On Sat, Jan 2, 2016 at 10:22 PM, Yawning Angel <yawn...@schwanenlied.me> wrote: > In terms of prioritization, ensuring all existing traffic isn't > subject to later decryption is far more important
I'd think so as you could adapt around other things, but a traffic decrypt seems quite bad, especially given how much is stored in purpose built agency farms for later action, and how who's talking to who is perhaps already known. > Additionally, without AVX2, signing is glacially slow, clocking in at > ~200 ms on an Haswell i5. The same hardware does our existing ntor > handshake in ~230 usec. Haswell i5 seems to have AVX2, as do all Haswell's, perhaps you refer to Ivy Bridge i5's which do not... https://software.intel.com/en-us/blogs/2011/06/13/haswell-new-instruction-descriptions-now-available/ https://en.wikipedia.org/wiki/Haswell_(microarchitecture)#New_features https://en.wikipedia.org/wiki/Advanced_Vector_Extensions#AVX2 https://en.wikipedia.org/wiki/List_of_Intel_Core_i5_microprocessors _______________________________________________ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev