This might not be common knowledge yet, but is anyone aware if there are any router models that are able to perform hardware offloading for CC20 used by Wireguard at the moment?

As something running on a EOL 2012 Linux kernel you can imagine that since wireguard was merged Linux 2020 we'll be seing _full_ _stable_ Wireguard support around 2024 (presuming the adoption lifecycle has halved in 8 years).

viewtopic.php?f=2&t=144639
viewtopic.php?f=1&t=156436

https://crypto.stackexchange.com/questi ... ead-of-aes
https://en.wikipedia.org/wiki/MikroTik#Major_versions
https://en.wikipedia.org/wiki/WireGuard

Well, we can only hope that it will come sooner than that! Anyhow I was thinking of RoSv7v1 and if any of the current cpu architectures supports ARX vector operations (like the AVX2 instruction set) that can assist CC20 to offload the cpu in the same way as for AES.