Questions tagged [performance]

Performance defines the abilities of a cipher in terms of processing throughput on various platforms, including its memory requirements.

Filter by
Sorted by
Tagged with
0
votes
1answer
77 views

Why Stream Ciphers can be slower in software than Block Ciphers

I made some tests on virtual environment (Virtual Box) using StrongSwan, a VPN based on IPSec. I had latency results using ping command saying that Chacha20 (stream cipher) had poor performance ...
0
votes
2answers
77 views

Is it Ok in practice to rely only on the first 64 bits of a scrypt hash in this scenario?

I’m in a situation where I need to perform authentication against a large set of exactly 8 bytes longs passwords (with however full choice of encoding from the user and even custom encoding support): ...
0
votes
2answers
115 views

SHA1 calculation for millions of strings having common prefix

I have a function in which I need to calculate SHA1(common_prefix + random_string). I am calling this function many times so that calculation of SHA1 slows down the performance of the function. As for ...
3
votes
2answers
187 views

Performance metrices of cryptographic algorithms

I'm a beginner and working on cryptography performance metrics. My question is that what are the important metrics to check the performance of Cryptography Algorithms.
0
votes
1answer
62 views

What are sources for the performance difference in asymmetric and symmetric encryption?

I see the claim (which I'm not doubting) that encrypting data using asymmetric algorithms is slower than symmetric algorithms. But I never see citation on these claims, not here, on wikipedia or even ...
0
votes
1answer
389 views

Does password length affect AES encrypt/decrypt velocity?

I'm implementing crypto in Node, following this article: https://lollyrock.com/articles/nodejs-encryption/ It defines: ...
0
votes
2answers
488 views

How much time does AES decryption take?

I am attempting to decrypt a 90 GB file that is encrypted using AES-256. I have the password. How long should this take to complete? I've had the process running for over 3 days with no progress.
1
vote
1answer
313 views

Why is Poly1305, which is based on AES, faster than AES?

The web pages of BearSSL have the following performance numbers: Poly1305 1730.92 MB/s, amd64, ctmulq AES-128 CTR 92.38 MB/s, amd64, ct64 It seems that constant-time Poly1305 is over an order of ...
1
vote
1answer
345 views

How fast a middle-class computer can verify assymetric signatures (like ECDSA, RSA etc.)?

I have an idea for a peer-to-peer network that will require every connected peer to verify many symmetric signatures per second. In bitcoin, it's the same - every peer independently verifies ...
0
votes
2answers
441 views

Which is slower, AES or GCM hash (GHASH), if CPU has no special instructions?

In an answer to this question: Security of GCM if Implemented with Stream Cipher instead of Block Cipher ...it was stated that: The GHASH part of GCM is usually the problematic one when it comes to ...
-1
votes
1answer
92 views

Do (equal) increases in performance provide advantages to any party?

Assume a cryptographic algorithm in which the performance for the good guys (the ones that know the key) grows linearly with the length of the key, and for which the only way to break it is a brute-...
3
votes
0answers
124 views

Optimizing the AES key schedule when round keys cannot be cached

I have an implementation of AES which can cache at most a 256-bit value between encryptions. Currently, the master key is cached and the key schedule is re-computed for each and every block. Is there ...
1
vote
0answers
37 views

Crypto Vs crypto-less key establishment protocols for Internet of Things applications [closed]

With the advent of IoT, crypto-less key establishment protocols exploiting intrinsic channel randomness of physical layer are gaining great interest. These crypto-less protocols are computationally ...
1
vote
1answer
197 views

Is authentication more computationally expensive than encryption?

newbie in crypto here. I've a application that needs integrity protection. Confidentiality would be nice but has less priority over performance throughput. So I test "openssl speed" on my laptop, and ...
8
votes
1answer
373 views

Can reduced-round ChaCha be used as non-cryptographic fast PRNG to produce output indistinguishable from random data?

The fastest known attack against the Salsa20 family of stream ciphers requires 2137 simple operations against Salsa20/7, or 2244 against Salsa20/8. The 8-round version encrypts data at 1.88 cycles-per-...
5
votes
3answers
1k views

Lightweight cipher using only 8-bit operations

What is the most efficient (in cycles per byte) cryptographically secure symmetric cipher to implement using only 8-bit operations? Algorithms like TEA are great for embedded devices, but it is ...
0
votes
3answers
223 views

Can a key exchange protocol exchange a one time pad instead of a key?

As I understand key exchange, two parties can agree on a fixed number of secret bits in the presence of a listening adversary. That set of bits forms a cryptographic key which is then used to encrypt ...
2
votes
1answer
332 views

Size and usage of lookup table in cryptographic schemes

I would like to understand the typical size of a lookup table for software implementations of a cryptographic scheme. What size is considered reasonable? What make them (in)efficient? Are there ...
2
votes
1answer
89 views

Size of bitwise OR between vectors represented as polynomials

I am using polynomials to represent bit vectors, such that the value of the d-th coefficient is $1$ if the d-th bit in the vector is $1$, and $0$ otherwise. For example, the vector $A = [1, 1, 0, 1, 0]...
1
vote
2answers
1k views

is DES Faster Than AES on software

I conducted a software based experiment for encrypting difference size of images using AES and DES. However unexpectedly DES encryption speed was higher than AES. is it possible that DES is faster ...
-1
votes
1answer
129 views

Encrypted TrueCrypt HDD and processor performance [closed]

Does the chosen algorithm affects the needed processor performance directly? Is a drive encrypted with Serpent as fast as one encrypted with AES-Twofish-Serpent? Does this apply to the hash ...
1
vote
1answer
1k views

Fast Symmetric Encryption Algorithms: My Options

Basically, the question above... I'm trying to implement encryption on the server, and I have another webserver that I can share a secret key with via TLS/SSL/HTTPS, so I do not really need ...
1
vote
1answer
134 views

Performance consideration in XEdDSA and VXEdDSA Signature Schemes

Can someone please explain the below paragraph from section 7 in The XEdDSA and VXEdDSA Signature Schemes? The below para states that we are hashing twice (I am not able to get that). How pre-hashing ...
3
votes
3answers
822 views

Is there a floating point CSPRNG?

Is there a floating-point CSPRNG that operates, natively, using floating point operations? Looking for a CSPRNG that's very fast on GPUs, and would be hard for a CPU to beat. EDIT: Floating point ...
5
votes
1answer
94 views

Is there an economic way to check if an eliptic curve point in jacobian coordiate is the same as a compressed point

On an elliptic curve such as $y^2 = x^3 + b$, we define $a$ compressed point $P = (x, y)$ by it's coordinate $x$ and the parity of the $y$ coordinate. $y$ can be computed using $y = \pm\sqrt{x^3 + b}$ ...
0
votes
1answer
115 views

can a key be applied to half the cipher text

id like to ask if we encrypt the word "hello" as "olleh" but then we apply the key to only "oll" will it be converted into its orginal form i.e "llo". this was just for example. another thing id like ...
2
votes
0answers
78 views

What's the meaning of “Ops” in this ABE schemes performance form

I am a Ph.D. student focus on Attribute-Based Encryption and now reading the paper "Outsourcing the Decryption of ABE Ciphertexts", about the Figure 1, it gives a summary of some ABE scheme ...
5
votes
1answer
5k views

Elliptic Curve SSL performance: ECDHE and/or ECDSA?

I have a question about the performance benefits (in terms of server-side CPU load) of ECC (Elliptic Curve cryptography) cipher suites in SSL/TLS. It is a known fact that ECC is very good for ...
1
vote
1answer
190 views

Costs of operations in elliptic curves explanation

I'm trying to understand the cost of operation in elliptic curve (only Weierstrass curve for simplicity) from Wikipedia and there seems to be lack of online information/papers regarding this. I ...
3
votes
0answers
540 views

Number of PBKDF2 iterations for modern computing devices [closed]

I know the question of "how many iterations should I use with PBKDF2" is asked quite often, and the answer is typically "test and see what's practical." However, my key derivation will be taking ...
1
vote
1answer
137 views

Quadratic sieve for DLOG performance - theory vs actual?

Is there any report on comparing quadratic and number field sieve performance in theory vs actual data for discrete logarithm over primes? Is actual data better than theory in any way unexplained (I ...
1
vote
1answer
73 views

Signing many small messages with minimal overhead

I have a distributed system where each client writes many small messages, roughly the size of messages in a chat system, e.g. ~100-200 bytes each. I want each message to be signed so that we know for ...
4
votes
1answer
670 views

How to measure Cycles per Byte of an Algorithm?

I am trying to measure the cycles per byte for $\mathop{SHA-3}$ reference implementation. I am using recommendations from Microsoft querying the performance counter. As you can see in the first ...
6
votes
1answer
5k views

How to calculate time taken by encryption?

