Skip to main content
8 events
when toggle format what by license comment
Oct 2, 2022 at 16:58 answer added bk2204 timeline score: 2
Oct 1, 2022 at 23:58 comment added Maarten Bodewes No it isn't. The AES-GCM ciphermode both encrypts and authenticates the messages in the transport channel. The ECDHE is used for establishing the keys for that, using the SHA-256 for deriving the message encryption keys. The ECDSA is used for entity authentication. Everything but AES-GCM is in the handshake, so they are relatively inconsequential unless you've got very little data to encrypt. Anyway, the ECDH / ECDSA with 256 bit keys is also about as fast as you may wish.
Oct 1, 2022 at 21:48 comment added intrigued_66 @MaartenBodewes is that any different to what i'm currently using ECDHE-ECDSA-AES128-GCM-SHA256? (feel free to treat me as clueless, this isn't my area of expertise)
Oct 1, 2022 at 18:30 comment added Maarten Bodewes There are things like single DES and RC4 in SSLv3, which may still be present in OpenSSL. For secure mode I guess that AES-128-GCM is fastest on more modern CPU's (with hardware support for both AES-128 and GCM or rather GMAC).
Oct 1, 2022 at 17:54 comment added intrigued_66 I can use any Intel from SKkylake onwards. Thanks for the link. Unfortunately it's comparing against 256 bit though? I could use 128 and still sleep at night.
Oct 1, 2022 at 17:38 comment added kelalaka Well, to be honest that depend on your CPU version. For a comparison see Changing an Encryption scheme from AES to ChaCha20
S Oct 1, 2022 at 16:25 review First questions
Oct 2, 2022 at 16:15
S Oct 1, 2022 at 16:25 history asked intrigued_66 CC BY-SA 4.0