I was analysing the Chacha20 algorithm and the Poly1305 MAC generation from RFC 7539. It seems that the Chacha20 is quite faster compared to AES on CPUs without hardware support like AES-NI. But Poly1305 tag generation contains 16-byte random integer multiplication with another for each 16-byte block of ciphertext.
Can we achieve a relevant performance boost with this operation offload to a dedicated chip.?