RE: [Users] Help : IPSec and Non 3DES encryption. Any experiences ?

From: Peter Mueller <pmueller(at)sidestep.com>
Date: Wed May 07 2003 - 18:38:31 EDT

> I am thinking of comparing the performance of the 3DES with

You could read the documentation or the list archives :)

http://www.freeswan.org/freeswan_trees/freeswan-1.99/doc/performance.html#pe rformance

Higher performance alternatives
AES is a new US government block cipher standard, designed to replace the obsolete DES. If FreeS/WAN using 3DES is not fast enough for your application, the AES patch may help.

To date (March 2002) we have had only one mailing list report of measurements with the patch applied. It indicates that, at least for the tested load on that user's network, AES roughly doubles IPsec throughput. If further testing confirms this, it may prove possible to saturate an OC3 link in software on a high-end box.

P

---

Users mailing list
Users@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users Received on Wed May 7 19:26:18 2003