Kevin Day wrote this message on Sun, May 24, 2015 at 23:15 -0500:
> > On May 24, 2015, at 5:44 PM, John-Mark Gurney <[email protected]> wrote:
> >
> > If you have cryptodev loaded, this is to be expected as OpenSSL will
> > use /dev/crypto instead of the AES-NI instructions.. Just don't load
> > cryptodev and you'll be fine..
>
> So to make sure I???m understanding??? openssl has native AES-NI support, and
> it also can use /dev/crypto. It???s preferring /dev/crypto, but /dev/crypto
> has much higher overhead?
Correct... At least OpenSSL 1.0.1 that started shipping w/ 10.0 has
native AES-NI support... Pre-10.0 doesn't have it...
--
John-Mark Gurney Voice: +1 415 225 5579
"All that I will do, has been done, All that I have, has not."
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
