Hi folks,
below you can find the summary of "openssl speed" on the network
appliance. Speed is not amazing, but AFAIU "openssl speed" is
single-threaded. The CPU has 8 cores (no hyperthreading).
Assuming IPsec encryption/decryption is running in kernel space, I
wonder if the OpenBSD kernel can make use of the 8 cores for running
several IPsec connections in parallel? Does it use AES?
Regards
Harri
Intel(R) Atom(TM) CPU C3758 @ 2.20GHz, 2195.40 MHz, 06-5f-01
8 cores
LibreSSL 3.2.2
built on: date not available
options:bn(64,64) rc4(16x,int) des(idx,cisc,16,int) aes(partial) idea(int)
blowfish(idx)
compiler: information not available
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes
md2 0.00 0.00 0.00 0.00 0.00
md4 13724.16k 45836.82k 115244.57k 185000.74k 224988.79k
md5 12057.24k 44613.25k 136613.93k 278648.09k 399437.57k
hmac(md5) 12879.60k 47239.51k 141646.50k 283716.38k 400684.06k
sha1 14261.27k 48934.66k 126469.61k 210988.57k 261128.85k
rmd160 7478.71k 19132.30k 36135.97k 46448.78k 50673.37k
rc4 221676.80k 361020.98k 420244.07k 435180.27k 439858.69k
des cbc 24940.07k 25926.00k 26213.89k 26296.73k 26323.26k
des ede3 9125.12k 9257.70k 9296.80k 9306.83k 9310.58k
idea cbc 19172.98k 19989.11k 20185.22k 20235.06k 20251.39k
seed cbc 0.00 0.00 0.00 0.00 0.00
rc2 cbc 6654.11k 6724.98k 6744.20k 6749.21k 6752.28k
rc5-32/12 cbc 0.00 0.00 0.00 0.00 0.00
blowfish cbc 28152.30k 29404.87k 29758.43k 29873.58k 29907.60k
cast cbc 32971.96k 34915.95k 35399.95k 35561.38k 35606.62k
aes-128 cbc 42748.35k 47506.54k 49266.14k 123527.74k 124700.75k
aes-192 cbc 36277.25k 39905.49k 41139.80k 103818.63k 105167.86k
aes-256 cbc 31742.60k 34425.15k 35314.65k 90007.22k 90667.21k
camellia-128 cbc 45902.96k 76808.12k 92168.33k 97341.92k
98943.57k
camellia-192 cbc 40179.04k 62497.28k 72516.04k 75711.36k
76659.16k
camellia-256 cbc 40040.61k 62499.19k 72515.95k 75711.36k
76678.21k
sha256 17433.04k 41804.06k 73496.15k 90807.03k 97541.95k
sha512 14251.64k 57007.97k 93895.44k 133096.53k 152066.38k
whirlpool 13191.30k 28503.96k 47912.31k 57710.39k 61385.57k
aes-128 ige 42754.84k 44870.36k 45810.90k 45989.51k 46038.50k
aes-192 ige 36277.18k 38005.20k 38754.83k 38883.08k 38926.97k
aes-256 ige 31741.82k 33237.39k 33254.74k 33254.83k 33255.17k
ghash 325142.67k 836113.05k 1256164.95k 1443524.30k 1517196.50k
aes-128 gcm 42352.61k 149903.52k 379077.66k 617644.48k 751160.13k
aes-256 gcm 40132.77k 141596.79k 342723.27k 538803.63k 641956.15k
chacha20 poly1305 12735.36k 48161.34k 91694.86k 119161.28k
130459.64k
sign verify sign/s verify/s
rsa 512 bits 0.000215s 0.000023s 4643.0 44006.6
rsa 1024 bits 0.000546s 0.000053s 1830.9 18834.8
rsa 2048 bits 0.003018s 0.000164s 331.4 6113.8
rsa 4096 bits 0.028494s 0.000586s 35.1 1705.6
sign verify sign/s verify/s
dsa 512 bits 0.000324s 0.000219s 3083.5 4561.2
dsa 1024 bits 0.000518s 0.000409s 1929.2 2447.1
dsa 2048 bits 0.001207s 0.001104s 828.6 905.7
sign verify sign/s verify/s
160 bit ecdsa (secp160r1) 0.0015s 0.0011s 671.4 870.5
192 bit ecdsa (nistp192) 0.0018s 0.0014s 562.5 724.7
224 bit ecdsa (nistp224) 0.0023s 0.0018s 433.5 569.6
256 bit ecdsa (nistp256) 0.0026s 0.0020s 379.7 503.0
384 bit ecdsa (nistp384) 0.0051s 0.0035s 196.5 284.0
521 bit ecdsa (nistp521) 0.0102s 0.0066s 97.8 151.6
163 bit ecdsa (nistk163) 0.0085s 0.0058s 118.3 171.9
233 bit ecdsa (nistk233) 0.0208s 0.0142s 48.0 70.4
283 bit ecdsa (nistk283) 0.0355s 0.0237s 28.1 42.2
409 bit ecdsa (nistk409) 0.0970s 0.0646s 10.3 15.5
571 bit ecdsa (nistk571) 0.2271s 0.1517s 4.4 6.6
163 bit ecdsa (nistb163) 0.0084s 0.0056s 118.6 177.1
233 bit ecdsa (nistb233) 0.0208s 0.0140s 48.2 71.3
283 bit ecdsa (nistb283) 0.0355s 0.0242s 28.1 41.3
409 bit ecdsa (nistb409) 0.0972s 0.0646s 10.3 15.5
571 bit ecdsa (nistb571) 0.2267s 0.1518s 4.4 6.6
op op/s
160 bit ecdh (secp160r1) 0.0013s 774.4
192 bit ecdh (nistp192) 0.0015s 648.7
224 bit ecdh (nistp224) 0.0020s 492.4
256 bit ecdh (nistp256) 0.0023s 432.0
384 bit ecdh (nistp384) 0.0046s 218.1
521 bit ecdh (nistp521) 0.0095s 105.2
163 bit ecdh (nistk163) 0.0082s 121.5
233 bit ecdh (nistk233) 0.0206s 48.6
283 bit ecdh (nistk283) 0.0352s 28.4
409 bit ecdh (nistk409) 0.0966s 10.3
571 bit ecdh (nistk571) 0.2258s 4.4
163 bit ecdh (nistb163) 0.0082s 121.6
233 bit ecdh (nistb233) 0.0206s 48.6
283 bit ecdh (nistb283) 0.0351s 28.5
409 bit ecdh (nistb409) 0.0966s 10.3
571 bit ecdh (nistb571) 0.2258s 4.4
