[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MD5 performance limitations document

To: Theodore Ts'o <tytso@MIT.EDU>
Subject: Re: MD5 performance limitations document
From: smb@research.att.com
Date: Tue, 10 Jan 95 23:35:56 EST
Cc: Masataka Ohta <mohta@necom830.cc.titech.ac.jp>, perry@imsi.com, ipsec@ans.net

	 It is certainly true that if you are using encryption and integrity
	 protection, the speed of your encryption algorithm may very well swamp
	 your MD5 calculations.  However, if you're only doing keyed MD5 for
	 integrity protection, you may very well run into the limits which this
	 paper points out.

The ironic thing is that gigabit/second DES chips have actually been
built -- meaning, if the analysis is correct, that encryption is faster
than MD5...  

Someone should look for possible pipelines or space-time tradeoffs in
MD5, much as has been done for DES.

Prev by Date: Re: Perfect forward SECURITY (uni- vs bi-directional impersonation)'
Next by Date: Re: MD5 performance limitations document
Next by thread: Re: Size of IV field in DES-CBC mode
Index(es):
- Main
- Thread