0

Is it fine if algoritm will have $32$ 128-bit numbers that will be nothing-up-my-sleeve numbers to initialize key schedule?

As I know from wikipedia the Hasty Pudding Cipher was criticized for its performance on smartcards. Specifically, some comments pointed out the difficulty of keeping over 2KB of RAM for the key table. In my case we got 0,5 KB. Isn't it still to much?

Tom
  • 1,221
  • 6
  • 16
  • 1
    I would suggest looking at the way Keccak generates round constants if you want superior low end performance and minimal code size – Richie Frame Jul 09 '20 at 00:40
  • I'm designing my own cipher and for some reasons it looks like to implement 32 nothing-up-my-sleeve numbers to initialize key schedule is the best. But I'm not sure is it not to much of kilobytes. – Tom Aug 21 '20 at 03:38

0 Answers0