Displaying 1 result from an estimated 1 matches for "smb2_encryption_aes128_ccm".
2018 Sep 21
0
AES-GCM with AES-NI
...I apologize for formatting issues, I typically don’t use email lists.
In /source3/smbd/smb2_negprot.c lines 494 to 502
“
/*
* For now we preferr CCM because our implementation
* is faster than GCM, see bug #11451.
*/
if (aes_128_ccm_supported) {
xconn->smb2.server.cipher = SMB2_ENCRYPTION_AES128_CCM;
} else if (aes_128_gcm_supported) {
xconn->smb2.server.cipher = SMB2_ENCRYPTION_AES128_GCM;
}
“
This implies that GCM is not used unless as a fallback. The bug is titled
Poor SMB3 encryption performance with AES-GCM
This implies the bug is with software implementation of GCM.
The “patc...