OpenSSH HPN

Bryan Drewery bdrewery at FreeBSD.org
Wed Nov 11 00:32:07 UTC 2015


On 11/10/15 9:52 AM, John-Mark Gurney wrote:
> My vote is to remove the HPN patches.  First, the NONE cipher made more
> sense back when we didn't have AES-NI widely available, and you were
> seriously limited by it's performance.  Now we have both aes-gcm and
> chacha-poly which it's performance should be more than acceptable for
> today's uses (i.e. cipher performance is 2GB/sec+).

AES-NI doesn't help the absurdity of double-encrypting when using scp or
rsync/ssh over an encrypted VPN, which is where NONE makes sense to use
for me.

-- 
Regards,
Bryan Drewery


More information about the freebsd-current mailing list