rimbalza
Hi, I'm trying to figure out the best encryption to choose for my tunnel and I have a doubt about which numbers to consider.
My machine gives me this table about 2 different modes of AES (they are aes-ni accelerated)
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes
aes-128-cbc 704010.34k 1080850.24k 1100229.03k 1086232.77k 1118655.83k 1106785.69k
aes-128-gcm 358932.92k 838268.66k 1826239.84k 3083420.00k 3985864.57k 4122863.80k
I'm using openvpn in a pfSense installation.
I have an option to use AES-128-GCM (I understand we like GCM), and it says it uses 128 bit key / 128 bit block.
The above table says my hardware performs better with GCM on blocks >256 bytes.
The 16 byte (128 bit) figure is better with CBC (twice the speed)
So, selecting aes-128-gcm that specifies 128 bit block puts me in the first column where CBC is better, or those blocks are unrelated to the block size used by openssl benchmark?
Thanks