Messages in this thread | | | Date | Thu, 4 Mar 2004 21:14:01 -0500 | From | Jean-Luc Cooke <> | Subject | Re: dm-crypt, new IV and standards |
| |
On Thu, Mar 04, 2004 at 05:19:26PM -0800, dean gaudet wrote: > On Thu, 4 Mar 2004, Jean-Luc Cooke wrote: > > > recommend using a MAC with CTR. (Why still have CTR? Unlike CBC, you can > > compute the N+1-th block without needing to know the output from the N-th > > block, so there is the possibility for very high parallelizum). > > for disk crypto there are other opportunities for parallelism using > bitslicing to encrypt/decrypt multiple blocks in parallel (for example see > <http://www.cs.utexas.edu/users/atri/papers/spaa.ps>). there's a > latency/throughput tradeoff though...
Humm. Though AES uses GF's a lot, I think on 32bit processors bit slicing AES just isn't worth it.
Though 512 byte fs blocks would only take 16 "transforms". It's really hard to implement ShiftRow() in bitwise SIMD...and x86 cpus simply don't have enough registers (aliased or otherwise) to do this I think. Fun read though!
JLC - bit-slicing MD5() will not improve things either, tried that for MD5CRK
-- http://www.certainkey.com Suite 4560 CTTC 1125 Colonel By Dr. Ottawa ON, K1S 5B6 - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |