Re:NIST may not have you in mind
by pbsd on Sunday October 21, 2012 @12:55PM
(#4680057)
Käsper and Schwabe's bitsliced AES [1] does not need very long streams to be fast. It processes 8 blocks simultaneously, not 128 (as a 'pure' bitsliced approach would), and therefore reaches peak performance at relatively small lengths, starting at 128 bytes.
[1] http://cryptojedi.org/papers/aesbs-20090616.pdf