VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Haswell+AES (306c3); 2013 Intel Core i7-4770; 4 x 3400MHz; speed2supercop, supercop-20251222

[Page version: 20260217 20:24:40]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements (or StQ1 starting with supercop-20260214), the median of many speed measurements (or StQ2 starting with supercop-20260214), the third quartile of many speed measurements (or StQ3 starting with supercop-20260214), and the name of the primitive. Measurements with large interquartile range (or stabilized interquartile range) are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
3.063.073.08T:blake2b
3.903.913.94T:k12
4.72?4.99?5.44?T:keccakc256treed2
5.235.275.34sha512
5.285.335.36T:bblake256
5.285.335.41sha384
5.345.345.35T:blake2s
5.305.445.51T:skein512256
5.425.475.51T:skein512512
5.805.845.91T:blake64
6.306.376.48blake512
6.526.546.54T:blake32
6.34?6.62?7.18?T:keccakc512treed2
6.946.976.99shake128
7.467.507.54T:skein10241024
7.597.607.62blake256
7.677.727.78sha256
7.707.777.80sha224
7.767.807.85T:skein256256
7.83?8.30?9.06?T:keccakc448
8.308.358.38sha3224
8.698.718.74sha3256
8.678.718.73shake256
8.868.918.93T:groestl256
9.079.109.12T:keccakc512
9.649.679.72T:keccak
11.6711.7211.77T:groestl512
11.8611.9211.99sha3384
12.1212.1412.19T:keccakc768
13.0213.0513.11T:jh224
13.0313.0613.13T:jh256
13.0413.1013.21T:jh512
13.0513.1213.24T:jh384
15.3015.3515.42T:round3jh512
15.5515.6015.66T:round3jh256
16.4316.4816.51sha3512
16.9016.9717.03T:keccakc1024
Cycles/byte for 4096 bytes
25%50%75%hash
3.083.093.09T:blake2b
4.124.124.13T:k12
5.345.345.35T:blake2s
5.515.525.54sha512
5.525.545.57T:skein512256
5.555.575.58T:skein512512
5.885.885.89T:bblake256
5.895.906.12T:keccakc256treed2
5.905.925.95sha384
6.066.076.09T:blake64
6.566.586.62blake512
6.666.676.67T:blake32
7.137.147.41T:keccakc512treed2
7.297.297.30shake128
7.727.727.73blake256
7.787.807.81T:skein10241024
7.867.877.88T:skein256256
8.238.258.27sha256
8.258.268.27sha224
8.608.618.99T:keccakc448
8.648.668.66sha3224
9.029.029.03sha3256
9.019.039.03shake256
9.329.339.34T:groestl256
9.419.429.43T:keccakc512
10.0010.0010.02T:keccak
11.9111.9211.95sha3384
12.1712.1812.20T:keccakc768
12.7612.7712.78T:groestl512
13.2813.2913.31T:jh224
13.2913.3013.32T:jh256
13.3113.3313.36T:jh512
13.3213.3413.37T:jh384
15.5915.6115.62T:round3jh512
15.8315.8515.86T:round3jh256
16.7516.7616.77sha3512
17.2717.2817.30T:keccakc1024
Cycles/byte for 1536 bytes
25%50%75%hash
3.103.113.11T:blake2b
4.464.474.49T:k12
5.345.345.35T:blake2s
5.665.725.78T:skein512256
5.725.735.75T:skein512512
5.895.895.96sha512
6.456.486.49T:blake64
6.806.816.83T:bblake256
6.836.857.06T:keccakc256treed2
6.886.896.89T:blake32
6.906.936.96blake512
6.916.956.98sha384
7.837.837.85shake128
7.937.947.95blake256
7.927.958.23T:keccakc512treed2
7.988.018.02T:skein256256
8.268.288.30T:skein10241024
8.748.759.11T:keccakc448
8.778.788.80sha3224
9.059.099.12sha224
9.099.129.16sha256
9.359.369.37sha3256
9.359.369.37shake256
9.749.759.76T:keccakc512
9.9910.0110.03T:groestl256
10.5410.5510.58T:keccak
11.9211.9411.96sha3384
12.2012.2412.25T:keccakc768
13.6613.6913.73T:jh384
13.6713.6913.71T:jh224
13.6513.6913.71T:jh256
