Timeline for Fast cipher without needing hardware support (like ChaCha20) for disk encryption
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 11, 2023 at 20:53 | comment | added | Taylor R Campbell | @poncho Citation 1 already has the security reduction of Adiantum to ChaCha12 and AES. I edited the answer to cite the specific theorem in the paper and to sketch concrete usage limits. Does that address your question? | |
| Jan 11, 2023 at 20:51 | history | edited | Taylor R Campbell | CC BY-SA 4.0 |
Cite security claims.
|
| Jan 11, 2023 at 18:58 | comment | added | samuel-lucas6 | @poncho Not sure any has been done. There's a proof in the paper. Sounds like it pretty much boils down as you say. | |
| Jan 11, 2023 at 14:21 | comment | added | poncho | What public cryptanalysis has been done against Adiantum? Do you have a security proof reducing it to the strength of ChaCha/Poly1305/AES? If neither, why do you advocate it as being secure? | |
| Jan 11, 2023 at 12:42 | history | edited | Taylor R Campbell | CC BY-SA 4.0 |
Add a note about the limited applicability of Adiantum.
|
| Jan 11, 2023 at 12:35 | comment | added | Taylor R Campbell | @JanKanis My very rough guess is Adiantum probably achieves about half or a third the throughput of hardware AES-XTS on the same CPU (but still probably higher throughput than variable-time software AES-XTS), assuming reasonably vectorized ChaCha and Poly1305 software. I don't have measurements handy, though, and if I did they would probably be on different hardware from you, so don't quote me on that; I suggest you take some measurements yourself on the hardware and software of interest to you. | |
| Jan 11, 2023 at 10:23 | vote | accept | JanKanis | ||
| Jan 11, 2023 at 10:22 | comment | added | JanKanis | Great! This seems to be exactly what I was looking for. Being a wide-block cipher Adiantum offers even better security than AES-XTS. Do you have any idea how Adiantum compares performance-wise against hardware accelerated AES-XTS? | |
| Jan 11, 2023 at 0:49 | history | edited | Taylor R Campbell | CC BY-SA 4.0 |
not orders of magnitude
|
| Jan 11, 2023 at 0:41 | history | answered | Taylor R Campbell | CC BY-SA 4.0 |