Page 1 of 1

Feature request : Lightweight crypto for devices not having hardware crypto engine

Posted: Fri Mar 17, 2017 4:37 am
by park2701
How about add some lightweight crypto algorithm to RouterOS for devices not having hardware crypto engine?

The image below is result from openssl speed command.(Openssl 1.0.1u with LEA lightweight crypto integrated)
light.PNG
In simply, the LEA crypto exceeded about 3 times than AES in speed(Maybe we get less performance when adopted to tunneling. But It seems worth doing if it gives reasonable security.)

Re: Feature request : Lightweight crypto for devices not having hardware crypto engine

Posted: Mon Mar 20, 2017 10:45 am
by mikruser
+1
Devices like RB751 is too slow with current ROS Ipsec encr. algorithms (~10Mbit/s)
We want fast fast algorithm!