crypto

crypto

This package accelerates crypto functions using Intel ISA-L crypto library (must be installed separately). The ISA-l library uses AES-NI (for cryptography) and SSE4.1 or AVX instructions (for hashing_; the package will fail if these instructions are unavailable (they have been available since Westmere - 2010).

• It supports AES-CBC-128, AES-CBC-192 and AES-CBC-256 using Go's crypto API.
• It supports GCM-128 and GCM-256 using Go's crypto API. It does not support non-standard nonce (which was deprecated in Go) or GCM-192.
• It also introduces XTS mode of operation. The XTS module follows Go's crypto structure. SetIV must be specified before each crypto operation to set the tweak.

Example

package main

import (
    "github.com/surendarchandra/crypto/aes"
    "github.com/surendarchandra/crypto/cipher"	
)

func main() {
    var key, cipherText, plainText []byte

block, err := aes.NewCipher(key)

x := cipher.NewXTSEncryptor(block)

x.SetIV(vector.tweak)
err = x.Encrypt(cipherText, plainText)
err = x.Decrypt(plainText, cipherText)
}

Performance

Performance tests were run using Go's test benchmarks. We used a iMac (Late 2013) using 3.5GHz Intel i7 core processor running MacOS High Sierra. Go was version 1.8.4 and ISA-l_crypt is version v2.20.0. Understand the slow performance of GCM is a TODO item.

Multihash SHA1

Multihash is described in "Multi-Hash: A Family of Cryptographic Hash Algorithm Extensions" - Sean Gulley, Vinodh Gopal, Jim Guilford, Kirk Yap, Wajdi Feghali, Intel.

The data is SHA1'd in parallel and the resulting hashes are finally SHA1'd. The hash value produced is not the same as with SHA1; however it is fast. This hashing function is useful for cases where cryptographic nature of SHA1 is useful (though binary comptabilitiy isn't important). E.g., hash data to randomize it.

Hash Performance:

• 3.5GHz Intel Core 7 (last 2013), running Mac OSX High Sierra.
• SHA1 performance was measured using 'go test -test.bench .' on the Go source tree.