crypto aes openssl cbc gcm

kazoo it

 Edgerouter X.



ER-X Forwarding Speed
https://kazoo.ga/er-x-forwarding-speed/

Re-visit Forwarding Speed in ER-X

https://kazoo.ga/revisit-forwarding-speed-in-er-x/


Edgerouter X - IPsec Benchmarked
https://kazoo.ga/edgerouter-x-ipsec-benchmarked/


Let's focus on the 1460-byte packet size. In download direction, 377 Mbit/s is very good throughput in my opinion. It surpasses the quoted number from MediaTek and close to the 500 Mbit/s upper bound quoted by Authentec. In upload direction, relatively speaking it's a little disappointing. 128 Mbit/s is only about one third of the download throughput.





CBC
Cipher Block Chaining
Encryption parallelizable: No
Decryption parallelizable: Yes
Random read access: Yes

download is Decryption for crypto engine
upload is Encryption for crypto engine



The Crypto Engine in Edgerouter X
https://kazoo.ga/the-crypto-engine-in-edgerouter-x/




https://kazoo.ga/quick-benchmark-cbc-vs-gcm/

In my previous post, we touched OpenVPN 2.4 and its new inclusion of GCM ciphers. SFX2000 over SNBforums reminded me to check performance in current OpenSSL. Let me share my quick and dirty benchmarks.
64-bit Sandy Bridge @2.7GHz single-thread
AES-128-CBC with AES-NI



The Cortex-A9 is my RT-AC56U where I run OpenVPN server. It doesn't have any crypto acceleration in HW. CBC is faster than GCM by 145% to 185%. I thought I had to swallow my words and should not switch to GCM ciphers. Looking closer, I might get away with it.
My Conclusion..





http://cryptowiki.net/index.php?title=Output_feedback_with_a_nonlinear_function_(OFBNLF)

http://cryptowiki.net/index.php?title=Block_chaining_(BC)


http://cryptowiki.net/index.php?title=Symmetric_encryption_schemes