[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: What price security?

To: andrade@netcom.com (Andrade Software Andrade Networking)
Subject: Re: What price security?
From: "Perry E. Metzger" <perry@piermont.com>
Date: Fri, 20 Jun 1997 11:47:58 -0400
cc: ipsec@tis.com
In-reply-to: Your message of "Fri, 20 Jun 1997 06:48:20 PDT." <199706201348.GAA25680@netcom13.netcom.com>
Reply-To: perry@piermont.com
Sender: owner-ipsec@ex.tis.com

Andrade Software Andrade Networking writes:
> I liked your new code.  The encryption/decryption speed on a Pentium Pro
> was about 2-3 times faster than the old D3DES.  I was getting around
> 5 to 7 uS per 100 bytes v.s about 15 uS per 100 bytes.  Unfortunately
> the key setup is more expensive, about 200 uS v.s. 80 uS.  For lots of 
> short messages which require different keys it is slower than D3DES.  
> For long messages or many messages with the same key it is faster. 

In general, though, this isn't a problem. In an application like
IPSEC, where you have a finite number of keys being used to encrypt
short packets, you just keep the pre-set up key blobs around for each
key and only do the setup work once for each security association.

Perry

References:

Re: What price security?

From: andrade@netcom.com (Andrade Software Andrade Networking)

Prev by Date: Re: What price security?
Next by Date: Re: What price security?
Next by thread: Re: New draft -- IPSEC AH
Index(es):
- Main
- Thread