News for hackers. Stuff that matters.

A comment on Pointer Authentication. Parent comment

Re:Pointer Authentication by SAI_Peregrinus on Monday December 16, 2019 @10:34AM (#21803746)
SHA3 is designed to be quite fast in hardware, there just isn't much hardware that accelerates it yet. Blake2 is faster in software, but that software is (as you note) much slower than SHA2's hardware implementations. So for existing systems SHA2 is the best option. Eventually SHA3 will probably be widespread and SHAKE128 with appropriately chosen output size will be the best choice.
[ Parent | on HN ]
Re:Pointer Authentication by rurban on Monday December 16, 2019 @05:18PM (#21807992)
SHA2 is by far not the best option for ptrauth. The best option is HW and API dependant. There are dozens of better options. I recently included most secure hashes with tons of variants into https://github.com/rurban/smhasher/blob/master/README.md#smh... SHA3 would be atrocious. Something like fletcher2 or wyhash seem to be best.
[ Parent | on HN ]