On Thu, 13 Aug 2009, CH-Kami wrote:
>I'm currently working on a project involving a Sun T5120 and some crypto...
>(I'm also to to OpenSSL & T2)
hi, this is probably not the best alias since OpenSSL team has
nothing to do with the PKCS#11 engine that is shipped with Solaris.
>T2 is supposed to be quite fast for crypto operations :
>
>openssl speed rsa
>
> sign verify sign/s verify/s
>rsa 512 bits 0.0047s 0.0005s 210.7 2072.0
>rsa 1024 bits 0.0246s 0.0014s 40.7 701.3
>rsa 2048 bits 0.1554s 0.0048s 6.4 206.3
>rsa 4096 bits 1.0780s 0.0175s 0.9 57.0
>
>
>openssl speed -engine pkcs11 rsa
>
> sign verify sign/s verify/s
>rsa 512 bits 0.0000s 0.0000s 26514.1 31260.8
>rsa 1024 bits 0.0000s 0.0000s 25112.3 30151.4
>rsa 2048 bits 0.0000s 0.0000s 23563.2 29678.7
>rsa 4096 bits 0.7007s 0.0184s 1.4 54.4
you must always specify "-elapsed" and run it on an idle
computer if HW crypto is used. The time spent used to compute the
numbers is in the user space (while you run it for 10 seconds) so you
got wrong results (better results that you should have).
>Compaired to the first speed test it looks pretty good !
>
>To give me an idea how fast it is, I've run the same test on a desktop
>machine:
>
> sign verify sign/s verify/s
>rsa 512 bits 0.000216s 0.000015s 4637.7 67700.3
>rsa 1024 bits 0.000835s 0.000041s 1197.1 24520.1
>rsa 2048 bits 0.004752s 0.000128s 210.4 7809.1
>rsa 4096 bits 0.030489s 0.000440s 32.8 2273.9
>
>I guess something goes wrong ?
I don't think so. You desktop machine was 100% CPU bound during
that test, unless you have more CPUs. T2 was idle, and utilizing 1
crypto core only (and not even fully). It has 8 crypto cores that can
run in parallel.
also, you may ignore RSA in 512 bits since that's not used
nowadays. The Crypto Framework has some overhead so for operations that
are short the overhead can be a significant part of the overall time.
also note that T2 machines fit great in environments where
things can be paralelized and crypto is needed; an SSL webserver, for
example, but not for a small number of single-threaded tasks.
cheers, J.
--
Jan Pechanec
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
