--- On Sun, 2/12/12, Ryan Brown <mp3g...@gmail.com> wrote: > From: Ryan Brown <mp3g...@gmail.com> > Subject: OpenSSL and AES-NI not there? > To: openssl-users@openssl.org > Date: Sunday, February 12, 2012, 7:39 PM > Wanting to use AES-NI extension, but > I'm not seeing it there.. Using > Intel E3-1230 on a KVM VPS, Using OpenSSL 1.0.1-beta2, > straight from a > ./config ; make. > > [root@fanboy:~]# /usr/local/openssl/bin/openssl engine > (dynamic) Dynamic engine loading support > (4758cca) IBM 4758 CCA hardware engine support > (aep) Aep hardware engine support > (atalla) Atalla hardware engine support > (cswift) CryptoSwift hardware engine support > (chil) CHIL hardware engine support > (nuron) Nuron hardware engine support > (sureware) SureWare hardware engine support > (ubsec) UBSEC hardware engine support > (padlock) VIA PadLock (no-RNG, no-ACE) > (gost) Reference implementation of GOST engine > > Not seeing the Intel stuff in the supported engine's, am I > missing > some config option? > > [root@fanboy:~]# cat /proc/cpuinfo > processor : 0 > vendor_id : GenuineIntel > cpu family : 6 > model : 2 > model name : QEMU Virtual CPU version > 1.0 > stepping : 3 > microcode : 0x1 > cpu MHz : 3192.748 > cache size : 4096 KB > fdiv_bug : no > hlt_bug : no > f00f_bug : no > coma_bug : no > fpu : > yes > fpu_exception : yes > cpuid level : 4 > wp : yes > flags : fpu de > pse tsc msr pae mce cx8 apic mtrr pge mca > cmov pse36 clflush mmx fxsr sse sse2 syscall nx lm pni cx16 > popcnt > hypervisor lahf_lm > bogomips : 6385.49 > clflush size : 64 > cache_alignment : 64 > address sizes : 40 bits physical, 48 bits > virtual > power management: > > processor : 1 > vendor_id : GenuineIntel > cpu family : 6 > model : 2 > model name : QEMU Virtual CPU version > 1.0 > stepping : 3 > microcode : 0x1 > cpu MHz : 3192.748 > cache size : 4096 KB > fdiv_bug : no > hlt_bug : no > f00f_bug : no > coma_bug : no > fpu : > yes > fpu_exception : yes > cpuid level : 4 > wp : yes > flags : fpu de > pse tsc msr pae mce cx8 apic mtrr pge mca > cmov pse36 clflush mmx fxsr sse sse2 syscall nx lm pni cx16 > popcnt > hypervisor lahf_lm > bogomips : 6385.49 > clflush size : 64 > cache_alignment : 64 > address sizes : 40 bits physical, 48 bits > virtual > power management: > ______________________________________________________________________ > OpenSSL Project > > http://www.openssl.org > User Support Mailing List > openssl-users@openssl.org > Automated List Manager > > majord...@openssl.org >
Hello there Got the exact problem a while ago too for myself Looks like your VPS didn't pass the aes flag to your virtual processor, that's why AES-NI won't work Maybe you could ask your VPS to enable this feature for you? Once done, you could check with: grep aes /proc/cpuinfo if that returns anything, AES-NI should work for you Hope that helps ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
