Helger Lipmaa writes: > For comparison, Bosselaers' SHA-1 implementation (on Pentium, not on > Pentium II) takes 13.1 cycles per byte. My MAC takes 4.4 cycles per byte on the original Pentium. (This comparison is slightly unfair, because my MAC provides 128 bits of security, while SHA-1-based MACs can hope for 160 bits of security.) ---Dan