6 ms·
Sounds like a move to sell more hardware. My pfsense barely does any crypto. This will push me over to openbsd.
by givemefive 9y ago
Sounds like a move to sell more hardware. My pfsense barely does any crypto. This will push me over to openbsd.
- dom0 9y agoIndeed, AES-NI is very rare. Few computers if any have it. Edit: /s ... ?!
- throwa38282 9y agoI might be mistaken, but I thought it was in every non pentium/celeron/atom chip after 2010 and every chip after 2015 with some extensions. My desktop and laptop have them and they're mid-high end but not upper high end.
- paws 9y agoWhy do you say that? According to [1], AES-NI is not that rare. [1] https://en.wikipedia.org/wiki/AES_instruction_set https://en.wikipedia.org/wiki/AES_instruction_set
- gonzo 9y agoFor Intel CPUs (that are found on ARK): With AES-NI: http://ark.intel.com/Search/FeatureFilter?productType=processors&AESTech=true http://ark.intel.com/Search/FeatureFilter?productType=proces... Without: http://ark.intel.com/Search/FeatureFilter?productType=processors&AESTech=false http://ark.intel.com/Search/FeatureFilter?productType=proces...
- kbenson 9y ago> Edit: /s ... ?! Why are you surprised? If you are trying to make a point that AES-NI is common, just say so. Trying to do so by saying the opposite and expecting people will pick up on the sarcasm through a pure text medium without necessarily sharing the same knowledge to know whether that statement is true or not just adds confusion to the conversation. The point itself is useful, but the manner in which you expressed it emphasizes the delivery over the content, to the degree the content is sometimes obscured.
- gonzo 9y agoIf this was a move to sell more hardware, why wouldn't we make the decision for 2.4 (which is imminent) rather than 2.5, which is based on FreeBSD 12, when 12.0R isn't even scheduled?
- deleted 9y ago[deleted]
- givemefive 9y agoI don't know. What is your reasoning? I don't really understand why you'd want to force people to upgrade HW when they don't need to.
- tptacek 9y agoThere is a difference between a design decision reasonable people can disagree, even forcefully, about, and a design decision that is actually a deceptive attempt to get people to buy new hardware.
- deleted 9y ago[deleted]
- acdha 9y agoThey spelled out the reasoning in the post: “in order to support the increased cryptographic loads that we see as part of pfSense verison 2.5, pfSense Community Edition version 2.5 will include a requirement that the CPU supports AES-NI” You may disagree with that but it's intellectually dishonest to argue as if they didn't provide clear, technically defensible rationale, especially at a time when much of the industry has been moving to hardware offload.
- deleted 9y ago[deleted]
- SaltySolomon 9y agoWait, your argument is that isn't a way to sell more hardware is that you will do it later, not now?