On Tue, Dec 1, 2015 at 8:55 AM, Julien Vehent <jul...@linuxwall.info> wrote: > > AES-NI is fast enough that we shouldn't have to care: > > $ openssl speed -evp aes-256-gcm > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes > aes-256-gcm 385250.93k 983154.24k 2011460.35k 2620519.76k 3048865.79k
Intel's low-end CPUs don't have AES-NI. For example, Pentium G3258 ("Anniversary Edition"), launched in Q2 2014, doesn't have AES-NI: http://ark.intel.com/products/82723/Intel-Pentium-Processor-G3258-3M-Cache-3_20-GHz Neither does this Pentium model, launched in Q1 2015: http://ark.intel.com/products/87358/Intel-Pentium-Processor-G3470-3M-Cache-3_60-GHz Wan-Teh -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto