> With networking protocols you often also have a requirement to minimize > packet reordering, so I understand it's a careful balance. But it is possible > to serialize the important stuff and still do the crypto out-of-order, which > would be really beneficial on _some_ platforms (which have HW crypto > acceleration but no such CPU extensions) at least. Many Ethernet PHYs are also capable of doing MACSeC as they send/receive frames. Doing it in hardware in the PHY avoids all these out-of-order and latency issues. Unfortunately, we are still at the early days for PHY drivers actually implementing MACSeC offload. At the moment only the Microsemi PHY and Aquantia PHY via firmware in the Atlantic NIC support this. Andrew
