On Mon, 2008-12-22 at 13:58 +0100, Henning Rogge wrote:
[...]
> Of course most routers don't have hardware acceleration, but that is another 

Today? Yes.
Tomorrow? 
Given that WEP, WPA and WPA-2 are already there (and the former 2
already obsolete), more of that will come.

> story... ;)

VIA-C7 - http://www.via.com.tw/en/products/processors/c7/ - has hardware
AES support.

Apart from that: The asymmetric keys are just necessary to (regularly)
exchange the symmetric ones - IPsec does this also in completely
user-space (at least 5 years ago).
And for the symmetric keys, the algorithms are fairly cheap (and one
could use a somewhat less secure but much more CPU-saving one if it
really matters).
So personally I consider that problem as such solved - it is just a
question of a good implementation (or hardware support).

	Bernd
-- 
Firmix Software GmbH                   http://www.firmix.at/
mobil: +43 664 4416156                 fax: +43 1 7890849-55
          Embedded Linux Development and Services




