Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I disagree that serpent is superior to AES. The evidence that it's secure is much flimsier than that for AES. It's seen far less analysis, and suffers from many of the same implementation issues as AES (hard to make both constant time and fast without hardware support, and has no hardware support). I'd have agreed with you 10 years ago, but there have been a lot more (failed) attack attempts on AES in the intervening decade than there have been on Serpent, which increase my confidence in AES.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: