faster than the GHASH implementation in OpenSSL 1.0.2k. As is formally shown in [12], the dominating term in the security bound for AES-GCM-SIV is reduced.
確定! 回上一頁