since this is a very interesting thing i also wrote a bugreport openvpn on RHEL would also support "--engine aesni"
https://bugzilla.redhat.com/show_bug.cgi?id=1025717 Am 01.11.2013 12:13, schrieb Reindl Harald: > why does Fedora's openssl not list "aesni" compared to RHEL? > > the values below are showing it is in fact supported by both, on the > other hand "SSLCryptoDevice aesni" for Apache does not work on Fedora > and i am unsure if it is used automatically by default in that case > > in doubt this may waste factor 8 in performance on modern hardware > http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslcryptodevice > ____________________________________________ > > cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name" > CentOS release 6.4 (Final) > (aesni) Intel AES-NI engine > (dynamic) Dynamic engine loading support > model name : Intel(R) Xeon(R) CPU E5640 @ 2.67GHz > > openssl speed aes-256-cbc > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes > aes-256 cbc 58003.13k 62866.47k 63308.37k 135122.94k 135858.86k > > openssl speed -evp aes-256-cbc > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes > aes-256-cbc 460493.45k 508006.53k 517264.90k 519457.45k 520594.75k > ____________________________________________ > > cat /etc/redhat-release; openssl engine; cat /proc/cpuinfo | grep "model name" > Fedora release 18 (Spherical Cow) > (dynamic) Dynamic engine loading support > model name : Intel(R) Xeon(R) CPU E5640 @ 2.67GHz > > openssl speed aes-256-cbc > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes > aes-256 cbc 58347.04k 63168.39k 64110.99k 135981.36k 137257.23k > > openssl speed -evp aes-256-cbc > type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes > aes-256-cbc 462203.14k 512258.69k 519790.56k 522836.19k 523612.23k
signature.asc
Description: OpenPGP digital signature
-- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
