Re: AES and 3DES performance on Cisco routers
Jean-Francois Dive <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
please all note that those numbers are marketing and that they are mesured on tailored traffic (max mtu size for each packet) which is not real world traffic; this, at least in most vendor documentation. J. On Mon, Mar 22, 2004 at 09:03:15PM -0500, Brian Bruns wrote: > On Monday, March 22, 2004 3:24 PM [EST], Brian V. Minier > <[email protected]> wrote: > > >> Well, from the Cisco website on a PIX firewall > >> > >> > >> > >> The compact desktop chassis of the Cisco PIX 506E provides two autosensing > >> Fast Ethernet (10/100) interfaces. Ideal for securing high-speed Internet > >> connections, the Cisco PIX 506E delivers up to 100 Mbps of firewall > >> throughput, 16 Mbps of Triple Data Encryption Standard VPN throughput, and > >> 30 Mbps of Advanced Encryption Standard-128 VPN throughput in a > >> cost-effective, high-performance solution. > >> > >> > >> > >> So, it looks like AES 128 is roughly 2x as fast as 3DES. I would hazard a > >> guess and say AES256 would than be about as fast as 3DES. > > > (3)DES is slow no matter how you look at it. Your best bet is to stick with > AES, as it is supposed to replace DES completely. > > > -- > Brian Bruns > The Summit Open Source Development Group > Open Solutions For A Closed World / Anti-Spam Resources > http://www.sosdg.org > > The Abusive Hosts Blocking List > http://www.ahbl.org > > _______________________________________________ > VPN mailing list > [email protected] > http://lists.shmoo.com/mailman/listinfo/vpn -- -> Jean-Francois Dive --> [email protected] I think that God in creating Man somewhat overestimated his ability. -- Oscar Wilde