3 ms·
> 2) Encryption is needed in the bottom stack! WHY? One reason is that hardware (NICs) can offload encryption more easily when it's closer to the lowest end-to
by cryptonector 3y ago
> 2) Encryption is needed in the bottom stack! WHY?
One reason is that hardware (NICs) can offload encryption more easily when it's closer to the lowest end-to-end layer (i.e., no lower than IP).
So IPsec and QUIC are easy to offload, but TLS-over-TCP less so. It especially helps that there is no need to buffer up part of the TCP stream so as to get whole TLS records to decrypt.
- bullen 3y agoYou don't need hardware encryption if you don't need encryption. You are solving 1% of the problems with 99% of the energy.