Re: Patch: cprng_fast performance - please review.

2014-04-18 Thread Markku-Juhani Olavi Saarinen
Hi, If you want to get rid of RC4, use AES in CTR mode. It is standard, compact, clean, and really fast solution. May sound boring, but gives me a feel of solid security engineering. Note that majority of systems now have the AES-NI instructions which speed up AES implementations by an order of

Re: Patch: cprng_fast performance - please review.

2014-04-18 Thread Markku-Juhani Olavi Saarinen
On Fri, Apr 18, 2014 at 8:11 PM, Taylor R Campbell campbell+netbsd-tech-k...@mumble.net wrote: Date: Fri, 18 Apr 2014 19:58:06 +0200 From: Markku-Juhani Olavi Saarinen m...@iki.fi If you want to get rid of RC4, use AES in CTR mode. It is standard, compact, clean, and really fast

Re: Patch: cprng_fast performance - please review.

2014-04-18 Thread Markku-Juhani Olavi Saarinen
: On Fri, Apr 18, 2014 at 08:23:11PM +0200, Markku-Juhani Olavi Saarinen wrote: Agreed. AES is worse if you don't have AES-NI. It has been there on all new systems purchased in some last 3 years, so I would *guess* that it would be 50% of systems fielded out there. It hasn't been