3 ms·
It certainly seems like he hasn't heard of a barrel shifter. That alone would make this pretty damn easy to implement in an ASIC. It's also assuming that the c
by SAI_Peregrinus 12y ago
It certainly seems like he hasn't heard of a barrel shifter. That alone would make this pretty damn easy to implement in an ASIC.
It's also assuming that the constants don't matter for the security of the hash function. They do.
- johnwhitech 12y agoAgreed, I'm not sure it's a good idea to change the # of shifts or any other constants. They are/should be optimized so Differential and Linear properties are minimal over the whole cipher, which is certainly a non-trivial optimization.