The reason for considering this use is simple:
1) most cipher are optimized for fast encryption, but data is often encrypted
only once but decrypted multiple times
2) in the case of AES the code for encryption is smaller than for decryption as
you need the forward S-box for the key-schedule and the reverse S-box for the
actual decryption while encrypting onl uses the forward S-box. (in my
application this 256 bytes really matter)
best regards,
Daniel Otte
In the case of AES it is believed to be equivalent.
> The reason for considering this use is simple:
> 1) most cipher are optimized for fast encryption, but data is often
> encrypted
> only once but decrypted multiple times
> 2) in the case of AES the code for encryption is smaller than for
> decryption as
> you need the forward S-box for the key-schedule and the reverse S-box for
> the
> actual decryption while encrypting onl uses the forward S-box. (in my
> application this 256 bytes really matter)
Use CCM mode, you only need the encryption code, problem solved.
Joe
Or plain CTR mode if you do not need the MAC included in CCM mode.
You would need to be very sure that a MAC was not needed though.
rossum