Ben Lindstrom wrote:

> Hmm.. I believe Markus established a few years ago that the HMAC is more
> costly in terms of preformance than most of the ciphers.

I'm not sure I'd agree with that. On our test systems hmac-md5 has a
throughput of 404MB/s on 8KiB data blocks while aes128-cbc has a
throughput of 120MB/s. If HMAC was as or more expensive than the cipher
I'd expect to see less lopsided figures.

openssh-unix-dev mailing list