Re: Crypto hw acceleration for openssl

--adJ1OR3c6QgCpb/j
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Apr 23, 2006 at 09:16:13PM +0200, Oliver Fromme wrote:
+> Winston Tsai <[e-mail]> wrote:
+>  > I got roughly the same performance results when I use the openssl spe=
ed
+>  > test with and without a hifn 7956 cryto card
+>  > [...]
+>  > Then I ran:
+>  > Openssl speed des-cbc
+>  > [...]
+>  > My understanding is that openssl will detect the presence of an
+>  > accelerator card and use it (via \dev\crypto) instead of the crypto
+>  > library.
+>  > Did I miss something here?
+>=20
+> I don't know if the openssl speed test picks up the crypto-
+> dev hardware automatically.  But ssh/scp definitely does.
+>=20
+> I have run several tests on my VIA C3 Nehemiah+RNG+ACE,
+> which accelerates AES encryption.  When the padlock(4)
+> module is loaded (it contains the Nehemiah ACE support),
+> ssh/scp performance is roughly doubled.  It's quite
+> noticeable when transfering large files.
+>=20
+> Best regards
+>    Oliver
+>=20
+> PS:  I can provide some benchmark numbers if interested.

The problem is that OpenSSL don't know how to accelerate AES192 and
AES256 with cryptodev. The patch which fix this is available here:

	http://people.freebsd.org/~pjd/patches/hw_cryptodev.c.patch

PS. For AES128 cryptodev can be used without the patch.

--=20
Pawel Jakub Dawidek                       http://www.wheel.pl
[e-mail]                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

--adJ1OR3c6QgCpb/j
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQFETOBaForvXbEpPzQRAtV+AJsE3Knyr2PvbZYIhaWSKzW37/BbMgCgo0c8
n0pQ7r29vwRFZbnB/bHJQlg=
=8cFe
-----END PGP SIGNATURE-----

--adJ1OR3c6QgCpb/j--