VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of SHA-3 finalists on one machine: armeabi; Cortex-A17 (410fc0d1); 2014 Rockchip RK3288; 4 x 1800MHz; tinker, supercop-20240909

[Page version: 20241120 00:41:20]

eBASH (ECRYPT Benchmarking of All Submitted Hashes) is a project to measure the performance of hash functions. This page presents an excerpt of the full eBASH benchmark results. The excerpt contains SHA-2 and the SHA-3 finalists, including post-SHA-3 updates such as BLAKE2 and KangarooTwelve.

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each hash function (and each implementation).


Test results

Graphs: (bytes,cycles)
Cycles/byte for long messages
25%50%75%hash
12.2112.5312.76sha224
12.5512.5612.57T:blake2s
12.5212.5812.60sha256
16.5316.5416.56T:blake32
18.3318.6318.96sha384
19.3220.2620.72sha512
20.8020.8420.86T:bblake256
20.7920.8620.93T:k12
20.8620.8820.90blake256
22.6622.9323.14T:blake2b
28.1828.1928.20T:skein256256
30.1030.2630.43shake128
32.9033.0133.08T:skein512256
32.9933.0433.10T:skein512512
33.2933.5133.74blake512
34.3334.4934.67sha3224
36.4036.7037.00shake256
36.5836.7036.89sha3256
38.9038.9138.93T:round3jh512
38.7838.9739.18T:round3jh256
40.3440.3740.42T:blake64
41.9742.0542.16T:keccakc448
45.2645.2745.28T:keccakc512
46.2946.3146.34T:skein10241024
47.3947.4047.53T:keccak
47.3447.5948.06sha3384
56.7256.7356.77T:jh256
56.7156.7456.76T:jh384
56.6956.7456.79T:jh512
56.7256.7556.82T:jh224
57.9758.1058.14T:keccakc768
64.2964.5264.95sha3512
78.9178.9478.99T:keccakc1024
88.2890.1493.20T:groestl256
118.59?130.53?137.13?T:groestl512
Cycles/byte for 4096 bytes
25%50%75%hash
12.6512.6512.65T:blake2s
12.9412.9612.97sha256
13.6113.7413.82sha224
16.9316.9316.94T:blake32
20.5220.5420.57sha384
20.6521.1121.12sha512
21.3221.3221.33blake256
21.9521.9721.99T:k12
23.0023.0023.01T:bblake256
23.0023.1123.16T:blake2b
28.5428.5428.54T:skein256256
32.9132.9333.00shake128
33.7033.7033.73T:skein512512
33.7033.7133.73T:skein512256
35.1735.2235.29blake512
36.9937.0337.09sha3224
39.2039.2239.28sha3256
39.3139.3439.47shake256
39.6139.6139.62T:round3jh512
39.6139.6439.74T:round3jh256
41.8541.8641.88T:blake64
43.9343.9443.99T:keccakc448
46.9146.9146.92T:keccakc512
47.9847.9948.00T:skein10241024
48.8648.9049.10sha3384
49.2249.2249.29T:keccak
57.7157.7157.73T:jh256
57.7157.7157.72T:jh384
57.7157.7157.75T:jh224
57.7157.7257.74T:jh512
58.3858.4458.45T:keccakc768
66.8466.8867.03sha3512
80.6280.6280.65T:keccakc1024
92.2092.3993.85T:groestl256
131.79137.47137.81T:groestl512
Cycles/byte for 1536 bytes
25%50%75%hash
12.7912.8012.80T:blake2s
13.5813.5913.64sha256
15.6815.7615.86sha224
17.5817.5917.60T:blake32
22.0522.0522.07blake256
22.0922.3022.54sha512
23.3323.4323.47T:blake2b
23.3723.5223.59sha384
23.7723.8523.91T:k12
26.5926.6026.60T:bblake256
29.1229.1329.13T:skein256256
34.7934.8234.98T:skein512512
34.8334.8634.99T:skein512256
37.3537.4137.58shake128
37.9938.1438.19blake512
39.5539.5939.67sha3224
40.7740.7840.79T:round3jh512
40.7740.8740.90T:round3jh256
42.5842.6542.73sha3256
42.8342.9243.11shake256
44.3444.3444.36T:blake64
45.1145.1345.14T:keccakc448
48.6448.6448.65T:keccakc512
50.7750.7850.79T:skein10241024
50.9551.0651.28sha3384
52.3052.3352.36T:keccak
