Re: [Openvpn-users] OpenVPN and ChaCha20-Poly1305 encryption

2024-02-08 Thread Gert Doering
Hi, On Thu, Feb 08, 2024 at 06:36:40PM +, Peter Davis via Openvpn-users wrote: > Why OpenVPN does not support ChaCha20-Poly1305 encryption? What makes you think it doesn't? gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a comput

Re: [Openvpn-users] OpenVPN and ChaCha20-Poly1305 encryption

2024-02-08 Thread Jochen Bern
On 08.02.24 20:07, Peter Davis wrote: Why OpenVPN articles uses AES-256-GCM? Is it better? It is very probably "better" in the sense of remaining compatible with various OpenVPN and OpenSSL versions; Ctrl-F the online OpenVPN reference manuals for more info. "Better" as in more resistant to

Re: [Openvpn-users] OpenVPN and ChaCha20-Poly1305 encryption

2024-02-08 Thread Peter Davis via Openvpn-users
>On Thursday, February 8th, 2024 at 10:21 PM, Jochen Bern > wrote: > On 08.02.24 19:36, Peter Davis via Openvpn-users wrote: > > > Why OpenVPN does not support ChaCha20-Poly1305 encryption? > > > You sure? > > > $ openvpn --show-ciphers | grep -i cha > > CHACHA20-POLY1305 (256 bit key, stream

Re: [Openvpn-users] OpenVPN and ChaCha20-Poly1305 encryption

2024-02-08 Thread Jochen Bern
On 08.02.24 19:36, Peter Davis via Openvpn-users wrote: Why OpenVPN does not support ChaCha20-Poly1305 encryption? You sure? $ openvpn --show-ciphers | grep -i cha CHACHA20-POLY1305 (256 bit key, stream cipher, TLS client/server mode only) (FWIW, OpenVPN 2.6.8 and, *more* relevant to the p

[Openvpn-users] OpenVPN and ChaCha20-Poly1305 encryption

2024-02-08 Thread Peter Davis via Openvpn-users
Hi, According to Wikipedia: The main external difference with ChaCha20 is its 64 byte (512 bit) block size, in comparison to 16 bytes (128 bit) with both AES-128 and AES-256. The larger block size enables higher performance on modern CPUs and allows for larger streams before the 32 bit counter o