Re: Add GCM Mode for AES-128

[John Viega]

There's plenty of hardware supporting GCM right now, including off-the-shelf stuff from Hifn and Elliptic Semiconductor.  I know Safenet supports it, but am not sure if they have an accelerator card or not.  The whole purpose of GCM was authenticated AES encryption that could scale more or less to arbitrary bit-rates in hardware, while still performing well enough in software. I'd definitely like to see GCM in the OpenSSL crypto library (not in a TLS cipher suite, unless the IETF sees a need for high-speed hardware accelerated TLS, then let them spec it first).  NIST also just published a draft standard for GCM as FIPS SP 800-38D, and it's made its way into a few IEEE things and IPSec.  So it's probably got enough momentum to belong in there.  Similarly, I'd also like to see CCM supported... John