4 ms·
Neat that it can also work as draft00/kyber v3 =) How hard would it be to support a fast Kyber 90's mode, without SHA-3? (I suppose you would have to break the
by tux3 3y ago
Neat that it can also work as draft00/kyber v3 =)
How hard would it be to support a fast Kyber 90's mode, without SHA-3? (I suppose you would have to break the abstraction for that one).
- FiloSottile 3y agoYeah, replacing the hash would take a fork. Note that this implementation spends only about 20% of CPU time in SHA-3, so the gain wouldn't be massive. That proportion would probably grow after optimizing the field implementation, but almost certainly not enough to make it worth using a non-standardized, less-tested mode.
- tux3 3y agoThat's fair. Thanks.