[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: new second mandatory IPsec cipher

On Wed, 14 Jul 1999, Steven M. Bellovin wrote:
> >...You don't need both.  If you
> >decide to opt for the extra memory consumption -- a fairly easy decision
> >for most users nowadays, since 4KB of memory costs almost nothing...
> 
> The real problem isn't on hosts but on dedicated gateways, especially those
> with hardware doing the encryption...

And little embedded boxes which are short on memory but still want to
handle whole bunches of connections.  This is why I said "*most* users".
There are people who do still have problems with bulky per-connection
state. 

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)
References: