Frank Denis 9d179a98f6
Make Poly1305 faster by leveraging @addWithOverflow/@subWithOverflow (#15815)
These operations are constant-time on most, if not all currently
supported architectures. However, even if they are not, this is not
a big deal in the case on Poly1305, as the key is added at the end.

The final addition remains protected.

SalsaPoly and ChaChaPoly do encrypt-then-mac, so side channels would
not leak anything about the plaintext anyway.

* Apple Silicon (M1)

Before: 2048 MiB/s
After : 2823 MiB/s

* AMD Ryzen 7

Before: 3165 MiB/s
After : 4774 MiB/s
2023-05-23 09:55:45 +02:00
..
2023-04-30 18:16:04 -07:00
2023-05-16 20:39:01 -07:00
2023-05-22 13:13:57 +03:00
2023-04-30 18:16:04 -07:00
2023-04-30 18:16:04 -07:00
2023-04-30 18:16:04 -07:00
2023-05-22 13:34:39 +03:00
2022-12-13 13:14:20 +02:00
2023-04-30 18:16:04 -07:00
2023-04-22 13:09:15 +03:00
2023-04-30 18:16:04 -07:00
2023-04-28 13:24:43 -07:00
2023-04-20 15:17:07 -07:00
2023-05-17 06:06:41 +03:00
2023-04-30 18:16:04 -07:00
2023-04-30 18:16:04 -07:00
2023-04-30 18:16:04 -07:00
2023-04-23 21:06:21 +03:00
2023-04-30 18:16:04 -07:00
2023-04-30 18:16:04 -07:00
2023-04-23 21:06:21 +03:00
2023-04-23 21:06:21 +03:00
2023-03-17 17:50:25 +01:00
2023-04-28 13:24:43 -07:00
2023-05-11 20:31:50 +02:00
2023-04-30 18:16:04 -07:00
2023-04-30 18:16:04 -07:00
2022-04-15 17:01:01 -05:00