diff options
| author | Frank Denis <124872+jedisct1@users.noreply.github.com> | 2023-05-23 09:55:45 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-23 09:55:45 +0200 |
| commit | 9d179a98f69dbab393cbb3fc5dd4b64c553a721b (patch) | |
| tree | 87ed4994d77e60cc82c3cc241710a861abd14edc /src/codegen/spirv | |
| parent | a0652fb93077322c331345e1aeff25d5338f30b0 (diff) | |
| download | zig-9d179a98f69dbab393cbb3fc5dd4b64c553a721b.tar.gz zig-9d179a98f69dbab393cbb3fc5dd4b64c553a721b.zip | |
Make Poly1305 faster by leveraging @addWithOverflow/@subWithOverflow (#15815)
These operations are constant-time on most, if not all currently
supported architectures. However, even if they are not, this is not
a big deal in the case on Poly1305, as the key is added at the end.
The final addition remains protected.
SalsaPoly and ChaChaPoly do encrypt-then-mac, so side channels would
not leak anything about the plaintext anyway.
* Apple Silicon (M1)
Before: 2048 MiB/s
After : 2823 MiB/s
* AMD Ryzen 7
Before: 3165 MiB/s
After : 4774 MiB/s
Diffstat (limited to 'src/codegen/spirv')
0 files changed, 0 insertions, 0 deletions