3 ms·
But isn't sha256 hardware accelerated on most modern intel CPU? Is it faster than a hardware accelerated sha256?
by cm2187 5y ago
But isn't sha256 hardware accelerated on most modern intel CPU? Is it faster than a hardware accelerated sha256?
- flatiron 5y agoNah. It’s like chacha it’s only faster than aes on non equipped cpus. I still use sha2 everywhere.
- oconnor663 5y agoThe performance story here is more complicated than you might think. ChaCha and AES (in the typical AES-CTR or AES-GCM modes) have a lot in common structurally. In both cases, different blocks can be computed in parallel. Software and hardware implementations can both take advantage of that parallelism to improve performance. The story is different with SHA-2, which is entirely serial by design. There's no possibility of parallelism between different blocks of a single SHA-2 input. That means that there's little incentive to create a parallelized hardware implementation of SHA-2, and I'm not aware of any. In contrast, BLAKE3 is more like AES-CTR and ChaCha in that (given a long enough input) it can take full advantage of any degree of parallelism. For this reason, given reasonably modern SIMD support like AVX-2, BLAKE3 tends to be faster than hardware-accelerated SHA-256, even before multithreading gets into the picture.
- loeg 5y ago> isn't sha256 hardware accelerated on most modern intel CPU No. Most Intel CPUs lack SHA-NI extensions. It looks like they may have finally started adding it to their 2020+ mainstream CPUs, but for a long time it was only present on their low-end Atom and similar CPUs. AMD CPUs have all had SHA-NI support since Zen. https://en.wikipedia.org/wiki/Intel_SHA_extensions https://en.wikipedia.org/wiki/Intel_SHA_extensions