Re: hardware for vpn

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Tang Tse <openmisc@...>
Cc: Misc <misc@...>
Date: Sunday, October 7, 2007 - 12:06 pm

> Just one question regarding VPNs OpenBSD and HW, is there any recomendation

No, you don't need any specific hardware.

Many vendors invented crypto hardware for machines, but some of them
got it so wrong. First off, machines have gotten more than fast
enough. Secondly, AES was designed to be very fast on a native cpu.
Thirdly, many of the crypto engines required a "hand off to device,
get a reply later that it is complete", and this increased the latency
-- on slower machines where the crypto engine was supposed to speed
the crypto up it turned out to slow it down because the overhead was
so high.

The only designer that did the symmetric cipher stuff right was VIA
with their C3/C7 AES instructions.

You don't need any specific hardware; Your machine is more than capable
of handling the crypto for a VPN.

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
hardware for vpn, Tang Tse, (Thu Oct 4, 9:08 am)
Re: hardware for vpn , Theo de Raadt, (Sun Oct 7, 12:06 pm)
Re: hardware for vpn, Marc Balmer, (Thu Oct 4, 9:24 am)
Re: hardware for vpn, Brian A. Seklecki, (Thu Oct 4, 10:00 am)
Re: hardware for vpn, Kevin Cheng, (Thu Oct 4, 12:05 pm)
Re: hardware for vpn, Piotrek Kapczuk, (Thu Oct 4, 11:54 am)
Re: hardware for vpn, Brian A. Seklecki, (Thu Oct 4, 12:24 pm)