[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: MAC speeds

To: ipsec@lists.tislabs.com
Subject: Re: MAC speeds
From: "D. J. Bernstein" <djb@cr.yp.to>
Date: 14 Mar 2000 22:32:29 -0000
References: <71984F8FB76AD211AC3E00A0C9C578C702157335@hasmsx32.iil.intel.com> <Pine.GS4.4.21.0003141902450.19998-100000@keeks>
Sender: owner-ipsec@lists.tislabs.com

A comparison to HMAC appears in

   http://cr.yp.to/hash127/faq.html

Computing a MAC on 64 bytes of data takes 557 Pentium cycles plus the
time for your favorite encryption function on a 16-byte block.

The paper, which I recently submitted to J. Cryptology, is at

   http://cr.yp.to/papers.html#hash127

Asking how much scrutiny a Wegman-Carter-type authentication system has
received is like asking how much scrutiny counter mode has received:
you're missing the point. The security is _provably_ as good as the
encryption function you plug in.

---Dan

Follow-Ups:

Re: MAC speeds

From: Henry Spencer <henry@spsystems.net>

References:

RE: MAC speeds

From: "Elzur, Uri" <uri.elzur@intel.com>

RE: MAC speeds

From: Helger Lipmaa <helger@cyber.ee>

Prev by Date: Re: Heartbeats draft available
Next by Date: Do we need L2TP additionally in following IPSec-ed case?
Prev by thread: RE: MAC speeds
Next by thread: Re: MAC speeds
Index(es):
- Main
- Thread