Community discussions

MikroTik App
 
park2701
just joined
Topic Author
Posts: 8
Joined: Fri Mar 17, 2017 4:16 am

Feature request : Lightweight crypto for devices not having hardware crypto engine

Fri Mar 17, 2017 4:37 am

How about add some lightweight crypto algorithm to RouterOS for devices not having hardware crypto engine?

The image below is result from openssl speed command.(Openssl 1.0.1u with LEA lightweight crypto integrated)
light.PNG
In simply, the LEA crypto exceeded about 3 times than AES in speed(Maybe we get less performance when adopted to tunneling. But It seems worth doing if it gives reasonable security.)
You do not have the required permissions to view the files attached to this post.
 
mikruser
Long time Member
Long time Member
Posts: 578
Joined: Wed Jan 16, 2013 6:28 pm

Re: Feature request : Lightweight crypto for devices not having hardware crypto engine

Mon Mar 20, 2017 10:45 am

+1
Devices like RB751 is too slow with current ROS Ipsec encr. algorithms (~10Mbit/s)
We want fast fast algorithm!