[noise] Lightweight ciphers and Noise

[Rhys Weatherley]

On Wed, Nov 22, 2017 at 12:56 PM, Rhys Weatherley <rhys.weatherley at gmail.com
> wrote:

> SHA3 is pretty RAM hungry - 400 bytes of permanent state and another 400
>> bytes of stack when the core block operation is evaluated.  Performance in
>> software implementations, even my ridiculously optimised assembly version
>> for AVR, is also not pretty.  I must admit though that I haven't studied
>> Strobe/Disco enough to make a fair comparison yet.
>
>
Sorry that should be 200 of each, not 400.  My bad.  That makes SHA3 more
competitive with the other algorithms on memory size, but CPU performance
per byte may still be an issue.

Cheers,

Rhys.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://moderncrypto.org/mail-archive/noise/attachments/20171122/4c21dca1/attachment.html>