3 ms·

Please point me to a few more. AES-GCM seemed the best available choice for us, after much discussion, and some scrutiny from third parties. I hear you on tim

Please point me to a few more. AES-GCM seemed the best available choice for us, after much discussion, and some scrutiny from third parties. I hear you on timing issues: we may work on those, though when it comes to AVR there is no cache! B^>

tptacek 9y ago
In pure software, the conventional choice for an AEAD is some variant of Salsa20 and Poly1305 (usually abbreviated as "Chapoly"). They're designed to be fast in software without table lookups. The cache thing is a good point!