OpenVPN2.5 support CHACHA20-POLY1305

Riho-shuu · 2020-07-14T03:32:36.959Z

OpenVPN2.5 already support CHACHA20-POLY1305 cipher.
MV1000 can install the following ipk to use it.

openvpn-openssl_2.5.0-1_aarch64_cortex-a53.zip (224.4 KB)

alzhao · 2020-07-14T03:42:32.488Z

Have you tried? What is the speed?

vvv · 2020-07-14T06:18:49.353Z

Yes please perform a benchmark if you can! Would be interesting and useful to see if this will obtain higher than the rated 97Mbps for OpenVPN.

Johnex · 2020-07-14T11:43:54.226Z

It does perform better, but still not as fast as Wireguard. Probably around 10% increase in speed, but what is most interesting is you will will have better battery life on connected devices such as phones, as they will spend less time decrypting the data, as well as better security as ChaCha20 is one of the most secure ciphers at the moment.

rp201rp · 2020-07-17T14:54:04.410Z

Hey Johnex, would mind clarifying better battery life on client device is with openvpn chacha20 or with wireguard. thanks.

Johnex · 2020-07-17T15:14:09.481Z

Wireguard runs only ChaCha20, so it would be almost the same. Wireguard is still more efficient than OpenVPN so there would be some battery life saved from that too. To see how much we would need tests.

Wireguard still remains superior in all ways though and it’s what I recommend people use.

sfx2000 · 2020-07-18T23:54:27.128Z

WG is layer 2, so more efficient…

OVPN is layer 3, and more overhead, but in some environments, might still be a choice if WG doesn’t work.