Dear list, I am doing performance tests on an Intel I5 (661 i think) based machine. Thanks to the AES-NI extensions, I am able to get a throughput of about 500MB/s when doing AES256. But for TLS, hashing performance is important, too. SSE4.2 provides no equivalent extension for SHA-1, so that needs to be done purely in software - with a resulting throughput of about 200MB/s. Given a situation where I need to both hash and encrypt some plaintext, throughput drops even worse to about 180MB/s since both operations need to be done sequentially (this all is done on a single core, btw). So despite the very stunning AES performance, I guess one has a hard time saturating the wire (full-duplex) with TLS. Is that correct so far, or am I getting something wrong here? The actual question (indeed related to the subject) is this: are there any implementations/plans on using SSE3 to speed up SHA-1 as stated in [1]? Do you see any possible problems when trying to do so (regarding e.g. SSE3 detection or something)? Greetings, Phil 1: http://software.intel.com/en-us/articles/improving-the-performance-of-the-secure-hash-algorithm-1/?wapkw=(sha1+optimization) -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html