3 ms·
These "lightweight" algorithms aren't just low resource usage, they're tuned for small messages. CAESAR also had a "high-performance" category, for AEADs optimi
by SAI_Peregrinus 4y ago
These "lightweight" algorithms aren't just low resource usage, they're tuned for small messages. CAESAR also had a "high-performance" category, for AEADs optimized for large messages and streaming data.
If you're limited to small packets on rare occasions and want to have minimal battery drain (e.g. a battery-powered LoRaWAN-style sensor) a "lightweight" algorithm like Ascon is good. For most "normal" uses a "high-performance" algorithm like AEGIS is good, as are AES-GCM, AES-OCB, AES-GCM-SIV, and ChaCha20-Poly1305. When you'd pick which cipher is rather complicated to answer.
- bsder 4y agoThe "lightweight" category is also apparently much better at resisting side channel attacks and is also much easier to do cryptanalysis on. It's not always clear in what ways the non-"lightweight" categories are better other than having bigger keys and state.
- GoblinSlayer 4y agoSponge cipher is not seekable and as a consequence not parallelizable.
- le-mark 4y agoThis; not many 64 bit MCUs out there, or with SIMD pipelines. Although RISCV could change that.