AEADs

AEADs copied to clipboard

COLM

9

This is an optimized implementation of the COLM AEAD cipher using x86_64 instructions. COLM has been selected as the second choice for defense in-depth during the CAESAR competition. Currently it...

Schmid7k

Bumps [magma](https://github.com/RustCrypto/block-ciphers) from 0.7.0 to 0.8.1. Commits 7de364e Fix and test minimal versions build (#303) 736671f Update crates to cipher v0.4 (#284) 81e0de5 Update byteorder to 1.1.0 (#299) f253d53 README.md:...

dependabot[bot]

`chacha20poly1305`: Implement one-pass encryption and decryption

15

Builds on https://github.com/RustCrypto/AEADs/pull/415.

str4d

Bumps [kuznyechik](https://github.com/RustCrypto/block-ciphers) from 0.7.2 to 0.8.1. Commits 7de364e Fix and test minimal versions build (#303) 736671f Update crates to cipher v0.4 (#284) 81e0de5 Update byteorder to 1.1.0 (#299) f253d53 README.md:...

dependabot[bot]

aes-gcm: performance is worse than OpenSSL

26

As my test via `cargo bench`, the `aes-gcm-256`'s performance is much worse: ``` Running target/release/deps/simple-75040055ea8811ad Gnuplot not found, using plotters backend encrypt 100M time: [174.63 ms 175.52 ms 176.60 ms]...

kigawas

Missing algorithms

40

- [ ] AEGIS - [x] AES-GCM - [ ] XAES-256-GCM - [x] Deoxys-II ([#311]) - [x] Multilinear Galois Mode - [x] OCB3 ([#587]) - [x] Reduced round XChaChaPoly -...

newpavlov

I've found an audit of the `XSalsa20Poly1305` crate by [Cure53](https://cure53.de) funded by Threema. It seems like they didn't find anything particular problematic in the code base. I primarily opened this...

Erik1000

Key comitting AEADs

8

It's maybe too soon to consider this here, but.. There are a few recent standards that started including key committing AEADs, notable anything extremely low-entropy like OPAQUE. https://eprint.iacr.org/2017/664.pdf https://eprint.iacr.org/2020/1491.pdf https://eprint.iacr.org/2020/1153.pdf...

burdges

One-pass encryption/decryption

13

Currently all of the AEAD implementations do two passes over the plaintext/ciphertext when encrypting/decrypting respectively: for encryption, they encrypt the plaintext in the first pass, and authenticate it in the...

tarcieri

Currently we only support 64-bit software fallback, which can be quite inefficient on 32-bit targets.

newpavlov