NIST may not have you in mind

Re:NIST may not have you in mind by dchest on Sunday October 21, 2012 @12:35PM (#4680001)

http://bench.cr.yp.to/results-stream.html

[ Parent | on HN ]

Re:NIST may not have you in mind by tptacek on Sunday October 21, 2012 @12:37PM (#4680006)

That's a table of stream ciphers benchmarked against AES, a block cipher, in CTR mode.

[ Parent | on HN ]

Re:NIST may not have you in mind by dchest on Sunday October 21, 2012 @12:40PM (#4680015)

Yes. Apart from disk encryption, they are pretty much interchangeable (OP talked about IPSec).

[ Parent | on HN ]

Re:NIST may not have you in mind by tptacek on Sunday October 21, 2012 @01:09PM (#4680102)

AES is normally benchmarked against other block ciphers. It might not be fair to compare the performance of a native stream cipher to that of AES rigged up as a stream cipher with CTR.

[ Parent | on HN ]

Re:NIST may not have you in mind by floody-berry on Monday October 22, 2012 @12:24AM (#4681845)

What makes the comparison unfair?

[ Parent | on HN ]

Re:NIST may not have you in mind by tptacek on Monday October 22, 2012 @12:19PM (#4683857)

The other ciphers are natively stream ciphers, and AES is a block cipher adapted via CTR mode to be a stream cipher.

[ Parent | on HN ]

Re:NIST may not have you in mind by floody-berry on Monday October 22, 2012 @06:50PM (#4685963)

I'm still missing what makes it unfair. Are other modes of AES potentially faster? Does AES provide something that stream ciphers don't? Are Salsa20/Chacha20 unable to be compared to anything because they're native stream ciphers that look like a block cipher in CTR mode under the hood?

[ Parent | on HN ]

Re:NIST may not have you in mind by tptacek on Tuesday October 23, 2012 @11:44PM (#4691544)

1. Yes. 2. Yes. 3. No.

[ Parent | on HN ]