3 ms·
Blowfish gone will impact a good deal of orgs that were using it for performance reasons
by peterwwillis 9y ago
Blowfish gone will impact a good deal of orgs that were using it for performance reasons
- keeperofdakeys 9y agoDue to hardware acceleration, AES based ciphers on a modern computer can blow arcfour and blowfish out of the water. https://blog.famzah.net/2015/06/26/openssh-ciphers-performance-benchmark-update-2015/ https://blog.famzah.net/2015/06/26/openssh-ciphers-performan...
- deleted 9y ago[deleted]
- peterwwillis 9y agoYes, but that isn't really the point. Legacy and embedded computers without AES instructions don't get those gains, so they use blowfish. And those with blowfish configured will either A) fail to connect entirely due to "Ciphers: blowfish-cbc" excluding all others, or B) fall back to another cipher that's slow on that system. Things are going to break, is my point.
- jedisct1 9y agoAES and ChaCha20 are faster.
- crest 9y agoAES is slower for bulk encryption than Blowfish on old CPUs (at least those with enough data cache for the Blowfish tables).