> At what point does it make sense to have a separate crypto-core / offload-engine? When you're building servers that need to specialize in encryption. The se

> At what point does it make sense to have a separate crypto-core / offload-engine? When you're building servers that need to specialize in encryption. The separate chips are often called "cryptoprocessors". https://en.wikipedia.org/wiki/Secure_cryptoprocessor https://en.wikipedia.org/wiki/Secure_cryptoprocessor An example of commercialized cryptoprocessors: http://www.tiempo-ic.com/products/ip-cores/cryptoprocessors.html http://www.tiempo-ic.com/products/ip-cores/cryptoprocessors.... What DJB is asking (IMHO) is for improvements to general-purpose processors, for example the processor you already have in your laptop.