On Tue, Jan 07, 2020 at 07:50:37PM +0100, Bodie wrote: > On 7.1.2020 17:26, Joe Greco wrote: > >On Tue, Jan 07, 2020 at 09:33:46AM -0600, Edgar Pettijohn wrote: > >>> In reality, when you dig down, often you find that there's another > >>> reason for the issue.?? I was recently trying to substitute libressl > >>> into an openssl environment.?? Performance tanked.?? Some checking > >>> showed the speed of "speed -evp aes-256-gcm" was way off.?? It looked > >>> to me like it was an issue with not using AES-NI.?? I'm not going to > >>> blame libressl for that, I just lacked the time to do a deep dive on > >>> it to figure out what was (hopefully!) configured wrong.?? Probably > >>> something with ia32cap or whatever the libressl equivalent is. > >>> > >>> ... JG > >> > >>I believe it has something to do with actually zeroing out memory > >>before freeing it. Which seems like a good thing to do for crypto > >>stuff. > > > >My apologies. I posted an insufficient description of the issue as it > >was intended as an argument refuting the OP. If we want to discuss my > >issue, that's fine and I welcome the input. I normally manage to > >resolve these things eventually but this stumped me a bit. > > [...] > >Now in the third run, calling the host system's OpenSSL but twiddling > >ia32cap, I get numbers that are very similar to the LibreSSL numbers > >showing a similar catastrophic performance reduction. My conclusion > >is that this is somehow an AES-NI detection issue. For whatever > >reason, > >FreeBSD's openssl gets it right by default. > > > >And the fourth run was "just to see." > > Just WOW > > So you start with blaming OpenBSD for poor performance and then as a > "prove" > you show tests of completely different OS on completely different > filesystem > on God knows which hypervisor and then throw in the mix amd64 vs i386? > > I think Phoronix will hire you ;-)
I did no such thing. I used a problem I encountered as an example of how the original poster's implication isn't true. I did say "I'm not going to blame libressl". And if anything, if you read for comprehension, I defended OpenBSD. But now I kinda remember why I participate so rarely on these lists. ... JG -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net "The strain of anti-intellectualism has been a constant thread winding its way through our political and cultural life, nurtured by the false notion that democracy means that 'my ignorance is just as good as your knowledge.'"-Asimov
