Recently Blake3 has been announced, which can be used as PRF. I'm wondering which PRF is faster, namely PRF based on Blake3 or the one based on AES-CTR?

  • $\begingroup$ About what platform(s) are we talking about here? About how much data are we talking? Is the key largely fixed or often-changing? Also intuitively Blake3 should be slower because it's designed to be a collision-resistant hash (which cannot be built from OWFs) whereas AES-CTR is "just" an encryption scheme (which can be built from OWFs so is "easier" in principle). $\endgroup$ – SEJPM Jan 21 at 9:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.