NIST may not have you in mind

Re:NIST may not have you in mind by tptacek on Sunday October 21, 2012 @12:32PM (#4679997)

You were almost certainly benchmarking an implementation of AES that relies on table lookups for speed; those table lookups create a side channel vulnerability, which was much of the point of this article.

[ Parent | on HN ]

Re:NIST may not have you in mind by planckscnst on Sunday October 21, 2012 @12:38PM (#4680008)

Interesting; it was what's in the Linux kernel.

[ Parent | on HN ]

Re:NIST may not have you in mind by tptacek on Sunday October 21, 2012 @12:40PM (#4680012)

Pretty sure that's an S-box AES. The issue is that when implemented (a) in software (b) without reliance on large lookup tables --- ie, "securely" --- AES is significantly slower.

[ Parent | on HN ]