VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Zen 3 (a20f10); 2020 AMD Ryzen 5 5600X; 6 x 3700MHz; unstable; spawn, supercop-20231215

[Page version: 20240724 17:32:27]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Implementation notes

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
1.631.631.70sha224
1.611.641.64sha256
2.532.552.58T:k12
1.35?2.80?2.82?T:blake2b
3.163.223.25T:keccakc256treed2
3.433.453.50sha512
3.413.493.52sha384
3.633.673.67T:skein512512
3.633.743.78T:skein512256
3.79?3.81?10.79?T:blake64
4.104.174.25blake512
4.174.284.32T:keccakc512treed2
4.284.324.37T:blake2s
4.304.374.46T:bblake256
4.414.504.57T:skein10241024
4.614.664.70T:skein256256
4.684.724.79shake128
5.335.405.47T:blake32
5.405.445.53T:keccakc448
5.445.475.53sha3224
5.465.495.56T:groestl256
5.855.875.94sha3256
5.855.895.98shake256
5.826.006.05T:keccakc512
6.056.146.21blake256
6.116.216.27T:keccak
7.577.667.77T:groestl512
7.707.737.82T:keccakc768
7.88?7.90?19.53?sha3384
9.279.389.45T:jh256
9.309.399.45T:jh224
9.389.459.54T:jh512
9.419.459.50T:jh384
10.3210.4110.51T:round3jh256
10.48?10.53?12.16?T:round3jh512
10.7510.8010.91T:keccakc1024
10.8911.0411.11sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
1.671.681.68sha256
1.861.861.89sha224
2.692.702.71T:k12
2.802.832.83T:blake2b
3.723.743.74T:skein512512
3.743.783.78T:skein512256
3.773.783.79T:keccakc256treed2
3.813.823.83sha512
3.803.833.83sha384
3.98?3.99?7.45?T:blake64
4.304.314.33T:blake2s
4.304.344.36blake512
4.574.624.62T:keccakc512treed2
4.704.724.75T:skein10241024
4.714.724.72T:skein256256
4.944.964.98T:bblake256
4.944.964.99shake128
5.445.465.49T:blake32
5.665.675.72T:keccakc448
5.695.705.73sha3224
5.745.755.77T:groestl256
6.116.126.12sha3256
6.126.126.15shake256
6.076.156.17T:keccakc512
6.236.276.30blake256
6.416.466.49T:keccak
7.827.837.88T:keccakc768
7.88?7.89?13.70?sha3384
8.078.088.12T:groestl512
9.489.539.55T:jh256
9.539.549.57T:jh224
9.569.589.59T:jh384
9.619.639.67T:jh512
10.5410.5810.60T:round3jh256
10.6010.6211.42T:round3jh512
11.0211.0411.08T:keccakc1024
11.1511.1911.20sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
1.711.731.73sha256
2.222.242.24sha224
2.842.842.87T:blake2b
2.912.942.94T:k12
3.853.853.88T:skein512256
3.853.883.88T:skein512512
4.224.264.29T:blake64
4.314.344.36T:blake2s
4.364.384.43T:keccakc256treed2
4.384.414.41sha384
4.384.414.41sha512
4.604.624.65blake512
4.844.844.87T:skein256256
4.995.015.06T:skein10241024
5.155.185.18T:keccakc512treed2
5.285.305.32shake128
5.595.595.61T:blake32
5.785.815.81T:keccakc448
5.815.815.83sha3224
5.885.935.97T:bblake256
6.196.246.31T:groestl256
6.296.346.34T:keccakc512
6.346.346.36shake256
6.346.366.36sha3256
6.486.506.53blake256
6.846.876.89T:keccak
7.807.887.93sha3384
8.008.028.05T:keccakc768
8.798.848.86T:groestl512
9.739.809.83T:jh256
9.789.809.83T:jh224
9.789.809.83T:jh384
9.889.929.95T:jh512
10.7910.8410.89T:round3jh256
10.7910.8410.89T:round3jh512
11.3911.4211.47T:keccakc1024
11.4411.4911.54sha3512
