X-Git-Url: http://git.rot13.org/?p=bcm963xx.git;a=blobdiff_plain;f=userapps%2Fopensource%2Fsshd%2Flibtomcrypt%2Fnotes%2Ftech0003.txt;h=1a21867c9cb3f02afdd2b3cd1caca491d279caac;hp=5df3b15ea82a5fce54002e0ed62ce2b43dee56ee;hb=57a096f051259ceaefd5977f30d269884e1dd248;hpb=a69849c98808437716b821267cd97529c56f45b0 diff --git a/userapps/opensource/sshd/libtomcrypt/notes/tech0003.txt b/userapps/opensource/sshd/libtomcrypt/notes/tech0003.txt index 5df3b15e..1a21867c 100755 --- a/userapps/opensource/sshd/libtomcrypt/notes/tech0003.txt +++ b/userapps/opensource/sshd/libtomcrypt/notes/tech0003.txt @@ -12,28 +12,29 @@ and no heap. To save space all of the symmetric key scheduled keys are stored in a union called "symmetric_key". This means the size of a symmetric_key is the size of the largest scheduled key. By removing the ciphers you don't use from the build you can minimize the size of this structure. For instance, by removing both Twofish and Blowfish the -size reduces to 528 bytes from the 4,256 bytes it would have been (on a 32-bit platform). Or if you remove -Blowfish and use Twofish with TWOFISH_SMALL defined its still 528 bytes. Even at its largest the structure is only +size reduces to 768 bytes from the 4,256 bytes it would have been (on a 32-bit platform). Or if you remove +Blowfish and use Twofish with TWOFISH_SMALL defined its still 768 bytes. Even at its largest the structure is only 4KB which is normally not a problem for any platform. Cipher Name | Size of scheduled key (bytes) | ------------+-------------------------------| +Twofish | 4,256 | Blowfish | 4,168 | -RC5 | 204 | -RC6 | 176 | +3DES | 768 | SAFER+ | 532 | Serpent | 528 | Rijndael | 516 | XTEA | 256 | -Twofish | 4,256 | -Twofish [*] | 193 | -SAFER [#] | 217 | RC2 | 256 | DES | 256 | -3DES | 768 | +SAFER [#] | 217 | +RC5 | 204 | +Twofish [*] | 193 | +RC6 | 176 | CAST5 | 132 | Noekeon | 32 | +Skipjack | 10 | ------------+-------------------------------/ Memory used per cipher on a 32-bit platform. @@ -43,4 +44,9 @@ Memory used per cipher on a 32-bit platform. Noekeon is a fairly fast cipher and uses very little memory. Ideally in low-ram platforms all other ciphers should be left undefined and Noekeon should remain. While Noekeon is generally considered a secure block cipher (it is insecure as a hash) CAST5 is perhaps a "runner-up" choice. CAST5 has been around longer (it is also known as CAST-128) and is -fairly fast as well. \ No newline at end of file +fairly fast as well. + +You can easily accomplish this via the "config.pl" script. Simply answer "n" to all of the ciphers except the one you want +and then rebuild the library. [or you can hand edit mycrypt_custom.h] + +