D. J. Bernstein Authenticators and signatures A state-of-the-art message-authentication code Why is Poly1305-AES better than other message-authentication codes? How do I use Poly1305-AES in my own software? How does the Poly1305-AES implementation work? Where can I learn more about Poly1305-AES? Poly1305-AES speed tables AES timing variability at a glance AES timing variability graphs Poly1305-AES