3 ms·
aes is hard(impossible?) to do in constant time without special cpu instructions.
by Asmod4n 10y ago
aes is hard(impossible?) to do in constant time without special cpu instructions.
- jedisct1 10y agoIt's totally possible. Ditto for GCM. But it's slow, which defeats the whole point of using AES.
- matthewaveryusa 10y agoSome imbedded systems don't have sse3. But I guess if you're doing crypto on such hardware and using TLS then you'll want to use chachapoly and not aes-gcm. My question really focuses on it being bizarre that sha256 doesn't have a specialization for sse3.