News for hackers. Stuff that matters.

A comment on BLAKE3 1.0. Parent comment

Re:BLAKE3 1.0 by Matthias247 on Monday July 26, 2021 @01:30PM (#27962325)
I benchmarked hardware AES vs software ChaCha20, and the former showed an overall performance improvement of an end to end QUIC software stack of more than 50%. The pure crypto difference is probably even higher. That's a huge gap - even thought it might totally be possible that the ChaCha20 implementation of Ring is still improvable.

As a result of that, I asked for rustls to default to AES instead of the previous ChaCha20 default [1]

[1] https://github.com/ctz/rustls/issues/509

[ Parent | on HN ]
Re:BLAKE3 1.0 by cesarb on Monday July 26, 2021 @02:58PM (#27963702)
Some implementations (IIRC Firefox is one of them) choose it dynamically: if hardware AES is available, AES is ordered before ChaCha20, otherwise ChaCha20 is ordered first. Last time I looked, at least for Intel the i3 didn't have hardware AES (but the i5 and i7 have it), so it was not uncommon for lower-end hardware (which needs speed the most) to have AES slower than ChaCha20.
[ Parent | on HN ]