Re: AES and 3DES performance on Cisco routers

What I would really like to see is how much overhead the various encryption
protocol take from the nominal bandwidth. For example, if I have a 2Mbit
line to a branch, and use 3DES my actual throughput will be X vs. if I use
AES, the throughput will be Y.

Shimon Silberschlag

+972-3-9351572
+972-51-207130


----- Original Message -----
From: "Jean-Francois Dive" <[email protected]>
To: "Brian Bruns" <[email protected]>
Cc: "Brian V. Minier" <[email protected]>; "'Shimon Silberschlag'"
<[email protected]>; <[email protected]>
Sent: Wednesday, March 24, 2004 11:31
Subject: Re: [VPN] AES and 3DES performance on Cisco routers


> please all note that those numbers are marketing and that they are
> mesured on tailored traffic (max mtu size for each packet) which is not
> real world traffic; this, at least in most vendor documentation.
>
> J.
>
> On Mon, Mar 22, 2004 at 09:03:15PM -0500, Brian Bruns wrote:
> > On Monday, March 22, 2004 3:24 PM [EST], Brian V. Minier
> > <[email protected]> wrote:
> >
> > >> Well, from the Cisco website on a PIX firewall
> > >>
> > >>
> > >>
> > >> The compact desktop chassis of the Cisco PIX 506E provides two
autosensing
> > >> Fast Ethernet (10/100) interfaces. Ideal for securing high-speed
Internet
> > >> connections, the Cisco PIX 506E delivers up to 100 Mbps of firewall
> > >> throughput, 16 Mbps of Triple Data Encryption Standard VPN
throughput, and
> > >> 30 Mbps of Advanced Encryption Standard-128 VPN throughput in a
> > >> cost-effective, high-performance solution.
> > >>
> > >>
> > >>
> > >> So, it looks like AES 128 is roughly 2x as fast as 3DES.  I would
hazard a
> > >> guess and say AES256 would than be about as fast as 3DES.
> >
> >
> > (3)DES is slow no matter how you look at it. Your best bet is to stick
with
> > AES, as it is supposed to replace DES completely.
> >
> >
> > --
> > Brian Bruns
> > The Summit Open Source Development Group
> > Open Solutions For A Closed World / Anti-Spam Resources
> > http://www.sosdg.org
> >
> > The Abusive Hosts Blocking List
> > http://www.ahbl.org
> >
> > _______________________________________________
> > VPN mailing list
> > [email protected]
> > http://lists.shmoo.com/mailman/listinfo/vpn
>
> --
>
> -> Jean-Francois Dive
> --> [email protected]
>
>   I think that God in creating Man somewhat overestimated his ability.
>   -- Oscar Wilde