Cycles/byte for 576 bytes
25%50%75%hash
1.861.861.86sha256
3.153.213.21sha224
3.213.213.21T:blake2b
3.283.343.34T:k12
4.184.184.18T:skein512256
4.184.244.24T:skein512512
4.304.304.30T:blake2s
4.504.564.62T:blake64
5.015.015.01blake512
5.145.145.20T:skein256256
5.595.595.65sha384
5.595.655.72sha512
5.655.725.72shake128
5.915.976.04T:keccakc256treed2
6.046.106.10T:blake32
6.366.366.42T:skein10241024
6.947.007.00blake256
7.007.077.07T:keccakc512
7.007.077.07sha3224
7.077.077.07sha3256
7.077.077.13shake256
7.077.077.19T:keccakc448
7.077.137.13T:keccak
7.327.327.39T:groestl256
8.038.098.09T:keccakc512treed2
8.418.418.48sha3384
8.678.678.74T:bblake256
8.868.938.93T:keccakc768
10.2810.3410.34T:groestl512
10.4710.4710.47T:jh224
10.4710.4710.53T:jh256
10.4710.4710.53T:jh384
10.6010.6610.73T:jh512
11.5011.6311.69T:round3jh512
11.5611.6311.69T:round3jh256
12.5312.5912.59sha3512
12.5912.5912.65T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
4.054.054.05T:blake2s
4.054.054.05sha256
5.786.366.36T:blake2b
8.098.678.67T:skein512256
8.098.678.67T:skein512512
8.679.259.25T:skein256256
9.259.259.25T:k12
9.25?9.83?10.41?T:blake64
10.9811.5611.56blake512
12.1412.1412.72T:blake32
12.7213.3013.30T:keccakc1024
13.3013.3013.30T:keccakc448
13.3013.3013.30sha3224
13.3013.3013.30sha3256
13.3013.3013.30sha3384
13.3013.3013.30sha3512
13.3013.3013.88T:keccak
13.3013.3013.88T:keccakc512
13.3013.3013.88shake128
13.3013.3013.88shake256
13.8813.8813.88blake256
15.6115.6116.19T:keccakc768
15.61?16.19?21.39?sha224
19.0819.0819.66T:jh224
19.0819.0819.66T:jh384
19.0819.6619.66T:jh256
19.6619.6619.66T:jh512
20.8120.8120.81T:skein10241024
20.8121.3921.39T:round3jh256
20.8121.3921.39T:round3jh512
21.3921.9721.97sha512
21.9721.9721.97T:groestl256
21.9722.5522.55sha384
31.2231.8031.80T:groestl512
35.8436.4237.00T:keccakc256treed2
37.5838.1638.16T:keccakc512treed2
42.2042.2042.78T:bblake256
Cycles/byte for 8 bytes
25%50%75%hash
18.50?18.50?23.12?sha256
37.00?37.00?41.62?T:blake2s
46.2550.8850.88T:blake2b
55.5055.5055.50T:blake32
55.5055.5055.50T:skein256256
64.7564.7564.75blake256
64.7569.3869.38T:skein512256
64.7569.3869.38T:skein512512
74.0074.0074.00T:k12
74.00?78.62?83.25?T:blake64
83.2583.2592.50blake512
101.75106.38106.38sha3224
101.75106.38106.38sha3256
101.75106.38106.38sha3384
106.38106.38106.38T:keccakc1024
106.38106.38106.38T:keccakc512
106.38106.38106.38sha3512
106.38106.38106.38shake128
106.38106.38106.38shake256
106.38111.00111.00T:keccak
106.38111.00111.00T:keccakc448
111.00111.00115.62sha224
129.50129.50129.50T:groestl256
129.50129.50134.12T:keccakc768
157.25157.25157.25T:jh256
157.25157.25157.25T:jh384
157.25157.25161.88T:jh224
157.25161.88161.88T:jh512
166.50166.50166.50T:skein10241024
171.12175.75175.75T:round3jh256
171.12175.75175.75T:round3jh512
175.75175.75175.75sha512
180.38?180.38?235.88?sha384
226.62231.25231.25T:groestl512
282.12286.75286.75T:bblake256
286.75291.38296.00T:keccakc256treed2
300.62300.62305.25T:keccakc512treed2