RFR: JDK-8338587 - Internal XOF Methods for SHAKE128 and SHAKE256 [v2]

Weijun Wang weijun at openjdk.org
Mon Aug 26 15:47:04 UTC 2024


On Mon, 26 Aug 2024 13:58:21 GMT, Ferenc Rakoczi <duke at openjdk.org> wrote:

>> Also, a comment will be nice here. Otherwise, some people might still want to move it.
>
> I have considered the instance variable as well.  It might help the performance of the case you mention (many small squeezes), but I don't think that would be a typical use case. I am adding the comment.

ML-KEM only squeezes 3 bytes each time, but you probably already optimized that by storing enough bytes for later uses.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/20631#discussion_r1731444434



More information about the security-dev mailing list