On 25/03/2019 09:44, Gert Doering wrote: > Hi, > > On Sun, Mar 24, 2019 at 08:42:52PM -0400, RA wrote: >> It looks like OpenVPN's integration with mbed TLS library doesn't support >> hardware acceleration (AES-NI etc). Is that right? If yes, any way/plans to >> implement that? > > As far as I understand, it's not OpenVPN who can do anything about it - the > crypto library uses AES-NI or not, and OpenVPN will benefit from it (or not).
Correct. OpenVPN does not do anything in particular with the hardware side. There is a --engine option, but for AES-NI that is not needed; with OpenSSL it's automatic and should ideally be the same with mbed TLS. But whether mbed TLS plans for such support (I don't recall they've implemented it yet), that is entirely up to them. When it arrives in mbed TLS chances are high it will just work with OpenVPN. -- kind regards, David Sommerseth OpenVPN Inc
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
