Like every other website on the planet, SmallNetBuilder uses cookies. Our cookies track login status, but we only allow admins to log in anyway, so those don't apply to you. Any other cookies you pick up during your visit come from advertisers, which we don't control.
If you continue to use the site, you agree to tolerate our use of cookies. Thank you!

Router Charts

Click for Router Charts

Router Ranker

Click for Router Ranker

NAS Charts

Click for NAS Charts

NAS Ranker

Click for NAS Ranker

More Tools

Click for More Tools

Wireless Features

Security Slowdown

I already covered the second "secret" in this article, but it bears repeating. In the pre-11n days, I had stopped testing wireless products for WEP-enabled throughput reduction. The reason was that all products had built in the hardware encryption engine needed to handle the heavier calculations required by WPA and WPA2. So I no longer was able to find a throughput reduction greater than my measurement technique could detect.

But all that changed with draft 11n.

My testing has shown a 28 to 75% reduction in draft 11n product throughput with WEP enabled, with the Atheros chipset turning in the highest reduction (Figure 5) and the Marvell the least (Figure 4).

Security mode throughput loss - downlink

Figure 4: Security mode throughput loss - downlink

Even WPA/TKIP has shown throughput hits of 35 to 77%. The Atheros and Marvell chipsets again turn in the highest and lowest throughput reductions respectively (Figure 5).

Security mode throughput loss - uplink

Figure 5: Security mode throughput loss - uplink

So it would seem that WPA2 which uses AES, is the only way to go for draft 11n wireless security. But, even then, the data shows that uplink throughput loss with WPA2 can still be significant, i.e. up to 35%!

In contrast, Figure 6 shows security mode performance that you can expect from a typical < $50 802.11g router. The plot shows a comparison of throughput with WEP 128, WPA/TKIP, WPA2 and no encryption for a Trendnet TEW-452BRP router and matching TEW-441PPC notebook card. All three security modes have performance within 5% of unencrypted performance, which is within the resolution of the measurement technique.

Security mode throughput loss - Trendnet TEW-452BRP

Figure 6: Security mode throughput loss - Trendnet TEW-452BRP

By comparison, Figure 7 shows the same mode comparison for a D-Link DIR-655 draft 11n router and DWA-652 Notebook card.

Security mode throughput loss - D-Link DIR-655

Figure 7: Security mode throughput loss - D-Link DIR-655

This time you see an almost 80% throughput loss for WEP128 and WPA/TKIP!

More Wireless

Wi-Fi System Tools
Check out our Wi-Fi System Charts, Ranker and Finder!

Support Us!

If you like what we do and want to thank us, just buy something on Amazon. We'll get a small commission on anything you buy. Thanks!

Over In The Forums

I have an Asus RT-68U and while it covers the house great, it's not so great out toward the back yard. The house has aluminum siding (which I suspect ...
Not sure whats going on. I'm trying to enable SSH but the option is missing from the Administration > System page. I've looked all over the forums and...
I have been trying to minimize interference with other neighbouring 5Ghz networks but does anyone know why the choices are limited to 36-48 and 149-16...
I'm playing around with iperf3 to test the speed between my laptop and the R7800 (running in AP mode) and between the R7800 and the firewall (OPNsense...
I recently had to login to my router because we had lost power and normally after doing that I have to go in and disable port forwarding for my intern...

Don't Miss These

  • 1
  • 2
  • 3