[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CBC makes Implementations too Slow.



At 12:49 PM -0500 10/31/01, Bill Sommerfeld wrote:
>  > You are quite right - sorry if I did not make this clear.  Multiple cores
>>  only help if there are multiple streams or IPsec tunnels. 
>
>Multiple streams?  or multiple packets to work on at a time?
>
>The crypto per se shouldn't have inter-packet dependancies, though
>some interlocking would be necessary for sequence number generation
>and replay detection ..
>
>						- Bill

Multiple SAs are easy, which is why I used that example.

Multiple packets in the same SA could be reordered if farmed out to 
multiple crypto units in a chip, e.g., a later, small packet could 
emerge sooner than a larger, previously received packet. You can fix 
this with more complexity and buffering on the black side, but it 
takes work, memory, etc.

Steve


References: