crypto-optimization

If you intended to come to Berlin for SPEED-CC please register asap. Registration officially closes

Dear all, You might be interested in the upcoming workshop "SPEED-CC -- Software Performance

Hi, I have just read that AMD are introducing new set of instructions for "Packed Integer

Thanks for these pointers. I think many people on this list are probably already familiar with these

I've been doing an x86/SSE2 implementation of curve25519 using ideas similar to the ones in

> Thanks for this pointer. Are you still working in this area? Do you think > further big

I noticed that GMP 4.3.0, released 2 days ago, contains new optimized assembly code. In mpn/x86_64/

eBATS results seem to show that Crypto++ in x86 32-bit mode (http://bench.cr.yp.to/web-impl/x86-

You should do it if you're interested. Crypto++ already has Salsa20 and a couple of other fast

The straightforward way of computing the AES round function requires 8 32-bit registers, but the x86

Some of you probably know this already, but if you need to test your crypto code (and if it's

This note describes a technique for computing GCM using 2KB of memory for each key, which I haven

[This is a repost that was originally written for the NIST SHA-3 forum.] Dan Bernstein wrote: >