Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [norx]

NORX is an authenticated encryption algorithm based on the ChaCha round function, and a second round candidate in the CAESAR competition.

Filter by
Sorted by
Tagged with
6 votes
1 answer
494 views

Rationale for NORX/Ketje/Keyak not being chosen for the CAESAR final portfolio

Was any specific rationale given on why none of the sponge-based AEAD algorithms (specifically NORX, Keyak, and Ketje) of the 3rd round candidates of the CAESAR competition made it to the final ...
Astolfo's user avatar
  • 149
1 vote
0 answers
75 views

Discrepancy in padding order between NORX specification and reference code

I have been working on implementing the NORX V3.0 authenticated encryption algorithm and I have run into a very confusing contradiction regarding the order in which padding and permutation are ...
cookiecipher's user avatar
1 vote
1 answer
175 views

Can NORX be used as a general purpose hash function?

In general terms, NORX works combining a cryptographic hash function and an stream cipher. At the end of an encryption operation you end with a ciphered message plus its authenticated hash. If you ...
user3368561's user avatar
8 votes
1 answer
5k views

Is ChaCha20 safer than AES with respect to side-channel attacks?

I've already seen some topics on this matter, but I feel like my question hasn't really been answered. Given the following: AES must be implemented in hardware (i.e. using the AES-NI instruction set)...
Dreadlockyx's user avatar
6 votes
1 answer
284 views

Can NORX32-f be used in a Salsa20 style stream cipher?

#include <std_roll_your_own_crypto_warning.h> With the third round CAESAR candidates about to be announced, the design[0] of Salsa20/ChaCha + Poly1305 is ...
joveian's user avatar
  • 345
4 votes
1 answer
256 views

Benchmarks for second round CAESAR competitors

I'm interested in how the second round CAESAR competitors stack up in terms of software performance against each other and against chacha20-poly1305 with both small and large messages. Sadly the only ...
cooky451's user avatar
  • 345
1 vote
0 answers
416 views

Is parallel, vectorized NORX nearly as fast as hardware-accelerated AES-GCM?

As I understand it, NORX gets 3.5 CPB in an unoptimized implementation. But NORX can be parallelized. With 4-way SIMD, I would expect about 7/8 CPB performance. This is nearly as good as AES-GCM in ...
Demi's user avatar
  • 4,793
1 vote
2 answers
262 views

Why can't NORX produce intermediate auth tags like Keyak can?

Why can't NORX produce intermediate auth tags like Keyak can? Keyak appears quite attractive because of this, but seems to be slow in the absence of hardware acceleration.
Demi's user avatar
  • 4,793
3 votes
1 answer
217 views

What happens to NORX if the same (key, nonce, header data) triple is reused

As I understand it, reusing a (key, nonce, header data) triple in NORX leaks the XOR of the initial common prefix (but this is zero, so only its length is leaked) the XOR of the first distinct blocks ...
Demi's user avatar
  • 4,793