3 ms·
> Some customers (e.g. DOD) sent in clear, unsigned. They trusted their networks. Wow. I had no idea. This may be one of the dumbest things I've ever read. Enc
by light_hue_1 7y ago
> Some customers (e.g. DOD) sent in clear, unsigned. They trusted their networks.
Wow. I had no idea. This may be one of the dumbest things I've ever read. Encryption is free.
- ncmncm 7y agoDidn't use to be. VIA/centaur was the first to add AES instructions, later picked up by Intel and AMD. Its not free, but not expensive. A brilliant woman from, where, Slovenia? figured a way to use SSE instructions to encrypt just as fast as the built-in instructions, I think 2 cycles per byte. I guess DJB's ciphers run much the same way, nowadays.
- exikyut 7y agoIf you ever track down a citation for that I'd love to know more.
- ncmncm 7y agoMight be Emilia Kasper, now apparently at Google. Probably it was 2 cycles per bit, not byte. There are pretty good references starting from https://crypto.stanford.edu/vpaes/ https://crypto.stanford.edu/vpaes/ .
- ncmncm 7y agohttps://news.ycombinator.com/item?id=13364762 https://news.ycombinator.com/item?id=13364762 has interesting discussion.
- sneak 7y agoBandwidth for signature values in each packet is not. Additionally, as is pointed out down-thread, crypto wasn’t always free either.
- ncmncm 7y agoActually the signature was almost free, because it was also the nonce for the header, which was the nonce for the rest of the packet. IIRC.