Re: [CryptoAPI-devel] Re: [Design] [PATCH] USAGI IPsec

From: Jean-Luc Cooke (jlcooke@certainkey.com)
Date: Thu Oct 24 2002 - 09:50:26 EST


On Tue, Oct 22, 2002 at 08:02:00AM +0300, Jari Ruusu wrote:
> kerneli.org/cryptoapi _is_ useless joke for many needs. Fortunately other
> people are able to see the limitations/sillyness of kerneli.org/cryptoapi:
>
> 1) You are trying to replace link/insmod time overhead with runtime
> overhead + unnecessary bloat.
> 2) No direct link access to low level cipher functions or higher level
> functions.
> 3) No clean way to replace cipher code with processor type optimized
> assembler implementations.

Jari has a few points here. But the "killer" functionalities are all there
IMHO. Low-level assembler implementations are over-rated, again IMHO. The
performance difference between C and ASM is at most 50%. 1ms vs 1.5 ms.
Even if you've got a large payload on the rare occation (>5MB) block ciphers
are quite fast for 95% of applications

JLC

-- 
http://www.certainkey.com
Suite 4560 CTTC
1125 Colonel By Dr.
Ottawa ON, K1S 5B6
C: 613.263.2983
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Thu Oct 31 2002 - 22:00:23 EST