13.6613.6913.74T:jh512
14.5214.5414.56T:groestl512
15.9916.0216.05T:round3jh512
16.2516.2716.31T:round3jh256
17.2417.2517.27sha3512
17.8017.8117.83T:keccakc1024
Cycles/byte for 576 bytes
25%50%75%hash
3.513.533.62T:blake2b
4.964.974.99T:k12
5.345.355.35T:blake2s
6.186.196.31T:skein512256
6.206.226.24T:skein512512
6.436.446.49sha512
6.736.756.80T:blake64
7.227.307.38blake512
7.497.507.51T:blake32
8.358.388.42T:skein256256
8.448.478.49shake128
8.518.538.56blake256
8.949.009.03sha384
9.359.389.71T:keccakc256treed2
9.539.559.57T:bblake256
10.3310.3510.45T:skein10241024
10.4310.4510.47sha3256
10.5010.5110.55shake256
10.6510.6710.72sha3224
10.6510.7411.11T:keccakc448
10.8010.8210.85T:keccak
10.8810.9010.95T:keccakc512
11.2811.3111.34sha224
11.2711.3311.36sha256
11.8311.8611.89T:groestl256
12.2612.2912.71T:keccakc512treed2
12.7212.7512.81sha3384
13.0313.0613.15T:keccakc768
14.6014.6314.65T:jh256
14.6214.6514.69T:jh224
14.6214.6614.69T:jh512
14.6214.6714.72T:jh384
17.0917.1217.17T:round3jh512
17.3117.3517.38T:round3jh256
17.8117.8417.89T:groestl512
18.8518.8918.92sha3512
19.4519.5219.59T:keccakc1024
Cycles/byte for 64 bytes
25%50%75%hash
5.315.385.38T:blake2s
6.626.696.75T:blake2b
12.0012.1212.19T:skein512512
12.5012.7512.75T:skein512256
13.1913.1913.50T:k12
13.1913.2513.38T:skein256256
13.3813.6213.94T:blake64
14.0014.0014.19sha512
14.6214.6214.81blake512
15.1915.2515.38T:blake32
16.3116.4416.56blake256
19.4419.5619.81sha3256
19.5019.6219.75sha3384
19.5619.6219.75sha3224
19.6219.6919.81sha3512
19.5619.8120.50T:keccakc448
19.8819.9420.06T:keccakc1024
19.8819.9420.06shake256
19.9420.0020.12T:keccak
19.9420.0020.12T:keccakc768
20.0020.0620.25T:keccakc512
20.0020.1920.31shake128
26.6926.8127.06T:jh256
26.7526.9427.25T:jh224
26.7527.0027.19T:jh512
26.9427.1227.25T:jh384
31.2531.5631.94T:round3jh512
31.3131.5631.75T:round3jh256
32.6932.8132.94T:skein10241024
35.0035.1235.88T:groestl256
35.6935.8135.94sha384
38.5038.6938.94sha256
38.6938.7538.94sha224
43.2543.3143.38T:bblake256
57.4457.6259.19T:keccakc512treed2
57.5657.6259.62T:keccakc256treed2
66.5066.8867.31T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
47.5047.5048.00T:blake2s
53.0053.5056.00T:blake2b
72.5073.0075.50blake256
73.0074.0074.50T:skein256256
75.5076.0078.00T:blake32
95.5096.5097.50T:skein512512
99.00100.50102.00T:skein512256
101.00101.50104.50sha512
104.50105.00107.50T:k12
107.50109.00113.50T:blake64
115.50117.50119.50blake512
153.50155.00156.50sha3256
154.50155.00155.50sha3384
154.00155.50156.50sha3224
155.00156.00157.00sha3512
157.50158.50159.50shake256
158.50159.50160.50shake128
159.00159.50160.50T:keccakc1024
160.00160.50161.50T:keccakc768
160.00161.00162.50T:keccakc512
159.50162.50165.00T:keccakc448
160.50163.00165.50T:keccak
210.00213.50216.50T:groestl256
217.50218.50220.50T:jh256
218.00219.00221.50T:jh384
218.00219.50221.50T:jh512
218.50219.50221.50T:jh224
235.50236.50238.50sha224
236.50238.50242.00sha256
255.50257.00258.00T:round3jh512
255.50257.00259.50T:round3jh256
262.00263.00264.50T:skein10241024
285.50286.50289.00T:bblake256
285.50287.00288.00sha384
459.50461.00476.00T:keccakc512treed2
460.50462.00477.50T:keccakc256treed2
532.00534.00536.00T:groestl512