Re: Remove little-used algorithms from IKEv2

[Paul Koning <[e-mail]>]

>>>>> "Dan" == Dan McDonald <[e-mail]> writes:

 Dan> MD5 is a far better peformer than SHA-1 - especially if you work
 Dan> around MD5's poor assumptions that all-the-world's-an-Intel.

I found it to be about 15% faster than SHA-1, and that on a big endian
machine.  That number makes sense given the structure of the two
algorithms.  So, somewhat better, yes.  "Far better", no.

In hardware implementations, the two tend to be pretty close, and
usually faster than the encryption transform so it doesn't matter
which you chose as far as performance goes.

     paul