I would like to confirm that openssl.cnf provided by Kurt Roeckx enables padlock support.
With the modified openssl.cnf 'openssl speed -evp aes-128-cbc' gives a speed-up of over 40x (!) for 8192 blocks. I have also verified that the padlock engine is being used by default by applications taking advantage of openssl with a simple scp test. There is a speed-up of about 2.5x. I am willing to perform any additional testing if necessary. Regards, Jan # default config $openssl speed -evp aes-128-cbc Doing aes-128 cbc for 3s on 16 size blocks: 1016865 aes-128 cbc's in 2.91s Doing aes-128 cbc for 3s on 64 size blocks: 270252 aes-128 cbc's in 2.88s Doing aes-128 cbc for 3s on 256 size blocks: 68557 aes-128 cbc's in 2.88s Doing aes-128 cbc for 3s on 1024 size blocks: 34145 aes-128 cbc's in 2.87s Doing aes-128 cbc for 3s on 8192 size blocks: 3322 aes-128 cbc's in 2.20s OpenSSL 1.0.0g 18 Jan 2012 built on: Wed Jan 18 21:31:30 UTC 2012 options:bn(64,32) rc4(4x,int) des(ptr,risc1,16,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -march=i686 -Wa,--noexecstack -g -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DWHIRLPOOL_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128 cbc 5591.01k 6005.60k 6093.96k 12182.75k 12369.92k # new config $ openssl speed -evp aes-128-cbc Doing aes-128-cbc for 3s on 16 size blocks: 7762362 aes-128-cbc's in 2.93s Doing aes-128-cbc for 3s on 64 size blocks: 6498529 aes-128-cbc's in 2.95s Doing aes-128-cbc for 3s on 256 size blocks: 3676285 aes-128-cbc's in 2.92s Doing aes-128-cbc for 3s on 1024 size blocks: 1345834 aes-128-cbc's in 2.90s Doing aes-128-cbc for 3s on 8192 size blocks: 196918 aes-128-cbc's in 2.94s OpenSSL 1.0.0g 18 Jan 2012 built on: Wed Jan 18 21:31:30 UTC 2012 options:bn(64,32) rc4(4x,int) des(ptr,risc1,16,long) aes(partial) blowfish(idx) compiler: gcc -fPIC -DOPENSSL_PIC -DZLIB -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -O3 -march=i686 -Wa,--noexecstack -g -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DWHIRLPOOL_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 42388.32k 140985.04k 322304.44k 475218.63k 548691.24k # scp default $ scp -c aes128-cbc test.dat localhost:/dev/null test.dat 7% 24MB 3.4MB/s 01:28 ETA # scp with new config $ scp -c aes128-cbc test.dat localhost:/dev/null test.dat 36% 117MB 9.1MB/s 00:22 ETA # cat /proc/cpuinfo processor : 0 vendor_id : CentaurHauls cpu family : 6 model : 10 model name : VIA Esther processor 800MHz stepping : 9 cpu MHz : 399.000 cache size : 128 KB fdiv_bug : no hlt_bug : no f00f_bug : no coma_bug : no fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge cmov pat clflush acpi mmx fxsr sse sse2 tm nx up pni est tm2 rng rng_en ace ace_en ace2 ace2_en phe phe_en pmm pmm_en bogomips : 798.00 clflush size : 64 cache_alignment : 64 address sizes : 36 bits physical, 32 bits virtual -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
