Google made the headlines with its new Adiantum encryption method, and i read (TechCrunch) that:

In the meantime don’t expect any instant gains, but future low-power devices may offer better security without having to use more expensive components — you won’t have to do a thing, either.

So mobile phone which does not have any hardware dedicated to crypto will still be able to encryption as perhaps an equal speed.

My question: can we use this technology in some other places which does not have such hardware? does it makes sense? (e.g in a web browser, having an implementation in WASM of Adiantum).


1 Answer 1


Keep in mind that Adiantum was designed for one particular use case: block-based disk encryption.

In other contexts, especially in a web browser context, storing an IV and an authentication tag along with the ciphertext is not a problem. So you can stick to traditional AEADs, that will be faster than Adiantum in addition to being easier to use securely.

  • $\begingroup$ Thank you this is exactly what i wanted to read, it's hard for a beginner to get my bearings $\endgroup$
    – Cinn
    Commented Feb 8, 2019 at 20:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.