.55blake512
113.18113.72114.57sha224
115.00116.15117.15T:keccak
116.51116.88123.00sha3384
116.35117.03118.20T:keccakc768
116.71117.04123.30sha3224
116.88117.06123.11shake128
116.92117.56123.39sha3512
116.94117.70118.28T:keccakc1024
117.05117.99119.31T:keccakc512
117.39118.26119.15T:keccakc448
123.55123.88129.55shake256
118.15?131.90?147.64?sha3256
137.64138.27139.05T:groestl256
155.46156.12158.10T:jh512
155.83156.64162.50T:jh224
155.93158.88160.35T:jh256
157.24159.92162.35T:jh384
175.01175.94176.91sha384
177.69178.70179.65sha512
180.46183.19186.20T:round3jh256
182.51185.47187.20T:round3jh512
212.83214.31216.72T:keccakc512treed2
214.06215.14218.41T:skein10241024
214.08215.40216.94T:keccakc256treed2
270.07270.80271.91T:groestl512
329.74330.26330.85T:bblake256