Ben Schwartz <bemasc=40google....@dmarc.ietf.org> writes: >If you are updating the text, I would recommend removing the claim about >performance. In general, the ciphersuites specified in the text are likely >to be slower than popular AEAD ciphersuites like AES-GCM.
Uhh... when is AES-GCM faster than SHA2, except on systems with hardware support for AES-GCM and no hardware support for SHA2? Peter. _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls