Hi, On Thu, Nov 26, 2020 at 04:53:14PM +0800, Tony He wrote: > Understood. We have dicussed this in the OpenWRT forum. Maybe some kind > OpenWRT guys will implement aead hmac-sha256-cbc-aes > for ovpn-dco module in the future.
Why? If you do AES in the first place, all numbers I have seen so far say "AES-GCM modes are faster / use less CPU = battery". And, less overhead on the wire. And on non-intel devices, CHACHA-POLY, because there is ARM acceleration. gert -- "If was one thing all people took for granted, was conviction that if you feed honest figures into a computer, honest figures come out. Never doubted it myself till I met a computer with a sense of humor." Robert A. Heinlein, The Moon is a Harsh Mistress Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel