VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: amd64; Goldmont (506c9); 2016 Intel Celeron J3455; 4 x 1500MHz; wooden, supercop-20250922

[Page version: 20251001 12:36:44]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
4.014.034.06sha256
4.084.104.12sha224
5.635.655.67T:blake2s
6.176.196.23T:blake2b
6.386.406.42T:k12
7.197.217.23T:blake32
7.457.467.48T:bblake256
8.318.328.34T:skein512512
8.318.338.34T:skein512256
8.328.408.59blake256
8.568.578.60T:keccakc256treed2
9.069.089.09T:blake64
9.339.349.35T:skein256256
9.559.569.58blake512
11.5111.5411.57T:keccakc512treed2
11.8311.8411.86sha512
11.8211.8611.90sha384
12.4412.4612.49shake128
12.6212.6312.65T:skein10241024
14.0414.0614.08T:keccakc448
14.5514.5714.59sha3224
14.8515.0415.43T:groestl256
15.1015.1215.14T:keccakc512
15.4315.4515.47shake256
15.5815.6115.62sha3256
16.0316.0616.10T:keccak
19.9620.0020.01T:keccakc768
20.3420.3720.43T:jh224
20.4020.4120.42T:jh256
20.4120.4220.43T:jh512
20.4220.4220.43T:jh384
20.6020.6120.62sha3384
21.6921.7221.80T:groestl512
23.0323.0323.04T:round3jh256
23.0423.0423.04T:round3jh512
28.4628.4828.50T:keccakc1024
28.7628.7828.80sha3512
Cycles/byte for 4096 bytes
25%50%75%hash
4.104.114.12sha256
4.234.234.24sha224
5.655.655.65T:blake2s
6.206.206.22T:blake2b
6.746.756.75T:k12
7.397.407.40T:blake32
8.118.118.12T:bblake256
8.488.498.49T:skein512256
8.558.568.56T:skein512512
8.598.598.68blake256
9.419.429.42T:blake64
9.469.469.46T:skein256256
9.919.929.92blake512
10.1310.1310.14T:keccakc256treed2
12.3112.3212.32sha512
12.3112.3312.34sha384
12.3812.3912.39T:keccakc512treed2
13.0113.0113.02shake128
13.1113.1113.11T:skein10241024
14.6914.6914.69T:keccakc448
15.0915.1015.10sha3224
15.7215.7315.73T:keccakc512
15.8515.8516.04T:groestl256
16.0716.0716.08shake256
16.1016.1116.11sha3256
16.6716.6816.69T:keccak
20.1120.1120.12T:keccakc768
20.6420.6420.65sha3384
20.7120.7120.74T:jh224
20.7420.7420.75T:jh256
20.7620.7620.76T:jh512
20.7620.7620.76T:jh384
23.2323.2323.26T:groestl512
23.4023.4023.40T:round3jh256
23.4023.4023.41T:round3jh512
29.0529.0529.06T:keccakc1024
29.3329.3329.34sha3512
Cycles/byte for 1536 bytes
25%50%75%hash
4.234.234.24sha256
4.424.434.45sha224
5.655.665.66T:blake2s
6.196.206.21T:blake2b
7.317.327.33T:k12
7.707.727.72T:blake32
8.758.768.77T:skein512256
8.898.908.98blake256
8.938.958.96T:skein512512
9.199.209.21T:bblake256
9.659.669.67T:skein256256
9.979.989.99T:blake64
10.4910.5110.52blake512
11.7611.7711.79T:keccakc256treed2
13.0913.1013.12sha384
13.0913.1013.12sha512
13.7713.7913.81T:keccakc512treed2
13.8913.9013.92T:skein10241024
13.9113.9213.93shake128
15.0415.0515.07T:keccakc448
15.2815.3015.31sha3224
16.4016.4116.42T:keccakc512
16.6616.6716.68sha3256
16.6916.7116.74shake256
17.1917.2117.38T:groestl256
17.6817.7017.73T:keccak
20.2920.3020.33T:keccakc768
20.6920.7020.71sha3384
21.2721.2821.30T:jh224
21.3021.3021.32T:jh256
21.3121.3221.33T:jh512
21.3221.3321.33T:jh384
24.0124.0224.03T:round3jh256
24.0124.0324.03T:round3jh512
25.7125.7425.76T:groestl512
29.9930.0030.01T:keccakc1024
30.2330.2430.26sha3512
Cycles/byte for 576 bytes
25%50%75%hash
4.584.584.59sha256
4.954.954.96sha224
5.665.675.68T:blake2s
6.946.967.00T:blake2b
8.118.118.13T:k12
8.508.528.54T:blake32
9.489.509.51T:skein512256
9.649.689.82blake256
9.979.9910.00T:skein512512
10.1210.1410.15T:skein256256
10.4910.5110.52T:blake64
11.0011.0311.06blake512
12.1312.1512.18T:bblake256
13.8913.9113.91sha384
13.9113.9313.94sha512
14.9314.9514.96shake128
16.1316.1516.17T:keccakc256treed2
17.5517.6517.68T:skein10241024
18.5318.5518.57sha3224
18.5718.5918.61sha3256
18.5818.6018.62T:keccakc448
18.5818.6218.67shake256
18.6318.6518.67T:keccak
18.6918.7118.73T:keccakc512
20.8020.8521.01T:groestl256
21.4121.4721.50T:keccakc512treed2
22.1122.1422.17T:keccakc768
22.1522.1922.20sha3384
22.7722.8022.82T:jh224
22.7822.8122.83T:jh256
22.8022.8222.85T:jh512
22.8022.8322.85T:jh384
25.6425.6725.69T:round3jh256
25.6425.6725.69T:round3jh512
29.9029.9429.96T:groestl512
32.9132.9532.98T:keccakc1024
33.1133.1633.19sha3512
Cycles/byte for 64 bytes
25%50%75%hash
5.725.785.84T:blake2s
9.129.129.16sha256
11.6911.6911.72sha224
12.8412.8812.91T:blake2b
16.4116.6916.91T:skein256256
18.4418.4718.69T:skein512256
18.9118.9418.97T:blake32
19.5019.6219.69blake256
21.1221.1621.75T:blake64
21.6221.6621.72T:k12
22.4722.6922.75blake512
22.8822.8822.94T:skein512512
29.8129.8129.84sha384
30.1230.1630.19sha512
33.9434.0034.06sha3224
34.5034.5934.69sha3384
34.6934.7234.78sha3256
34.7234.7534.81shake256
34.7534.7834.84sha3512
34.8134.8434.94shake128
36.1636.2236.28T:keccakc1024
38.7238.7838.81T:keccak
38.8438.9138.97T:keccakc768
38.8838.9438.97T:keccakc448
39.1239.1939.22T:keccakc512
41.3141.3441.38T:jh256
41.4441.4741.56T:jh512
41.5041.5341.62T:jh384
41.7841.8841.97T:jh224
46.1946.2546.56T:round3jh512
46.4746.5346.62T:round3jh256
49.4449.5349.62T:bblake256
55.6255.6955.75T:skein10241024
66.7566.9167.09T:groestl256
94.6994.7894.91T:groestl512
99.2299.3499.47T:keccakc256treed2
100.66100.72100.88T:keccakc512treed2
Cycles/byte for 8 bytes
25%50%75%hash
44.7544.7544.75sha256
50.0050.2550.25T:blake2s
62.5063.0063.25sha224
90.2591.0092.25blake256
93.5094.5095.25T:skein256256
101.25101.50101.75T:blake32
102.75103.00103.00T:blake2b
146.75147.25147.50T:skein512256
167.25167.50167.75T:blake64
172.75173.00173.25T:k12
180.50180.75180.75blake512
182.00182.00182.50T:skein512512
235.25235.75236.00sha384
237.75238.00238.25sha512
269.00269.50270.00sha3224
274.50275.00275.50sha3256
275.00275.50277.25sha3384
277.00277.75278.75shake128
277.50277.75278.25sha3512
277.25278.50279.00shake256
287.25288.50289.25T:keccakc1024
309.75310.25310.75T:keccakc768
311.25311.75312.50T:keccak
311.50311.75312.25T:keccakc512
312.75313.00313.25T:keccakc448
330.25331.25332.00T:jh256
330.50331.25332.75T:bblake256
331.50331.75332.50T:jh512
332.25332.75333.25T:jh384
339.25339.50340.50T:jh224
366.75367.50370.25T:round3jh256
367.25368.50370.75T:round3jh512
408.75409.75410.75T:groestl256
445.50446.25446.75T:skein10241024
766.00767.25768.00T:groestl512
794.75795.75796.75T:keccakc256treed2
801.25803.25806.50T:keccakc512treed2