Hi,

On Thu, Nov 26, 2020 at 04:53:14PM +0800, Tony He wrote:
> Understood.  We have dicussed this in the OpenWRT forum. Maybe some kind
> OpenWRT guys will implement  aead hmac-sha256-cbc-aes
> for ovpn-dco module in the future.

Why?  If you do AES in the first place, all numbers I have seen so far
say "AES-GCM modes are faster / use less CPU = battery".  And, less
overhead on the wire.

And on non-intel devices, CHACHA-POLY, because there is ARM acceleration.

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to