On 09/16/2013 10:04 PM, Niels Möller wrote: > [email protected] (Niels Möller) writes: > >> Nikos noted (off list) that Nettle's gcm hashing is slower than sha1. >> Which seems contrary to what's expected. > > If people expect that gcm is faster than ha1, I'm curious how they reaon.
Hello Niels, It seems that also the original GCM description claims as such, although no details are given: http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/proposedmodes/gcm/gcm-spec.pdf There is also some talk that claims the same, but I couldn't access the (possibly more detailed) papers from the author, as they were behind a paywall. https://crypto.stanford.edu/RealWorldCrypto/slides/gueron.pdf regards, Nikos _______________________________________________ nettle-bugs mailing list [email protected] http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
