3 ms·
Yeah, chacha was an odd choice because AES is a lot faster on CPUs with acceleration. Just doing a few AES rounds would be a pretty fast, good PRNG.
by pclmulqdq 3y ago
Yeah, chacha was an odd choice because AES is a lot faster on CPUs with acceleration. Just doing a few AES rounds would be a pretty fast, good PRNG.
- dpwm 3y agoFor those interested in using AES with reduced rounds as a PRNG, it is covered in the paper "Parallel Random Numbers: As Easy as 1, 2, 3" by John Salmon et al. https://www.thesalmons.org/john/random123/papers/random123sc11.pdf https://www.thesalmons.org/john/random123/papers/random123sc...