Message273360
In this case, performance is security. Both AES-GCM and ChaCha20-Poly1305 are secure. Modulo one thing: GCM in software is hard to implement in constant-time, so it's strongly preferable to use it only when there's a hardware implementation. It works out nicely that in addition to being constant-time, the hardware implementation of GCM is faster. |
|
Date |
User |
Action |
Args |
2016-08-22 11:41:52 | alex | set | recipients:
+ alex, gregory.p.smith, janssen, pitrou, giampaolo.rodola, christian.heimes, dstufft |
2016-08-22 11:41:52 | alex | set | messageid: <1471866112.69.0.218102927045.issue27768@psf.upfronthosting.co.za> |
2016-08-22 11:41:52 | alex | link | issue27768 messages |
2016-08-22 11:41:52 | alex | create | |
|