3 ms·

This site compares the lwc finalists to chachapoly https://rweather.github.io/lwc-finalists/performance_avr.html https://rweather.github.io/lwc-finalists/perfor

• GoblinSlayer 4y ago
  What is expected security margin? Chacha20 is many orders of magnitude more than impossibly strong, cf. AES which is as safe as needed and not safer.
  • tptacek 4y ago
    This is in the paper. The currently best cryptanalytic attacks on the Ascon authenticated encryption (excluding misuse scenarios) can recover the secret key with a time complexity of about 2 104 only if the initialization is reduced to 7 of 12 rounds, which corresponds to a security margin of 42%
    • GoblinSlayer 4y ago
      There's an attack on 128-bit Salsa7 with time complexity 2^109, and an attack on 128-bit ChaCha6 with 2^107.
• ilyt 4y ago
  ...on 8 bit. On 32 bit the difference is much smaller and SLOWER on the IOT darling ESP32. This whole thing seems entirely not worth it thb