A bit of benchmarking ...

[Jeremy Allison]

On Fri, Mar 01, 2019 at 08:34:59PM +0100, Stefan Metzmacher wrote:
> >>>
> >>> It would be wonderful to move from any home-grown
> >>> crypto to GnuTLS for everything !
> >>
> >> I've tested AES-GCM with Samba Crypto (Intel AES NI) and GnuTLS.
> >>
> >> TL;DR
> >>
> >> Samba Crypto (Intel AES NI):  10 min
> >> GnuTLS:                       12 sec
> >>
> >> https://hackmd.io/s/S1bJnG4IN
> > 
> > Wow, that is a .. significant change. Any ideas
> > on why the difference is so great ?
> 
> Doing xor and lshift/rshift operations in C is what kills us (even when
> using aesni).

Thanks for the info Metze, much appreciated !