[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MD5 performance limitations document



   From: Masataka Ohta <mohta@necom830.cc.titech.ac.jp>
   Date: Wed, 11 Jan 95 11:44:54 JST

   The draft is fataly wrong to not to distinguish the off-chip and
   on-chip clock speed.

   Performance issues is in DES, not in MD5.

Well, the draft makes the assertion that if you're interested in speeds
of 300-600 megabits per second, the maximum theoretical speed of MD5,
even assuming that you used a specialized hardward chip implementation,
wasn't going to cut it.  That appeared to be the main thrust of the
draft.

It is certainly true that if you are using encryption and integrity
protection, the speed of your encryption algorithm may very well swamp
your MD5 calculations.  However, if you're only doing keyed MD5 for
integrity protection, you may very well run into the limits which this
paper points out.

Disclaimer: I've only looked at this paper in cursury fashion, and I am
*not* enough of a hardware expert to evaluate the claims which they've
made regarding how fast you could make an on-chip MD5 implementation.
However, I don't think that we could say at this point that the draft is
"fatally wrong".

							- Ted




Follow-Ups: References: