News for hackers. Stuff that matters.

A comment on The Sodium crypto library. Parent comment

Re:The Sodium crypto library by Asmod4n on Sunday March 05, 2017 @03:58PM (#13798577)
aes is hard(impossible?) to do in constant time without special cpu instructions.
[ Parent | on HN ]
Re:The Sodium crypto library by matthewaveryusa on Sunday March 05, 2017 @05:28PM (#13799204)
Some imbedded systems don't have sse3. But I guess if you're doing crypto on such hardware and using TLS then you'll want to use chachapoly and not aes-gcm. My question really focuses on it being bizarre that sha256 doesn't have a specialization for sse3.
[ Parent | on HN ]
Re:The Sodium crypto library by jedisct1 on Sunday March 05, 2017 @05:01PM (#13799022)
It's totally possible. Ditto for GCM. But it's slow, which defeats the whole point of using AES.
[ Parent | on HN ]