Re: AES and 3DES performance on Cisco routers

Jean-Francois Dive <[email protected]>
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
please all note that those numbers are marketing and that they are
mesured on tailored traffic (max mtu size for each packet) which is not
real world traffic; this, at least in most vendor documentation.

J.

On Mon, Mar 22, 2004 at 09:03:15PM -0500, Brian Bruns wrote:
> On Monday, March 22, 2004 3:24 PM [EST], Brian V. Minier
> <[email protected]> wrote:
> 
> >> Well, from the Cisco website on a PIX firewall
> >>
> >>
> >>
> >> The compact desktop chassis of the Cisco PIX 506E provides two autosensing
> >> Fast Ethernet (10/100) interfaces. Ideal for securing high-speed Internet
> >> connections, the Cisco PIX 506E delivers up to 100 Mbps of firewall
> >> throughput, 16 Mbps of Triple Data Encryption Standard VPN throughput, and
> >> 30 Mbps of Advanced Encryption Standard-128 VPN throughput in a
> >> cost-effective, high-performance solution.
> >>
> >>
> >>
> >> So, it looks like AES 128 is roughly 2x as fast as 3DES.  I would hazard a
> >> guess and say AES256 would than be about as fast as 3DES.
> 
> 
> (3)DES is slow no matter how you look at it. Your best bet is to stick with
> AES, as it is supposed to replace DES completely.
> 
> 
> -- 
> Brian Bruns
> The Summit Open Source Development Group
> Open Solutions For A Closed World / Anti-Spam Resources
> http://www.sosdg.org
> 
> The Abusive Hosts Blocking List
> http://www.ahbl.org
> 
> _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn

-- 

-> Jean-Francois Dive
--> [email protected]

  I think that God in creating Man somewhat overestimated his ability.
  -- Oscar Wilde
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.