Re: [Openvpn-devel] [ovpn-dco] Is cbc-hmac supported?

2020-12-02 Thread Jan Just Keijser
Hi Tony, On 02/12/20 15:51, Jan Just Keijser wrote: On 02/12/20 15:22, Tony He wrote: Hi Jan, Welcome to join the discussion. >the second set of numbers doesn't make sense, and a much better test is to do an actual encryption test I don't compile cryptodev kernel module for my PC and can

Re: [Openvpn-devel] [ovpn-dco] Is cbc-hmac supported?

2020-12-02 Thread Jan Just Keijser
Hi Tony, On 02/12/20 15:22, Tony He wrote: Hi Jan, Welcome to join the discussion. >the second set of numbers doesn't make sense, and a much better test is to do an actual encryption test I don't compile cryptodev kernel module for my PC and can not reproduce this issue for now.  You don't

Re: [Openvpn-devel] [ovpn-dco] Is cbc-hmac supported?

2020-12-02 Thread Tony He
Hi Jan, Welcome to join the discussion. >the second set of numbers doesn't make sense, and a much better test is to do an actual encryption test I don't compile cryptodev kernel module for my PC and can not reproduce this issue for now. You don't understand the reason why the performance is

[Openvpn-devel] [PATCH applied] Re: Remove auth_user_pass.wait_for_push variable

2020-12-02 Thread Gert Doering
Acked-by: Gert Doering I have pre-tested these changes extensively yesterday, trying to find new and exciting ways to break the combination of (async) plugin-auth, gen-auth-token, and --auth-nocache on the client - and this patchset finally makes this all work correctly :-) (my suggestion

[Openvpn-devel] [PATCH v2] Remove auth_user_pass.wait_for_push variable

2020-12-02 Thread Arne Schwabe
This variable was first introduce in earlier attempt to fix the auth-token problems with auth-nocache before user_password and auth_token were split into two variables. The idea of the variable it is being set if --pull is in use. However the variable was not always set correctly, especially if

Re: [Openvpn-devel] [ovpn-dco] Is cbc-hmac supported?

2020-12-02 Thread Jan Just Keijser
hi Tony, On 01/12/20 02:50, Tony He wrote: Hi Arne, openssl speed -evp aes-128-cbc type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 20035.60k 123261.54k 267081.60k 1094764.09k 9181370.18k openssl speed -evp aes-128-gcm type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes

[Openvpn-devel] [PATCH] Remove auth_user_pass.wait_for_push variable

2020-12-02 Thread Arne Schwabe
This variable was first introduce in earlier attempt to fix the auth-token problems with auth-nocache before user_password and auth_token were split into two variables. The idea of the variable it is being set if --pull is in use. However the variable was not always set correctly, especially if