Re:WireGuardNT, a high-performance WireGuard implementation ...
by starfallg on Tuesday August 03, 2021 @02:06PM
(#28052191)
>I am confident we'll see hw acceleration for Chacha20-Poly1305 in the future too.
The speed gains wouldn't be as significant. AES uses S-Box computations that do well when hardware accelerated, whereas ChaCha/Salsa20 are designed to use more typical CPU instructions for bitwise operations.
Re:WireGuardNT, a high-performance WireGuard implementation ...
by benou on Tuesday August 03, 2021 @04:55PM
(#28054080)
Speed gains maybe not, however on current x86 platform there is a 2x perf difference between AES-256-GCM and Chacha20-Poly1305, so even if we get "only" 2x I'd be delighted.
The speed gains wouldn't be as significant. AES uses S-Box computations that do well when hardware accelerated, whereas ChaCha/Salsa20 are designed to use more typical CPU instructions for bitwise operations.