58.9858.9959.04T:keccakc768
59.0859.3359.34T:jh256
59.3259.3359.36T:jh224
59.3359.3459.35T:jh384
59.3359.3559.36T:jh512
70.7870.9371.20sha3512
83.2383.3183.44T:keccakc1024
96.0096.1297.55T:groestl256
142.84148.95149.33T:groestl512
Cycles/byte for 576 bytes
25%50%75%hash
13.1813.1913.19T:blake2s
15.2815.3015.44sha256
19.3219.3419.37T:blake32
21.1521.2421.39sha224
24.0124.0124.01blake256
23.7224.2024.27sha512
26.2526.4226.52T:k12
26.7726.8426.94T:blake2b
28.8429.0329.27sha384
30.6930.6930.73T:skein256256
36.1936.2036.21T:bblake256
37.7637.8238.15T:skein512512
37.8437.9138.02T:skein512256
41.6541.9442.14blake512
43.8843.8944.01T:round3jh256
43.8943.9143.99T:round3jh512
45.9046.0246.18shake128
46.4846.5446.60T:blake64
52.7252.8653.02sha3256
52.8252.9653.13sha3224
53.4153.5453.72shake256
54.6154.6154.63T:keccakc512
55.2255.2455.31T:keccak
56.0156.0256.09T:keccakc448
59.8160.0560.77sha3384
63.3263.4063.44T:skein10241024
63.6063.6163.68T:jh384
63.4263.6363.66T:jh224
63.6463.6763.88T:jh256
63.6863.7063.71T:jh512
64.1564.1664.35T:keccakc768
82.8983.0583.29sha3512
92.1292.1392.15T:keccakc1024
106.34106.49108.17T:groestl256
157.39165.32166.60T:groestl512
Cycles/byte for 64 bytes
25%50%75%hash
17.8117.8117.91T:blake2s
37.1737.3438.69sha256
41.2541.5941.88T:blake32
48.7748.7748.86blake256
50.3950.4250.77T:skein256256
50.9851.5251.83T:blake2b
53.7554.4254.94sha512
67.1268.6969.42T:k12
72.6272.6972.75T:skein512512
73.0073.3173.61T:skein512256
82.6182.8683.03T:round3jh256
82.6982.9883.39T:round3jh512
88.9790.2095.05blake512
90.1791.3992.81sha224
92.4892.5592.92T:blake64
104.80104.89105.06T:keccakc512
105.84106.16106.31T:keccakc1024
107.39108.44109.92sha384
112.20112.55112.69T:keccakc768
115.66115.77116.00T:keccak
117.97118.28118.64T:jh224
118.20118.42118.55T:jh512
118.08118.61118.89T:jh384
118.55118.67118.72T:jh256
118.38118.89119.05T:keccakc448
155.72157.47158.73sha3512
158.72158.73158.81T:bblake256
158.86160.16161.92sha3224
158.33160.47164.52sha3384
159.92161.91163.69sha3256
166.45167.97169.53shake256
170.28171.41172.50shake128
197.47197.66197.89T:skein10241024
237.03239.05241.55T:groestl256
408.97423.20427.53T:groestl512
Cycles/byte for 8 bytes
25%50%75%hash
142.38142.38142.62T:blake2s
190.62192.12202.62sha256
196.25196.75199.62T:blake32
227.00227.00227.75blake256
290.25290.75293.62T:skein256256
406.75408.00410.00T:blake2b
428.88439.00441.25sha512
537.25545.88552.62T:k12
583.62584.12584.62T:skein512512
588.12589.38591.50T:skein512256
617.88626.12639.38sha224
664.38665.00667.88T:round3jh256
665.62665.62668.00T:round3jh512
717.25722.75739.25blake512
744.62746.50749.75T:blake64
837.50837.50839.38T:keccakc512
848.00849.00851.00T:keccakc1024
853.88862.50881.50sha384
897.25899.00900.00T:keccakc768
924.38925.38926.50T:keccak
941.25942.12952.12T:jh224
943.00946.75949.50T:jh384
946.00946.75948.88T:jh256
945.62947.00948.75T:jh512
950.62951.00951.88T:keccakc448
1105.121105.251105.62T:bblake256
1175.381181.121201.62T:groestl256
1243.121250.121273.12sha3512
1272.251279.001292.25sha3224
1254.251281.121304.50sha3384
1271.381295.121309.00sha3256
1325.251331.381343.62shake256
1354.251363.751375.12shake128
1574.881575.621576.12T:skein10241024
3254.883411.503428.12T:groestl512