Re: OpenSSH HPN

From: Bryan Drewery <bdrewery_at_FreeBSD.org>
Date: Tue, 10 Nov 2015 16:32:04 -0800
On 11/10/15 9:52 AM, John-Mark Gurney wrote:
> My vote is to remove the HPN patches.  First, the NONE cipher made more
> sense back when we didn't have AES-NI widely available, and you were
> seriously limited by it's performance.  Now we have both aes-gcm and
> chacha-poly which it's performance should be more than acceptable for
> today's uses (i.e. cipher performance is 2GB/sec+).

AES-NI doesn't help the absurdity of double-encrypting when using scp or
rsync/ssh over an encrypted VPN, which is where NONE makes sense to use
for me.

-- 
Regards,
Bryan Drewery
Received on Tue Nov 10 2015 - 23:32:07 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:00 UTC