Re: AES and 3DES performance on Cisco routers
"Brian Bruns" <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
On Monday, March 22, 2004 3:24 PM [EST], Brian V. Minier <[email protected]> wrote: >> Well, from the Cisco website on a PIX firewall >> >> >> >> The compact desktop chassis of the Cisco PIX 506E provides two autosensing >> Fast Ethernet (10/100) interfaces. Ideal for securing high-speed Internet >> connections, the Cisco PIX 506E delivers up to 100 Mbps of firewall >> throughput, 16 Mbps of Triple Data Encryption Standard VPN throughput, and >> 30 Mbps of Advanced Encryption Standard-128 VPN throughput in a >> cost-effective, high-performance solution. >> >> >> >> So, it looks like AES 128 is roughly 2x as fast as 3DES. I would hazard a >> guess and say AES256 would than be about as fast as 3DES. (3)DES is slow no matter how you look at it. Your best bet is to stick with AES, as it is supposed to replace DES completely. -- Brian Bruns The Summit Open Source Development Group Open Solutions For A Closed World / Anti-Spam Resources http://www.sosdg.org The Abusive Hosts Blocking List http://www.ahbl.org