3 ms·
ARX constructions are also easier to tune for high software performance, and generally don't require special hardware support, because all CPUs already have fas
by dom0 9y ago
ARX constructions are also easier to tune for high software performance, and generally don't require special hardware support, because all CPUs already have fast ARX operations built in.
- tptacek 9y agoThat's true, but: * The CPUs that have better-than-ARX (like, fast constant time multiplication) can do better than ARX * Fast ARX ciphers are still slower than Intel AES hardware. I like Salsa/ChaCha more than AES, but there's a reason AES is so popular, and it's not incompetence or a conspiracy.