3 ms·
(disclaimer, I'm one of the Salsa20 in TLS draft authors). Note that the suggestion of using Salsa20 is to replace RC4 not only to get better performance, but
by JoachimS 13y ago
(disclaimer, I'm one of the Salsa20 in TLS draft authors).
Note that the suggestion of using Salsa20 is to replace RC4 not only to get better performance, but because RC4 is broken (as you know).
Salsa20 (and ChaCha) can be implemented on constrained devices and reach RC4 like performance. On modern architectures the algorithms word based functionality better utilise the HW than RC4 and can reach better performance.
Yes, AES with HW-support such as AES-NI can provide really good performance too. But then we _only_ have AES (and DES/3DES). Do we want to reduce SSL, TLS to a single symmetric encryption primitive? And no stream ciphers?