On Thu, 2015-03-26 at 22:37 +0100, Niels Möller wrote:
Available now, at
http://www.lysator.liu.se/~nisse/archive/nettle-3.1rc1.tar.gz http://www.lysator.liu.se/~nisse/archive/nettle-3.1rc1.tar.gz.sig
There's also a corresponding tag in the repo (except that the suffix "rc1" on the package version in configure.ac is not committed).
Thanks. I've added the chacha ciphersuites into gnutls, and run the TLS benchmarks (with AES acceleration disabled): RSA_AES_128_GCM_SHA256 84.49 MB/sec RSA_AES_128_CCM 65.35 MB/sec RSA_CHACHA20_POLY1305 200.33 MB/sec
When AESNI/PCLMUL are enabled: RSA_AES_128_GCM_SHA256 1.19 GB/sec RSA_AES_128_CCM 0.27 GB/sec RSA_CHACHA20_POLY1305 0.20 GB/sec
I guess chacha will be good for smaller systems which have no hw AES acceleration.
One small comment. I liked the ccm_encrypt_message() in ccm.h and would be nice if it would be come the default interface provided by all AEAD ciphers in nettle.
regards, Nikos