3 ms·
I'm not sure what the point of tenured crypto researchers patenting their crypto is. The only thing it guarantees is that your crypto is barred from standards b
by formerly_proven 5y ago
I'm not sure what the point of tenured crypto researchers patenting their crypto is. The only thing it guarantees is that your crypto is barred from standards because crypto is so extremely widespread that collecting royalties is simply impossible. AES-OCB is a prime example of this. It was faster than GCM and not quite as brittle, so many people would've liked to use it - but it was patented. No one used it. It now has a non-commercial FOSS patent grant, which still means no one uses it.
- rdpintqogeogsaa 5y agoRogaway has abandoned his patents on OCB[0]. But by now, AES-GCM has hardware support and is ubiquitous. Nowadays, misuse resistance and resistance against partitioning oracle attacks are things you'd (also) expect from a modern AEAD design. AEGIS outperforms AES-OCB. The AEAD horse has already left the barn; there is no longer any point in closing the door. [0] https://mailarchive.ietf.org/arch/msg/cfrg/qLTveWOdTJcLn4HP3ev-vrj05Vg/ https://mailarchive.ietf.org/arch/msg/cfrg/qLTveWOdTJcLn4HP3...