On Sun, Oct 16, 2005 at 11:04:17AM -0400, Mike wrote:
> VPN at fairly high speeds.  I'm not sure the hardware acceleration on 
> the VIA boards (called ACE, padlock, etc.) is supported for IPSec [1,2]. 
>  I got these results:
> 
> Pair of EPIA PD10000 with RNG and AES [3]:
> AES SHA: 24 Mbps
> BLF MD5: 34 Mbps
> 

the c3 (nehemiah) only supports AES, it does not support SHA
hardware acceleration. indeed, AES crypto performance is amazing but
per-packet SHA-HMAC authentication (used by IPSec ESP) will be the
bottle neck.

---snip---
src/sys/arch/i386/machdep.c revision 1.321
date: 2005/06/26 19:23:53;  author: deraadt;  state: Exp;  lines: +28 -14
cpu0: RNG AES AES-CTR SHA1 SHA256 RSA
on fancy new VIA C3 Esther (aka C7) cpus
---snap---

reyk

-- 
/* .vantronix|secure systems - (research & development)
 * reyk floeter - friendly known free software engineer
 * [EMAIL PROTECTED] - http://team.vantronix.net/reyk/
 */

Reply via email to