Message273360
In this case, performance is security. Both AES-GCM and ChaCha20-Poly1305 are secure. Modulo one thing: GCM in software is hard to implement in constant-time, so it's strongly preferable to use it only when there's a hardware implementation. It works out nicely that in addition to being constant-time, the hardware implementation of GCM is faster. |
|
| Date |
User |
Action |
Args |
| 2016-08-22 11:41:52 | alex | set | recipients:
+ alex, gregory.p.smith, janssen, pitrou, giampaolo.rodola, christian.heimes, dstufft |
| 2016-08-22 11:41:52 | alex | set | messageid: <[email protected]> |
| 2016-08-22 11:41:52 | alex | link | issue27768 messages |
| 2016-08-22 11:41:52 | alex | create | |
|