3 ms·
A GCM software implementation can be simple, fast, or secure against side-channel attacks: you can only pick two. OCB (RFC7253) is indeed much simpler and it r
by zimmerfrei 3y ago
A GCM software implementation can be simple, fast, or secure against side-channel attacks: you can only pick two.
OCB (RFC7253) is indeed much simpler and it really deserves more popularity.
- rainsford 3y agoI think it would have been far more popular if Rogaway hadn't kept it patented well beyond the point where it was clear patented crypto had no future. It's a pretty neat solution to the problem and the continued insistence on restricting its usage with a patent is one of the more baffling things I've seen in the crypto world.