Re: [rtcweb] Require/Suggest AEAD GCM for SRTP

[Sean DuBois <[e-mail]>]

On Wed, Jul 10, 2019 at 04:02:59PM -0700, Justin Uberti wrote:
> We looked into this in Chrome in
> https://bugs.chromium.org/p/chromium/issues/detail?id=713701, but we
> decided not to proceed because of the resultant blowup from using the
> non-truncatable AEAD MAC (16 bytes per packet vs 4/10 for HMAC-SHA1).
>
> I think we'd be open to revisiting this if there were obvious performance
> benefits, but your numbers for HMAC-SHA1 seem unusually bad. For example,
> "openssl speed sha1" yields 500 MB/s for 256-byte packets on my MacBook
> Pro, compared to the 28 MB/s that you noted in the bug. "openssl speed
> aes-128-gcm" does yield 1500 MB/s, so there's clearly some upside here, but
> it's hard to see this as a must-have.
>
Here are my numbers using libsrtp, still pretty significant I think!
People have fought a lot harder for much smaller improvements.

-- aes_cm_128_hmac_sha1_32
./a.out  1.83s user 0.01s system 99% cpu 1.843 total
./a.out  1.84s user 0.01s system 99% cpu 1.856 total
./a.out  1.83s user 0.00s system 99% cpu 1.837 total
./a.out  1.82s user 0.01s system 99% cpu 1.831 total
./a.out  2.04s user 0.01s system 99% cpu 2.065 total
./a.out  1.82s user 0.01s system 99% cpu 1.834 total
./a.out  1.84s user 0.01s system 99% cpu 1.857 total
./a.out  1.83s user 0.00s system 99% cpu 1.843 total
./a.out  1.85s user 0.01s system 99% cpu 1.860 total
./a.out  1.83s user 0.01s system 99% cpu 1.839 total

-- aes_gcm_128_16
./a.out  0.76s user 0.00s system 99% cpu 0.772 total
./a.out  0.81s user 0.00s system 99% cpu 0.814 total
./a.out  0.75s user 0.00s system 99% cpu 0.762 total
./a.out  0.75s user 0.01s system 99% cpu 0.760 total
./a.out  0.76s user 0.00s system 99% cpu 0.765 total
./a.out  0.76s user 0.00s system 99% cpu 0.765 total
./a.out  0.79s user 0.01s system 99% cpu 0.803 total
./a.out  0.77s user 0.01s system 99% cpu 0.780 total
./a.out  0.75s user 0.00s system 99% cpu 0.762 total
./a.out  0.79s user 0.01s system 99% cpu 0.796 total

Hopefully my test is good, whipped it up while waiting for my
flight. https://gist.github.com/Sean-Der/7a42bd70edfe1324ccc6ab399d653c0e