From: Jean-Philippe Aumasson Subject: Re: [PATCH v5 1/4] siphash: add cryptographically secure PRF Date: Fri, 16 Dec 2016 13:22:37 +0000 Message-ID: References: <20161216034618.28276.qmail@ns.sciencehorizons.net> Reply-To: kernel-hardening@lists.openwall.com Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=001a114022ca613f570543c67763 Cc: George Spelvin , Andi Kleen , David Miller , David Laight , Eric Biggers , Hannes Frederic Sowa , kernel-hardening@lists.openwall.com, Linux Crypto Mailing List , LKML , Andy Lutomirski , Netdev , Tom Herbert , Linus Torvalds , "Theodore Ts'o" , vegard.nossum@gmail.com, "Daniel J . Bernstein" To: "Jason A. Donenfeld" Return-path: List-Post: List-Help: List-Unsubscribe: List-Subscribe: In-Reply-To: List-Id: linux-crypto.vger.kernel.org --001a114022ca613f570543c67763 Content-Type: text/plain; charset=UTF-8 It needs some basic security review, which I'll try do next week (check for security margin, optimality of rotation counts, etc.). But after a lot of experience with this kind of construction (BLAKE, SipHash, NORX), I'm confident it will be safe as it is. On Fri, Dec 16, 2016 at 1:44 PM Jason A. Donenfeld wrote: > Hey JP, > > On Fri, Dec 16, 2016 at 9:08 AM, Jean-Philippe Aumasson > wrote: > > Here's a tentative HalfSipHash: > > https://github.com/veorq/SipHash/blob/halfsiphash/halfsiphash.c > > > > Haven't computed the cycle count nor measured its speed. > > This is incredible. Really. Wow! > > I'll integrate this into my patchset and will write up some > documentation about when one should be used over the other. > > Thanks again. Quite exciting. > > Jason > --001a114022ca613f570543c67763 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

It needs some basic security review, which I'll try do= next week (check for security margin, optimality of rotation counts, etc.)= . But after a lot of experience with this kind of construction (BLAKE, SipH= ash, NORX), I'm confident it will be safe as it is.

On Fri, Dec= 16, 2016 at 1:44 PM Jason A. Donenfeld <Jason@zx2c4.com> wrote:

= Hey JP,

On Fri, Dec 16, 2016 at 9:08 AM, Jean-Philippe Aumasson
<jeanphilippe.aumasson@gmail.com> wrote:
> Here's a tentative HalfSipHash:
> https://gith= ub.com/veorq/SipHash/blob/halfsiphash/halfsiphash.c
>
> Haven't computed the cycle count nor measured its speed.

This is incredible. Really. Wow!

I'll integrate this into my patchset and will write up some
documentation about when one should be used over the other.

Thanks again. Quite exciting.

Jason

--001a114022ca613f570543c67763--