On Wed, 12 Feb 2025 22:33:04 -0800 Eric Biggers wrote: > So anyone who cares about TLS or IPsec performance should of course be using > AES-GCM, as it's the fastest by far, and it has no need for multibuffer.
Can confirm, FWIW. I don't know as much about IPsec, but for TLS lightweight SW-only crypto would be ideal.
