<![CDATA[Best Performance with 2.3 and AES-NI?]]>If one has a modern Intel CPU with AES-NI (hardware crypto reports: AES-CBC,AES-XTS,AES-GCM,AES-ICM
), will AES128-GCM + SHA1 result in the best performance? Or would changing the hashing algorithm to AES-XCBC offer better performance than SHA1?

]]>https://forum.netgate.com/topic/100324/best-performance-with-2-3-and-aes-niRSS for NodeThu, 14 May 2026 01:10:49 GMTSun, 22 May 2016 14:35:03 GMT60<![CDATA[Reply to Best Performance with 2.3 and AES-NI? on Sun, 22 May 2016 19:52:31 GMT]]>Change your hashing to AES-XCBC because that will get accelerated by AES-NI since it's AES (of course).

The hashing algorithm really doesn't matter that much, because an attacker still needs to break to break the encryption layer, so AES-XCBC is perfectly fine and will be accelerated by AES-NI.

Everyone should always choose AES-XCBC when using AES-GCM.

I hope that helps.

]]>https://forum.netgate.com/post/626550https://forum.netgate.com/post/626550Sun, 22 May 2016 19:52:31 GMT