[noise] DoS *is* a problem

[Jason A. Donenfeld]

On Thu, Nov 19, 2015 at 12:54 PM, Jason A. Donenfeld <Jason at zx2c4.com> wrote:
> Even at 20k/second, each message of NoiseIK has 2 ECDH operations. So,
> 10k/second:
>
> 10000 handshakes/second * 96 bytes / 131072 bytes/megabit = 7.3
> megabits per second
>
> That seems like a big big big problem

And even the argument of "well, that's a lot of packets per second,
even if they're small..." This sub-$100 router [1] forwards 1 million
packets per second, and this is just some commodity device. Real
networks have far more throughput.

[1] https://www.ubnt.com/edgemax/edgerouter-lite/