HMAC-SHA256 versus GCM

Guus Sliepen guus at tinc-vpn.org
Sun Sep 22 21:52:06 CEST 2013


On Fri, Sep 20, 2013 at 12:01:58PM +0200, Jörg Weske wrote:

> Did you, by any chance, have a look at the SipHash algorithm that
> was published in 2012?
> 
> https://131002.net/siphash/
> 
> Some claims:
> 
> SipHash is secure, fast, and simple (for real):
> * SipHash is simpler and faster than previous cryptographic algorithms
> * SipHash is competitive in performance with insecure
> non-cryptographic algorithms
> 
> I've only recently started using the JAVA implementation in a
> software project for hashing content (no cryptographical use,
> though). It fits my requirements nicely: it's pretty fast and has a
> very low probability of collisions.

SipHash's output is only 64 bit, which is too small to be considered
cryptographically secure when used to authenticate data, in my opinion.
For a hash algorithm it seems very nice though.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://www.tinc-vpn.org/pipermail/tinc-devel/attachments/20130922/5f118951/attachment.sig>


More information about the tinc-devel mailing list