First of all, I know that this all it's very complicated, I know that CPUs are complex beasts, and may not work at their full potential all the time, they can have more than one core, and the ...
1
vote
0answers
351 views

Performance comparison between ECDSA and BLS signature schemes?

I want to choose an efficient signature scheme for implementation on a lightweight MCU. I was wondering how does the performance of ECDSA and BLS signature schemes compare in terms of signing time and ...
1
vote
2answers
329 views

How do we compare performance of two encryption algorithms?

Suppose I want to compare between RSA and Paillier encryption algorithms. I have coded two different programs in the same programming language. Now how to compare between these two and in what aspects ...
4
votes
1answer
3k views

RAR brute force cracking speed

I have been playing around with cRARk and was astonished by the low speed. On a 2015 high-end GPU (GeForce 980 ti), it took roughly 4h 50min to test all passwords composed of an 8-character prefix and ...
-1
votes
1answer
736 views

Why does Paillier have poor performance?

Can anyone explain to me why Paillier crypto system does not provide good performance? I read here (pdf) that RSA and ElGamal provide better performance than Paillier algorithm.
4
votes
3answers
235 views

Are there encryption schemes with which it takes (significantly) longer to encrypt than to decrypt?

Are there encryption schemes with which it takes (significantly) longer to encrypt than to decrypt? I am thinking of a specific situation in which a server continuously receives encrypted messages ...
4
votes
1answer
129 views

Ideal way to profile/performance-measure cipher implementations

I have implemented a bit-sliced version of two ciphers (Gibbon-120 and Hanuman-120, both part of the Primates family of ciphers: http://primates.ae/wp-content/uploads/primatesv1.02.pdf ) I now want ...
3
votes
2answers
928 views

Is it possible to securely combine multiple hashes without hashing them?

Let's say we have 1000 files and 1000 already computed cryptographic hashes for those files. Now we want to derive a single hash that authenticates all of them. Is there a more efficient way to do ...
4
votes
1answer
295 views

Is this a good choice of a digital signature scheme?

This is a concrete instantiation of Rabin-Williams signatures. Specifically: The private key is 2 primes $p, q$. The public key is their product $N = pq$ and is approximately 3072 bits long. the ...
4
votes
1answer
206 views

Benchmarks for second round CAESAR competitors

I'm interested in how the second round CAESAR competitors stack up in terms of software performance against each other and against chacha20-poly1305 with both small and large messages. Sadly the only ...
2
votes
3answers
5k views

What is the fastest block cipher in the (Intel) world?

In AES competition,Rijndael cipher obtained first rank and become Standard and Serpent, Twofish, RC6 and MARS obtained another ranks and I know that Serpent took second rank because it was slower than ...
2
votes
0answers
99 views

AES encryption time difference for same data [duplicate]

When encrypting same data with AES, encryption time for the first encryption is longer than the second one. In the same program, I have written encrypt() function ...
15
votes
2answers
1k views

Is it possible to utilize an AES-128 encryption hardware unit for AES-256?

There exist processors (for example ARM v8/v9 archicteture based), which cannot do AES-256 hardware based, but are equipped with AES-128 encryption hardware units. Is it possible to utilize an AES-...
3
votes
1answer
801 views

Why inversion and multiplication operations are costly in elliptic curves?

There are several algorithms for efficient scalar multiplication of an arbitrary point P(x,y) by some positive integer k in elliptic curves defined over $F_{p}$ or $F_{2^{m}}$. The scalar ...
6
votes
0answers
297 views

What is the fastest modular reduction algorithm available?

I have been browsing for the fastest and most efficient modular reduction algorithms and came across quite a few. But the one in A Fast Modular Reduction Method (2014) by Zhengjun Cao, Ruizhong Wei ...
0
votes
0answers
142 views

How to measure performance for ABE Schemes

I have these 3 Schemes: 1) J. Bethencourt, A. Sahai, and B. Waters, "Ciphertext-policy attribute-based encryption" 2) F. Guo, Y. Mu, W. Susilo, D. Wong, and V. Varadharajan, "Cp-abe with constant-...
10
votes
2answers
3k views

How does hash speed vary based on string length?

Surprisingly I have not been able to find an answer to this question on Google. If I have a function that is based on any of the popular hashing algorithms used for password generation, by what ...