Hasty Pudding cipher

The operations within the cipher consist of stirring, which combines internal variables in various ways with values from the key table and spice at regular intervals.

[6] Comments from others did not support this view; for instance, Schneier et al.'s analysis ranked the Hasty Pudding cipher 4th best (376 cycles) on a 64-bit machine, although for Rijndael and Twofish, the performance was only estimated.

[7] On a 32-bit Pentium, Hasty Pudding encryption was rated by Schneier et al. at 1600 clock cycles, 10th best out of the 15 candidates.

[7] Schneier et al., and Schroeppel, noted that the speed of the cipher would be significantly impacted on a 32-bit machine because of its heavy use of 64-bit operations, particularly bit shifts.

[3][7] The Hasty Pudding cipher's key setup was rated as relatively slow; 120000 cycles on a Pentium.

[9][11] Schroeppel has offered a bottle of Dom Pérignon champagne to the best paper presenting progress on the Hasty Pudding cipher.