[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: CBC makes Implementations too Slow.
At 12:49 PM -0500 10/31/01, Bill Sommerfeld wrote:
> > You are quite right - sorry if I did not make this clear. Multiple cores
>> only help if there are multiple streams or IPsec tunnels.
>
>Multiple streams? or multiple packets to work on at a time?
>
>The crypto per se shouldn't have inter-packet dependancies, though
>some interlocking would be necessary for sequence number generation
>and replay detection ..
>
> - Bill
Multiple SAs are easy, which is why I used that example.
Multiple packets in the same SA could be reordered if farmed out to
multiple crypto units in a chip, e.g., a later, small packet could
emerge sooner than a larger, previously received packet. You can fix
this with more complexity and buffering on the black side, but it
takes work, memory, etc.
Steve
References: